Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
File:                     fn476Ik3CnHlUhVXuwOgDxs5v9g.mft (raw, json)
Hash identifier:          cT/OQ5inGUKMZ2LXYgiOtKV8NNN/ZkfpoXZs/3u7A7A=
Subject key identifier:   6D:69:31:A3:AD:F6:7C:C4:C1:27:A9:9F:6C:0F:C9:62:F9:70:7C:BB
Authority key identifier: 7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8
Certificate issuer:       /CN=A911784E/serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
Certificate serial:       086B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
Manifest number:          085B
Signing time:             Thu 16 Apr 2026 20:40:47 +0000
Manifest this update:     Thu 16 Apr 2026 20:40:46 +0000
Manifest next update:     Thu 23 Apr 2026 20:40:46 +0000
Files and hashes:         1: fn476Ik3CnHlUhVXuwOgDxs5v9g.crl (hash: 2dou9/aKAz53utEDrujuKYWZ/eEY5e56kCqBMB6u7Xo=)
                          2: 8AA99B52FEC511EABAAE7814C4F9AE02.roa (hash: 5Hpb4Eto1Y7FBhRcGpJuK1i5AkkmZjve+QlNVuZWxKs=)
                          3: 211EA566FEC411EAA6579A78C4F9AE02.roa (hash: 0c3kOHhoaretnNoGmEe06A8CZn/rk8uulX8vCvx7VMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl
                          rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:40:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2155 (0x86b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911784E, serialNumber=7E7E3BE889370A71E5521557BB03A00F1B39BFD8
        Validity
            Not Before: Apr 16 20:40:46 2026 GMT
            Not After : Apr 23 20:40:46 2026 GMT
        Subject: CN=69e1494e-0b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:27:3f:89:e1:fc:c5:70:57:63:76:b6:09:f5:
                    3d:08:a9:a2:57:8a:cf:11:9d:ad:ea:c2:be:d8:a2:
                    e9:0f:a9:7a:bf:f2:ee:1f:4e:08:8d:37:1c:ba:81:
                    1b:8d:33:c7:d1:59:eb:95:da:8b:4c:e8:29:03:13:
                    50:6b:21:d4:e0:b0:b9:be:da:9b:c4:0b:9b:1b:77:
                    46:e1:5c:c3:6a:2b:26:64:a8:0b:85:4c:87:cb:bc:
                    34:c4:66:2e:73:7c:bd:6d:c8:8c:b2:9c:3c:fd:d2:
                    6f:4b:f1:cf:63:7a:2a:74:db:eb:b6:f7:1b:a0:51:
                    5f:1a:5c:23:23:8d:c2:19:e0:79:18:dd:b3:02:6d:
                    dd:15:77:fd:7b:31:8e:32:b3:3e:b0:43:70:f6:d1:
                    9f:6c:04:8f:44:6c:a6:3b:e3:1f:0a:a2:33:18:fe:
                    88:13:82:61:08:e1:af:38:1f:fa:25:94:94:00:87:
                    3e:d7:67:25:ab:b1:0f:22:cb:cf:02:18:0c:0d:23:
                    f8:a6:23:84:06:4a:75:c1:fd:d0:4e:24:c7:dc:38:
                    14:99:81:50:e6:59:36:c6:b5:92:35:db:74:4a:d5:
                    d5:9c:e5:23:da:49:b1:05:4f:c6:c1:ab:ea:c9:6b:
                    a5:53:53:3b:68:19:8f:9c:19:42:2d:0c:ce:1a:13:
                    19:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:69:31:A3:AD:F6:7C:C4:C1:27:A9:9F:6C:0F:C9:62:F9:70:7C:BB
            X509v3 Authority Key Identifier:
                keyid:7E:7E:3B:E8:89:37:0A:71:E5:52:15:57:BB:03:A0:0F:1B:39:BF:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fn476Ik3CnHlUhVXuwOgDxs5v9g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911784E/6B54D9C8FEC111EA9E733375C4F9AE02/fn476Ik3CnHlUhVXuwOgDxs5v9g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:d3:af:46:bc:94:2f:c6:ce:6a:75:c0:79:d4:fc:65:19:a9:
         2d:cf:3a:3b:e3:92:c3:91:13:e0:63:98:84:58:78:94:f0:6a:
         af:e6:6e:55:12:5e:84:71:5e:dc:ef:62:e1:92:62:3e:10:00:
         fb:1b:05:bb:e6:62:89:0e:aa:d7:5b:6c:33:ad:56:88:cd:40:
         1f:f8:33:1d:98:e7:fb:26:87:2c:c0:22:67:fd:23:d4:ed:d6:
         0a:fe:25:e0:af:bd:14:1e:e1:2e:5f:64:46:c1:91:00:60:09:
         39:f6:21:93:b7:d5:33:d8:b1:52:86:36:88:47:4a:7d:21:0c:
         a8:ba:37:42:f0:fd:73:84:fd:73:94:cf:e3:0c:57:1b:d7:03:
         b5:d1:36:fb:ae:8b:52:55:e1:0c:01:0a:d5:92:ce:49:be:e4:
         3a:67:e6:c4:02:f4:a8:9e:93:70:d2:ae:43:1a:e3:61:11:bb:
         bc:17:7b:a1:05:0f:c5:9f:8f:12:90:65:a8:7d:ad:39:50:3d:
         06:15:56:14:17:74:97:6a:f9:35:0e:a0:cf:d1:07:84:66:c4:
         60:9f:e7:74:0e:0f:31:48:49:42:0c:d4:ad:d4:6f:8b:00:c2:
         66:de:c1:83:39:b7:aa:58:4b:5a:a7:e0:12:ed:d7:ff:20:f5:
         ed:b1:3b:33
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCGswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTc4NEUxMTAvBgNVBAUTKDdFN0UzQkU4ODkzNzBBNzFFNTUyMTU1N0JCMDNBMDBG
MUIzOUJGRDgwHhcNMjYwNDE2MjA0MDQ2WhcNMjYwNDIzMjA0MDQ2WjAYMRYwFAYD
VQQDEw02OWUxNDk0ZS0wYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtSc/ieH8xXBXY3a2CfU9CKmiV4rPEZ2t6sK+2KLpD6l6v/LuH04IjTccuoEb
jTPH0VnrldqLTOgpAxNQayHU4LC5vtqbxAubG3dG4VzDaismZKgLhUyHy7w0xGYu
c3y9bciMspw8/dJvS/HPY3oqdNvrtvcboFFfGlwjI43CGeB5GN2zAm3dFXf9ezGO
MrM+sENw9tGfbASPRGymO+MfCqIzGP6IE4JhCOGvOB/6JZSUAIc+12clq7EPIsvP
AhgMDSP4piOEBkp1wf3QTiTH3DgUmYFQ5lk2xrWSNdt0StXVnOUj2kmxBU/Gwavq
yWulU1M7aBmPnBlCLQzOGhMZRwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG1pMaOt
9nzEwSepn2wPyWL5cHy7MB8GA1UdIwQYMBaAFH5+O+iJNwpx5VIVV7sDoA8bOb/Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNzg0RS82QjU0RDlDOEZF
QzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0NuSGxVaFZYdXdPZ0R4czV2
OWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuNDc2SWszQ25IbFVoVlh1d09nRHhzNXY5Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
Nzg0RS82QjU0RDlDOEZFQzExMUVBOUU3MzMzNzVDNEY5QUUwMi9mbjQ3NklrM0Nu
SGxVaFZYdXdPZ0R4czV2OWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaNOvRryUL8bOanXAedT8ZRmpLc86O+OSw5ET4GOYhFh4lPBqr+ZuVRJehHFe
3O9i4ZJiPhAA+xsFu+ZiiQ6q11tsM61WiM1AH/gzHZjn+yaHLMAiZ/0j1O3WCv4l
4K+9FB7hLl9kRsGRAGAJOfYhk7fVM9ixUoY2iEdKfSEMqLo3QvD9c4T9c5TP4wxX
G9cDtdE2+66LUlXhDAEK1ZLOSb7kOmfmxAL0qJ6TcNKuQxrjYRG7vBd7oQUPxZ+P
EpBlqH2tOVA9BhVWFBd0l2r5NQ6gz9EHhGbEYJ/ndA4PMUhJQgzUrdRviwDCZt7B
gzm3qlhLWqfgEu3X/yD17bE7Mw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:39:41 2026 by rpki-client