Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
File:                     C7ukEkukx8in-dCX7uqpgy8JeWc.mft (raw, json)
Hash identifier:          EM2EF5wQdTQxke5b1kXXWdJaptfObtXAaEwBNSliilY=
Subject key identifier:   6E:81:E0:89:29:AA:05:A2:03:1C:8A:C0:C8:C5:01:44:4C:D4:85:76
Authority key identifier: 0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67
Certificate issuer:       /CN=A91D901E/serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
Certificate serial:       77
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
Manifest number:          75
Signing time:             Wed 25 Mar 2026 07:01:34 +0000
Manifest this update:     Wed 25 Mar 2026 07:01:33 +0000
Manifest next update:     Wed 01 Apr 2026 07:01:33 +0000
Files and hashes:         1: C7ukEkukx8in-dCX7uqpgy8JeWc.crl (hash: P+s94w/4hw/ibGLeLnNO8oVKELkJ0dFWqEmPg+PzrTU=)
                          2: 58F7915E78DC11F084C71D2BC4F9AE02.roa (hash: SoN2OmaKDx3s/tXFdxvFr9GR6YOZ0tZJgZDuBgai0t4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:01:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=0BBBA4124BA4C7C8A7F9D097EEEAA9832F097967
        Validity
            Not Before: Mar 25 07:01:33 2026 GMT
            Not After : Apr  1 07:01:33 2026 GMT
        Subject: CN=69c3884e-ff50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:33:41:a4:9b:ae:38:8d:75:9f:fd:87:dc:ab:
                    6e:89:bd:08:18:ac:a5:04:39:2d:44:29:51:e5:5e:
                    7f:a5:b7:dd:14:30:33:8a:86:4c:b6:ba:2c:ec:42:
                    90:4b:bf:4a:fc:33:6b:98:21:3a:1b:fa:6b:6d:df:
                    11:94:53:45:f6:24:16:4b:0b:7e:c7:a0:97:ef:80:
                    38:38:3f:aa:79:35:f6:89:b4:b6:94:ad:a7:7a:40:
                    fa:48:3a:a3:75:5a:ae:00:d8:e2:b3:72:c3:3b:83:
                    6b:7e:e3:4e:7f:99:32:1d:8a:61:00:74:b0:7c:07:
                    b3:c5:40:f4:d8:1b:5c:32:89:58:ac:6a:36:39:63:
                    99:5d:44:9d:65:28:7f:4d:e1:34:a7:68:b6:46:38:
                    a5:52:cf:e2:37:d3:ec:af:88:04:32:a3:9b:ad:04:
                    27:74:f2:83:55:f8:29:fd:6f:66:38:86:ad:58:5f:
                    0c:f0:c1:e8:02:d0:c1:aa:c4:07:57:6b:86:29:0f:
                    dd:6e:03:0b:f3:75:4d:bd:f4:d5:b5:80:56:7a:55:
                    c5:ac:50:19:9c:d8:a1:4c:a2:f4:68:99:c5:80:4b:
                    3f:b4:69:61:e8:e0:bf:bb:e5:5b:a2:d9:25:89:5a:
                    90:f9:40:6d:cc:47:f1:98:fd:f5:96:58:d0:1d:0b:
                    90:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:81:E0:89:29:AA:05:A2:03:1C:8A:C0:C8:C5:01:44:4C:D4:85:76
            X509v3 Authority Key Identifier:
                keyid:0B:BB:A4:12:4B:A4:C7:C8:A7:F9:D0:97:EE:EA:A9:83:2F:09:79:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C7ukEkukx8in-dCX7uqpgy8JeWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/E6E880D878DA11F0B0FBE216C4F9AE02/C7ukEkukx8in-dCX7uqpgy8JeWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:d0:ae:b8:c4:4b:28:47:dc:c4:c9:4d:6a:28:41:aa:a2:de:
         89:ec:f9:28:e6:9b:cd:b9:c7:00:51:b4:ae:f9:87:35:bd:71:
         bf:7f:15:d3:b5:b2:47:28:8b:18:6f:23:29:97:6d:98:24:09:
         eb:bb:96:d0:c9:72:09:fa:eb:02:0e:0c:b0:b0:c9:07:ca:26:
         6f:26:bc:11:d8:04:73:f0:96:52:11:63:db:b9:6d:2b:1b:37:
         04:fb:1d:28:eb:63:3f:c4:81:23:e6:d5:7c:63:af:5a:97:c3:
         77:b2:2e:4f:53:3a:b2:32:a4:be:88:3c:20:9f:e4:3b:27:45:
         ff:ec:00:5e:9a:33:03:c2:80:2a:08:e4:11:34:e2:10:a2:55:
         df:99:1d:10:fa:dc:60:21:f6:86:da:49:75:98:f5:83:85:24:
         0a:cf:04:a6:af:cc:aa:35:ad:30:5b:93:e9:ac:58:07:6e:5c:
         fc:c1:06:5a:dc:83:e9:7e:a9:72:8e:4a:61:4e:2b:9f:72:3a:
         f8:95:c1:58:30:01:fa:98:4f:2c:2f:50:44:bf:c1:ae:a4:cf:
         32:d3:02:01:0f:2e:8d:11:02:aa:85:97:95:a1:8b:d2:f5:5b:
         d6:97:2d:1b:e3:ac:b0:b3:98:89:4e:7d:4c:f6:d8:f6:0f:93:
         5e:8a:00:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:40 2026 by rpki-client