Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
File:                     7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft (raw, json)
Hash identifier:          o9MA8GMFv3Ky31zNMhkyPuV0GhlgPTnRwTRAnlpw9cQ=
Subject key identifier:   45:84:E5:EF:23:FE:1E:E3:6E:2B:0F:E9:D1:C5:51:6A:78:57:AB:FB
Authority key identifier: EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6
Certificate issuer:       /CN=A91982B6/serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
Manifest number:          FF
Signing time:             Mon 11 May 2026 06:16:15 +0000
Manifest this update:     Mon 11 May 2026 06:16:14 +0000
Manifest next update:     Mon 18 May 2026 06:16:14 +0000
Files and hashes:         1: 7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl (hash: CHz6Ma0z/4PeuvMC/NSczSK08WeSs45+gFy3HXSpJQY=)
                          2: 739C8BDECB5A11EFBEE64062C4F9AE02.roa (hash: zNeCIz79QyLjKaLa6KZk2f88rwvGe93u3cvB8Yfkn+Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl
                          rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91982B6, serialNumber=EC679169177B9E131D0DAA01398D70039827D1F6
        Validity
            Not Before: May 11 06:16:14 2026 GMT
            Not After : May 18 06:16:14 2026 GMT
        Subject: CN=6a01742f-a53f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c9:94:81:7c:2b:9b:7a:18:86:0f:03:08:ca:
                    b3:34:ea:98:8a:8f:48:73:fd:7a:36:2a:23:d2:88:
                    08:92:d0:81:cc:a9:92:a3:84:2f:bc:20:a1:57:3e:
                    c7:7f:79:ea:e1:89:ca:3a:0c:d1:37:59:66:f3:a8:
                    21:0e:8f:21:5c:26:c6:98:ad:c7:51:25:5b:22:97:
                    e0:ec:2e:ae:ad:71:13:34:60:5d:66:88:f6:08:81:
                    84:68:97:9c:71:85:29:93:3f:54:a0:91:3f:d9:48:
                    b1:c5:d4:02:d9:ad:ab:84:16:9e:ce:86:c0:3d:a0:
                    01:59:30:ee:f7:04:f9:38:4f:fe:8c:aa:bd:96:dd:
                    62:87:b2:a0:97:19:81:22:b4:31:80:d9:e3:a4:4d:
                    77:7d:5a:19:29:08:83:4b:50:89:b0:fd:c0:87:0e:
                    c0:1d:cc:66:3a:fd:3d:df:17:3c:68:c9:4b:95:af:
                    de:e0:5b:0f:3b:c3:95:94:0e:03:b4:ea:5a:63:d5:
                    df:96:e9:1d:75:8a:2f:38:cb:67:d0:cb:49:27:81:
                    fe:64:1a:d7:64:bc:a0:2d:74:3a:8d:5c:81:f8:6c:
                    1f:45:d3:b5:78:6d:d1:9b:b0:87:12:07:58:b6:0c:
                    50:44:61:04:1d:82:48:bd:ac:1f:ea:da:1a:3b:e2:
                    81:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:84:E5:EF:23:FE:1E:E3:6E:2B:0F:E9:D1:C5:51:6A:78:57:AB:FB
            X509v3 Authority Key Identifier:
                keyid:EC:67:91:69:17:7B:9E:13:1D:0D:AA:01:39:8D:70:03:98:27:D1:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7GeRaRd7nhMdDaoBOY1wA5gn0fY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91982B6/E64B03B4CB5911EF86915B61C4F9AE02/7GeRaRd7nhMdDaoBOY1wA5gn0fY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:41:2b:ac:cf:65:de:d7:f0:69:eb:35:bb:0d:df:ec:be:05:
         a7:10:b2:cc:9b:69:d2:94:69:09:e9:18:ed:d8:09:cc:b3:94:
         f0:11:5a:fe:aa:1f:b5:d5:5b:23:83:7f:a0:8f:1b:f0:d8:8e:
         9f:c0:eb:ca:5b:bd:08:2c:b5:5f:a7:60:d2:7f:3f:9e:53:b1:
         93:fd:02:b1:8a:b4:a7:7b:43:6d:c6:5a:24:83:01:40:2b:a0:
         c7:7b:93:8d:18:77:c7:b1:44:91:69:19:75:df:a8:17:12:7a:
         69:7a:8b:cb:46:22:3c:9e:ee:67:e7:c7:e4:44:46:84:8a:f4:
         7e:75:36:06:0d:1b:67:3d:ab:17:64:d9:21:06:3b:0e:2e:78:
         47:5e:57:c4:cb:72:e4:26:82:54:e0:8e:f1:0d:df:dd:2b:5f:
         bf:64:07:0e:61:dc:16:63:d1:00:08:19:66:5f:7e:db:25:1d:
         8f:7a:e4:9a:85:eb:20:7a:95:c6:a9:69:2a:50:01:f8:e0:88:
         0c:ad:cf:76:38:30:e3:c1:33:65:78:38:cd:72:f6:b1:26:65:
         b9:f9:aa:22:cc:81:86:51:dd:f2:17:4f:6f:52:7c:46:39:a6:
         81:68:be:7a:92:dc:dd:a0:01:38:6f:ac:fe:2a:4f:45:d9:47:
         d7:7d:ff:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:13:54 2026 by rpki-client