Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
File:                     07TuvD2fWh6iApZpmumSiBsdjf0.mft (raw, json)
Hash identifier:          vJ7UjvmiWwk7uQH3mh/qER+XtbmDUqwtsz6Y7SoYb70=
Subject key identifier:   B9:36:FD:C7:B4:B4:1C:DF:6D:0F:A3:16:65:F7:99:0E:4C:70:AE:1A
Authority key identifier: D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD
Certificate issuer:       /CN=A91CD4E0/serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
Certificate serial:       070A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
Manifest number:          0705
Signing time:             Tue 12 May 2026 14:49:11 +0000
Manifest this update:     Tue 12 May 2026 14:49:10 +0000
Manifest next update:     Tue 19 May 2026 14:49:10 +0000
Files and hashes:         1: 07TuvD2fWh6iApZpmumSiBsdjf0.crl (hash: tAgTN/ix3qVcNqyaf784dVOYEK+JWTVhmLUtcVyZKjU=)
                          2: E969742CB33B11EEB4D87842C4F9AE02.roa (hash: 7lIGItgwakyIm1ogfbfmJas4qk4ZwY4pDMQ8JsNuNZY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:49:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1802 (0x70a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD4E0, serialNumber=D3B4EEBC3D9F5A1EA20296699AE992881B1D8DFD
        Validity
            Not Before: May 12 14:49:10 2026 GMT
            Not After : May 19 14:49:10 2026 GMT
        Subject: CN=6a033de7-4e18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e0:79:ca:71:b6:f2:a8:64:df:3a:0a:c3:94:
                    0d:e2:85:34:fe:45:b7:12:02:f2:9a:26:58:67:5e:
                    33:2c:18:69:06:d2:ba:98:1b:11:4c:77:88:2c:b6:
                    6e:ba:9b:f7:80:bb:33:a3:7b:c5:39:30:c8:1a:70:
                    eb:ae:83:f2:ff:c2:88:40:34:ec:24:2b:a8:a3:df:
                    35:6a:9b:28:4f:73:22:3e:5d:e3:ed:0a:5a:b5:14:
                    c3:d0:e9:ea:4d:ef:4e:fa:f9:64:e8:0d:7a:d2:38:
                    dc:fa:07:53:12:05:ca:84:5e:66:4b:68:34:99:44:
                    c2:fb:f5:29:a5:63:bb:c4:6c:87:70:36:0b:19:53:
                    8b:59:4a:da:20:6a:64:87:30:e9:a1:2f:31:d2:49:
                    58:94:52:22:79:31:f3:8b:1f:58:57:c8:90:e0:1c:
                    18:c6:97:13:69:ee:2f:5d:91:07:66:1b:11:b9:df:
                    b9:df:34:47:be:70:02:e2:3c:ef:5b:df:5e:40:ac:
                    f0:9e:e8:28:ad:4e:eb:eb:0b:b9:65:05:48:65:63:
                    8b:7f:e0:55:cb:42:fc:73:4d:67:58:b3:81:d7:30:
                    f7:97:40:59:20:b6:54:71:9c:27:46:69:9c:99:a2:
                    0e:38:7c:41:75:53:e7:f9:d1:3b:8b:77:32:d9:7e:
                    7b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:36:FD:C7:B4:B4:1C:DF:6D:0F:A3:16:65:F7:99:0E:4C:70:AE:1A
            X509v3 Authority Key Identifier:
                keyid:D3:B4:EE:BC:3D:9F:5A:1E:A2:02:96:69:9A:E9:92:88:1B:1D:8D:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/07TuvD2fWh6iApZpmumSiBsdjf0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD4E0/834571168D7B11EB8D8BD60BC4F9AE02/07TuvD2fWh6iApZpmumSiBsdjf0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:bf:ab:2b:12:9d:f8:a8:17:dd:4b:71:b7:92:07:35:f1:dc:
         92:ce:3c:65:bb:27:a1:48:0a:39:0b:0d:28:56:ab:32:f2:c2:
         5d:5c:8f:a3:32:da:21:ed:2d:9b:bd:74:6e:f6:47:c0:99:dc:
         8a:a6:fa:01:2e:1c:d9:f2:d1:e6:ee:53:52:82:f4:c4:90:1d:
         85:90:44:5a:75:c7:b8:8f:9b:16:2c:e2:57:9e:e9:1c:93:fd:
         1b:3a:8a:b5:22:ad:2c:29:5e:27:22:ca:dd:56:30:7e:09:f6:
         ff:df:b5:12:9a:e1:a4:4a:54:c4:d9:10:8f:69:95:1a:ec:d0:
         14:f8:58:93:16:60:91:39:69:52:58:db:e4:00:51:01:6b:fa:
         99:e0:61:91:3c:65:4b:18:ae:27:b3:23:8e:04:ea:77:ac:7e:
         80:6b:27:0d:2a:a9:4d:fe:ca:b8:bc:87:a9:6e:56:09:90:fc:
         f0:78:4d:2e:e0:7b:46:19:73:a0:ab:ef:c1:5b:2f:d2:70:63:
         83:d8:88:c2:65:e2:9e:14:03:7e:7b:67:6b:8e:ab:b3:30:86:
         87:08:a6:03:d1:e3:8d:49:1a:f4:a3:d0:c0:ca:b0:1b:dc:30:
         c7:da:61:b3:e2:69:22:b2:d2:88:f8:d4:a8:71:be:81:3e:f7:
         c1:f8:c0:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:01:57 2026 by rpki-client