Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
File:                     7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft (raw, json)
Hash identifier:          vrskSYPkxwfTg/EPoNFT/8OPr4nGUeUtadq69nMoDLM=
Subject key identifier:   4D:CB:B8:87:62:7C:FB:0E:D9:84:FE:C7:FC:76:7F:EC:D0:D9:05:DF
Authority key identifier: EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA
Certificate issuer:       /CN=A91D63AF/serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
Certificate serial:       01C3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
Manifest number:          01BB
Signing time:             Mon 11 May 2026 04:35:59 +0000
Manifest this update:     Mon 11 May 2026 04:35:59 +0000
Manifest next update:     Mon 18 May 2026 04:35:59 +0000
Files and hashes:         1: 7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl (hash: SlnOgNQhCbtxbLgvb1RuliP67vWp95SWaszxlNpofHE=)
                          2: E3E47D36B6B911EE8E72C641C4F9AE02.roa (hash: YjRa1pB30YYbPQePj+r96aLADC7aXekCFySJbOFg6Mg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl
                          rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 451 (0x1c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D63AF, serialNumber=EF30A24146DF66B1FA6FBA5D676769EB64B387AA
        Validity
            Not Before: May 11 04:35:59 2026 GMT
            Not After : May 18 04:35:59 2026 GMT
        Subject: CN=6a015caf-25a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:88:fd:41:4e:17:df:73:7b:dc:10:d4:26:f8:
                    5c:13:7b:eb:6f:e0:a0:87:49:25:d4:21:5a:93:0a:
                    f1:b0:cc:38:fa:0d:da:65:d3:9f:00:66:29:68:85:
                    55:04:33:5f:6e:51:a1:e9:d2:f3:f6:70:11:fa:26:
                    c3:47:51:cc:87:50:f6:c2:04:2a:c7:71:77:0e:02:
                    9c:75:ff:52:20:fd:73:26:e2:db:6e:9b:a3:0b:a0:
                    68:99:99:d4:72:2c:8b:ec:f2:7d:ad:61:48:ac:0a:
                    d4:24:a8:b5:47:21:c8:c1:3d:ac:90:84:b8:71:1d:
                    f6:24:d0:b4:7a:f5:1b:84:f7:58:9f:55:77:e3:f0:
                    8c:bc:5b:55:a1:86:7f:97:b6:38:29:6d:8f:e9:50:
                    70:36:1b:6c:ae:d3:b5:6c:5b:1f:eb:b8:14:02:46:
                    0f:e0:b9:64:7b:a0:3e:4d:92:fe:fb:8e:e6:a0:2c:
                    8e:de:8b:06:4e:3c:89:a4:11:99:2e:e6:83:d7:ed:
                    92:35:72:13:14:02:2e:57:e1:66:e0:7c:f6:93:32:
                    1a:e5:f4:f1:63:03:16:b9:95:41:7e:8e:1e:62:cd:
                    54:b0:56:7c:67:58:d0:cf:0e:07:bd:76:56:f0:5d:
                    d6:88:6a:45:84:f3:27:26:f8:52:b5:9c:b5:d1:93:
                    cb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:CB:B8:87:62:7C:FB:0E:D9:84:FE:C7:FC:76:7F:EC:D0:D9:05:DF
            X509v3 Authority Key Identifier:
                keyid:EF:30:A2:41:46:DF:66:B1:FA:6F:BA:5D:67:67:69:EB:64:B3:87:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7zCiQUbfZrH6b7pdZ2dp62Szh6o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D63AF/E14D1AB4B6A611EEA04A8B23C4F9AE02/7zCiQUbfZrH6b7pdZ2dp62Szh6o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:92:85:6b:bf:64:56:36:3f:98:a1:24:62:ba:10:13:ee:1d:
         d8:5b:a2:7a:27:fb:de:26:1b:88:14:72:13:af:d1:0d:79:cc:
         ad:f6:f9:a7:2a:04:ba:a4:20:8a:b4:01:1c:a6:0e:60:96:b9:
         0e:0a:3d:73:52:bc:6a:57:dd:28:57:3f:44:69:b6:cc:79:b7:
         e2:e6:0b:9e:cd:58:ce:5a:63:b5:85:4d:48:b4:b5:f3:b8:ac:
         1c:bf:2a:42:66:6b:d0:29:e8:19:7b:ae:a7:96:e5:ec:38:ad:
         75:cf:55:f3:bb:34:7f:75:77:38:52:dc:d6:6c:cf:fb:3e:27:
         fc:cf:49:b5:20:0f:e4:e0:69:76:b7:5f:e8:dd:8c:82:a7:b7:
         9a:30:46:52:62:7e:db:8e:e1:bb:57:c2:20:68:a6:30:d2:48:
         a6:29:75:a1:1e:a4:0d:52:af:58:c9:28:ff:32:d3:2f:cd:24:
         fe:3f:d1:9f:66:8a:ab:88:62:18:c8:bd:c1:04:46:14:a1:df:
         b8:3a:37:94:38:cd:3d:c1:7d:09:2d:d6:0a:03:24:d3:2c:75:
         b8:a0:d7:e8:18:93:57:9f:14:4e:98:81:99:5b:f2:56:80:c6:
         53:90:51:a3:cc:05:7e:e0:fb:eb:ce:7b:80:a2:80:8b:46:13:
         8d:86:ab:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:29:11 2026 by rpki-client