Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
File:                     J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft (raw, json)
Hash identifier:          8eBnLAfXyEj5mgZw+k4vi25Pwo+I4uG+Pxda0UCTXQ8=
Subject key identifier:   3E:24:62:95:C0:4C:71:3B:76:8C:56:9D:B2:3E:0D:38:C2:E6:49:CF
Authority key identifier: 27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B
Certificate issuer:       /CN=A91BBCAF/serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
Certificate serial:       01D6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
Manifest number:          01CF
Signing time:             Wed 25 Mar 2026 03:00:09 +0000
Manifest this update:     Wed 25 Mar 2026 03:00:08 +0000
Manifest next update:     Wed 01 Apr 2026 03:00:08 +0000
Files and hashes:         1: J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl (hash: SaEy5PFhtLAip+/GSUFLBgzN6F4yLa1Wh02JkWnie2w=)
                          2: D2FA5DBE6C1E11EEBB9EAB7AC4F9AE02.roa (hash: J6Y3ZNT+bC1GeTc3d3jK1qQ4TJKGsID3LkvkrzzuZw0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl
                          rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:00:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BBCAF, serialNumber=27B2E662914822136B0962DBB5BA447C253F521B
        Validity
            Not Before: Mar 25 03:00:08 2026 GMT
            Not After : Apr  1 03:00:08 2026 GMT
        Subject: CN=69c34fb9-6b15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:13:3c:cd:e8:84:50:b5:b2:64:28:0a:82:e4:
                    c4:37:2f:6b:17:85:66:f0:f2:88:58:3a:ac:1f:b1:
                    b5:09:21:39:d2:9f:f2:0c:eb:97:9d:5c:ee:c0:3d:
                    f2:13:35:fb:75:41:3b:cd:85:93:5e:32:4b:d8:d6:
                    3a:77:62:30:43:5c:f7:e9:d3:7e:93:26:1b:82:41:
                    f2:10:97:d1:30:f0:b1:c2:30:20:93:3c:e6:c7:44:
                    12:55:42:ae:53:95:13:5c:c3:4e:76:2f:70:bb:8e:
                    ae:01:6d:33:72:b7:dc:d3:45:c8:98:03:89:f9:ae:
                    8b:d2:6d:dc:58:ce:cc:e0:09:b7:b4:66:ab:d3:c2:
                    5b:5f:c9:1b:22:26:db:47:45:15:69:8e:77:54:aa:
                    56:33:42:1a:c4:4e:a2:96:64:bb:61:36:01:a8:75:
                    a6:d2:dc:74:ae:1b:ad:b2:f3:a7:a4:0d:d0:36:ff:
                    fa:4b:09:83:90:a4:ce:e4:5f:80:8f:1a:c9:e5:fe:
                    68:fc:c9:a1:5f:01:f0:ef:f5:9a:fc:2d:3a:0e:05:
                    8a:65:e1:82:95:9e:e8:33:e8:e6:61:66:e8:1d:75:
                    0c:23:d6:88:f4:0c:2d:8a:d8:f6:f1:78:77:b1:ad:
                    a0:81:c9:8a:d3:98:61:25:7f:3b:88:56:20:87:13:
                    5a:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:24:62:95:C0:4C:71:3B:76:8C:56:9D:B2:3E:0D:38:C2:E6:49:CF
            X509v3 Authority Key Identifier:
                keyid:27:B2:E6:62:91:48:22:13:6B:09:62:DB:B5:BA:44:7C:25:3F:52:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BBCAF/0F61886A6B3211EE9B522053C4F9AE02/J7LmYpFIIhNrCWLbtbpEfCU_Uhs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:76:b3:91:78:b9:57:3e:56:32:4c:fc:93:96:b3:87:f4:07:
         42:72:f2:b3:f8:f0:ee:65:5b:2b:1c:06:7b:e1:e3:ae:9e:77:
         ad:c7:24:f9:d9:66:95:3b:92:b4:2d:1b:a2:8a:88:27:44:a6:
         f0:12:60:5a:1a:75:3e:78:93:9a:f8:6b:ac:00:20:95:90:70:
         93:52:57:45:41:a5:79:39:0f:ff:cb:72:70:5b:a9:07:70:31:
         1f:45:04:07:0b:6d:9e:97:d2:b1:e8:b6:29:95:1b:27:4a:7e:
         3d:71:83:ce:9e:a7:23:b0:64:6b:16:3d:32:cd:99:56:4e:4c:
         30:7c:b0:76:7a:10:3a:3b:79:15:ce:46:03:e5:02:13:70:bf:
         b8:e6:8f:2f:0b:d2:b4:45:ed:f5:b8:72:a0:c5:24:45:d0:6c:
         00:f9:a7:60:07:39:76:7d:5d:63:01:8f:cc:b0:95:85:42:9a:
         39:4b:34:52:fe:ee:f5:20:c0:90:f8:72:a1:df:a1:c8:5b:3b:
         d4:63:07:0c:e3:99:7b:71:83:53:bd:1e:6d:19:8d:8f:d2:7b:
         38:24:52:b1:b6:99:30:18:22:32:37:bc:50:9e:11:b5:67:c0:
         91:6f:2b:29:42:4d:0d:89:3e:60:77:3c:9a:41:7f:fe:da:0d:
         06:a0:ca:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:01:48 2026 by rpki-client