Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
File:                     7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft (raw, json)
Hash identifier:          mXwtNotF7zGN5gqFSUkOCUybaXPPyNzmh9XME1s07YI=
Subject key identifier:   75:DE:E6:D7:AB:29:8D:12:D4:50:1A:2E:5C:D5:BD:DF:AD:32:16:8B
Authority key identifier: EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96
Certificate issuer:       /CN=A91BCB3A/serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
Certificate serial:       0BD6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
Manifest number:          0BC4
Signing time:             Tue 12 May 2026 19:05:16 +0000
Manifest this update:     Tue 12 May 2026 19:05:15 +0000
Manifest next update:     Tue 19 May 2026 19:05:15 +0000
Files and hashes:         1: 7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl (hash: af8Cs+ARO2dywPYZ7LmOZ+M7iz/dqZXFs8/7tiIgz/s=)
                          2: 34492F3A13A011F0B2541067C4F9AE02.roa (hash: O+Nxart/msHPIUG+f5HL+a0YYfI1EPFP2HyqAxZNDXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl
                          rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:05:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3030 (0xbd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BCB3A, serialNumber=EE5EC37F3D3BC57599F3C73C52226E7EE050BF96
        Validity
            Not Before: May 12 19:05:15 2026 GMT
            Not After : May 19 19:05:15 2026 GMT
        Subject: CN=6a0379ec-52c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:27:cf:fb:8f:6f:0e:49:e2:9a:5e:48:c6:32:
                    36:8b:06:61:91:78:1e:6a:af:60:5f:c1:5b:6f:a1:
                    68:8d:1a:15:b1:5d:3a:4b:ed:5c:10:55:cd:ad:48:
                    9e:3e:40:9b:cf:be:5a:dd:88:92:b0:37:97:51:74:
                    97:43:e1:41:73:b3:82:b7:3f:4c:ae:78:6f:28:23:
                    9a:a3:42:f8:8d:88:d8:0e:a6:a8:d0:ba:23:fa:71:
                    09:f1:b9:66:8f:65:14:66:ec:9a:ac:aa:cd:2e:62:
                    9e:7e:5e:24:fb:e3:23:6e:18:f1:ba:2c:25:ab:06:
                    01:3c:e6:30:47:d6:80:0d:08:4e:21:b2:71:9c:82:
                    49:14:f2:84:bc:a8:7e:ac:ee:55:58:bc:c2:3c:24:
                    38:02:da:65:73:5a:fb:e0:82:08:1d:a3:97:c4:02:
                    c5:77:1a:50:cb:16:67:70:90:88:5d:c4:46:92:32:
                    cb:cb:6e:2e:15:3b:86:60:ce:de:71:c1:c1:40:ad:
                    e9:aa:dd:4b:de:a0:79:50:9e:b3:7d:b7:96:90:5a:
                    18:87:6d:e1:e0:51:b2:75:ae:0b:c0:ca:ab:aa:6e:
                    86:50:40:dc:d6:98:2f:f9:52:c5:4f:0d:1a:97:f1:
                    d9:55:49:f9:44:ea:3e:b0:f8:c0:da:c4:4f:d0:9a:
                    72:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DE:E6:D7:AB:29:8D:12:D4:50:1A:2E:5C:D5:BD:DF:AD:32:16:8B
            X509v3 Authority Key Identifier:
                keyid:EE:5E:C3:7F:3D:3B:C5:75:99:F3:C7:3C:52:22:6E:7E:E0:50:BF:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7l7Dfz07xXWZ88c8UiJufuBQv5Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BCB3A/9AD6C5B8458411EAA46E7571C4F9AE02/7l7Dfz07xXWZ88c8UiJufuBQv5Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:87:4f:d5:b3:ae:fc:a0:1e:6c:e4:4e:10:8e:4f:08:ed:58:
         ed:cd:f0:b9:76:e3:1c:77:8c:6c:2a:2f:74:e4:e1:23:4f:30:
         41:af:0c:c3:6d:5d:78:41:fa:fe:dd:3a:c4:29:de:e3:91:6d:
         9c:2b:45:4e:46:05:01:67:a9:24:89:32:9b:24:fe:e3:66:8d:
         98:67:3d:7a:fa:e6:6d:f2:fd:29:86:24:4c:bf:af:bc:c1:af:
         fa:23:94:11:3c:70:b1:7e:72:de:5b:ea:7c:05:de:83:55:35:
         a1:64:aa:16:ea:ad:0b:85:2f:c9:4a:c4:52:86:08:b5:6d:d3:
         6c:c1:de:cb:2c:9d:ec:a7:a2:d3:b1:32:1b:99:d1:d5:4a:c0:
         b9:29:ca:2f:6d:ee:5f:a4:f1:97:e9:5a:bf:54:ad:0a:45:cb:
         d1:41:9c:90:21:4c:32:d2:79:ac:fe:b4:94:a3:77:bb:00:4c:
         f3:c4:a9:0f:91:22:67:b1:43:09:96:f4:db:f7:75:64:f0:40:
         1a:27:ca:a7:bd:c1:a0:d2:db:e7:2e:8e:9e:25:6a:60:fb:e5:
         78:d2:f0:54:13:ff:fd:b3:0b:62:ef:96:17:0f:52:29:a4:aa:
         17:d9:05:b3:d7:82:4a:87:77:98:cb:d7:7f:f3:12:c3:4b:3b:
         5a:c7:20:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:04 2026 by rpki-client