Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          H/qXHpq7wZB6YBHgJ7Zcm/qPMDNRpZg6sMgAlZ4WCHo=
Subject key identifier:   C0:15:A0:34:04:32:6A:24:CD:3E:2F:9C:FF:DA:9C:E8:3C:F6:F0:6A
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       18
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          16
Signing time:             Fri 17 Apr 2026 08:42:33 +0000
Manifest this update:     Fri 17 Apr 2026 08:42:33 +0000
Manifest next update:     Fri 24 Apr 2026 08:42:33 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: GhFmHph9R8Evrx/64/K9TWh5AQ1n4k4p07fbEZMsqXI=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:42:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: Apr 17 08:42:33 2026 GMT
            Not After : Apr 24 08:42:33 2026 GMT
        Subject: CN=69e1f279-a9bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:1c:f4:f4:f0:18:ab:a0:a3:69:67:56:7b:8f:
                    fe:a5:8e:8a:b7:a3:69:59:98:97:c2:fe:c6:4e:91:
                    91:01:d4:a9:58:2b:ab:35:dd:12:13:6c:31:cf:be:
                    ec:54:f0:3d:21:13:98:19:30:b1:8b:e2:28:23:f7:
                    b6:d5:85:28:7c:ed:06:3f:c8:37:9e:b2:89:a4:7e:
                    31:4e:30:20:27:b7:12:b5:92:77:12:c4:a8:69:77:
                    b7:8b:a8:c6:8a:fc:ce:4a:17:ca:b1:10:7c:be:1f:
                    e3:7f:a2:15:44:49:47:cb:ce:6f:bc:e0:98:7d:a3:
                    9c:99:ad:74:53:74:8d:dd:61:b5:f7:e3:e5:9d:c8:
                    fb:d4:6c:5a:a1:c9:d4:0c:35:fb:0a:28:8c:62:7a:
                    62:5d:6e:37:c8:4d:8b:1d:d3:66:5b:3c:c6:69:0f:
                    c0:7d:26:70:a3:83:3c:91:bd:fb:85:13:3f:04:04:
                    cc:e6:4c:9c:96:3f:62:0a:da:de:90:c9:de:6e:e6:
                    1c:20:50:72:d0:32:80:2c:07:39:8f:56:14:9c:f0:
                    6a:5a:b9:85:0a:c4:97:c3:d4:01:fb:84:86:45:99:
                    c1:82:ed:12:bb:ee:47:c5:28:c1:8c:f9:d7:f7:47:
                    ae:42:c8:53:67:35:2e:d2:9d:d0:eb:77:d6:cb:3d:
                    14:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:15:A0:34:04:32:6A:24:CD:3E:2F:9C:FF:DA:9C:E8:3C:F6:F0:6A
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:39:5a:a6:3d:d9:e9:2c:4c:f1:b5:d0:8a:79:fe:18:74:bb:
         26:3c:ae:a0:86:d3:3c:53:07:54:80:c2:e8:dd:06:24:e9:5c:
         8b:2a:19:5d:9e:cc:95:df:69:09:63:ae:b5:43:b3:50:fa:42:
         33:a2:36:6a:2b:bb:c4:8d:7f:f8:8f:4e:9f:cb:de:16:7a:9c:
         8c:68:0f:62:4e:05:30:cc:f5:67:f8:35:c2:6b:94:73:ae:bf:
         5b:27:d9:46:38:40:fb:2d:a6:b7:a2:9c:9f:7c:8b:15:8a:d9:
         68:0f:eb:77:68:f9:58:d3:6b:4a:72:32:c5:8d:93:55:48:d7:
         ae:0c:3f:d4:c4:65:85:6e:38:37:27:b7:14:1f:45:0e:d9:82:
         74:5e:c0:5b:aa:56:0f:e6:3a:e1:3c:14:d0:56:08:b5:7e:38:
         1f:a4:16:64:e3:85:85:71:21:84:44:65:c1:7d:e8:b0:c7:51:
         1a:0e:30:bb:99:5c:7d:d3:2b:81:3c:41:a8:3d:b6:6f:85:aa:
         3c:a7:76:b4:46:4a:86:44:9e:76:94:bc:ca:bf:74:26:df:2b:
         4a:91:16:ff:f4:90:1e:0d:eb:ec:01:ca:89:68:c4:ea:91:dd:
         77:2b:b6:ec:7b:a5:72:1e:57:20:97:39:4b:97:f0:bc:90:81:
         7a:46:ee:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:23:26 2026 by rpki-client