Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
File:                     aIUqt_JxT89U118KrjBorcOLNcw.mft (raw, json)
Hash identifier:          RxW3Ab23+C2VDGzBs3EN6kD4YSfuJwug/7/jLIW0Mfo=
Subject key identifier:   BD:77:AA:CE:C3:F4:EF:8B:D1:04:E7:33:35:94:24:2D:9A:2E:AA:C2
Authority key identifier: 68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC
Certificate issuer:       /CN=A91187FD/serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
Certificate serial:       028C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
Manifest number:          0250
Signing time:             Fri 17 Apr 2026 02:40:02 +0000
Manifest this update:     Fri 17 Apr 2026 02:40:02 +0000
Manifest next update:     Fri 24 Apr 2026 02:40:02 +0000
Files and hashes:         1: aIUqt_JxT89U118KrjBorcOLNcw.crl (hash: r+TfnXawvOnvUqHzvTsvJCxs24xF2S3AsXYwaYozfQ8=)
                          2: 0EE376F8BF7111EEA53E4981C4F9AE02.roa (hash: wtaIxTF17d8IiemG3sWgy0ofBOn5zvPTqbrlTJWPses=)
                          3: F9CB1E5ABF7111EE806CB182C4F9AE02.roa (hash: Oi3EWJoEgd9DWmEEG+iX3qCZVJDhp6GEs5+/XmAJvSc=)
                          4: AF2D50BE562B11F0A2095579C4F9AE02.roa (hash: GKfJ2kB3yXKiTx70mXKirnJ5shWw+x/l7CpoEVzirXk=)
                          5: F16963D8B3AE11F0A879E65AC4F9AE02.roa (hash: t3iwawjGJ56AujlNR7I280077YB+jhEWT3pLtX6G6h0=)
                          6: F8D5DC60BF7111EE806CB182C4F9AE02.roa (hash: hy3xSvTP7O3mbzfHFNsYWB6zvGiymVdeaKb6AgSQN3E=)
                          7: 2F03F3FCB3AF11F0B9165B5BC4F9AE02.roa (hash: 4RuwvlEUfIsojOEJPNkdcqMMKDfzfms7bbjFDB3xQI0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl
                          rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 652 (0x28c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91187FD, serialNumber=68852AB7F2714FCF54D75F0AAE3068ADC38B35CC
        Validity
            Not Before: Apr 17 02:40:02 2026 GMT
            Not After : Apr 24 02:40:02 2026 GMT
        Subject: CN=69e19d82-a471
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:dd:b0:f9:48:f6:e1:5a:e9:92:5c:31:8e:
                    19:69:86:0b:e3:9f:cd:c8:64:dd:a9:ad:a0:4c:21:
                    3b:63:5c:0f:ce:f9:93:25:d7:1c:06:6a:09:1a:ed:
                    53:bf:d8:64:f8:87:24:c0:76:54:65:a7:ae:6a:63:
                    c8:13:06:13:f7:45:26:ec:21:be:a0:13:3f:48:22:
                    c4:92:b3:ed:5d:a3:0d:71:4d:de:27:d7:fd:28:d8:
                    4f:f8:34:c2:78:b0:e1:02:c7:8d:d7:73:d4:09:80:
                    3d:a6:a6:ac:0a:34:a5:05:73:c1:6b:ed:66:fa:7c:
                    94:77:24:c9:f3:68:97:2b:1d:04:2a:17:4a:58:e9:
                    05:b9:a8:45:d0:4b:9c:82:f3:35:9d:e6:71:b7:47:
                    d1:3a:f0:bb:a9:4d:5b:d8:56:7a:aa:bc:86:17:e0:
                    60:2f:cb:1e:5b:54:ff:e6:fc:85:be:24:e8:3a:f4:
                    bb:7b:b2:63:c9:e3:f3:7e:88:31:e6:50:52:8f:c9:
                    38:35:26:51:30:32:e7:3a:93:d1:89:60:ba:ff:72:
                    42:d3:05:13:dc:0a:41:46:1e:90:7a:8e:c4:a1:31:
                    1c:0f:9a:7f:50:44:9b:f0:4d:e5:35:ee:c5:8e:51:
                    2a:4a:50:3a:12:9a:94:08:19:bc:29:7a:7b:a3:35:
                    4d:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:77:AA:CE:C3:F4:EF:8B:D1:04:E7:33:35:94:24:2D:9A:2E:AA:C2
            X509v3 Authority Key Identifier:
                keyid:68:85:2A:B7:F2:71:4F:CF:54:D7:5F:0A:AE:30:68:AD:C3:8B:35:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIUqt_JxT89U118KrjBorcOLNcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91187FD/55ED6A1610A011EE93493C52C4F9AE02/aIUqt_JxT89U118KrjBorcOLNcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:8a:c8:2d:8f:38:3d:99:49:62:79:90:f5:43:b5:18:ba:
         9e:2a:f1:46:a6:af:71:ba:72:e7:cc:4d:ae:e4:db:bd:f7:ea:
         41:a5:8c:f5:99:0b:a4:65:5b:19:4f:b0:0e:d5:fa:41:1b:9f:
         db:4e:b0:b4:b4:37:a5:58:31:34:84:52:b5:d1:5e:bb:f5:f5:
         6d:0d:56:88:39:ca:66:95:87:da:bc:c9:a2:24:20:f0:19:75:
         f7:09:74:47:d0:4d:c1:51:54:d6:37:30:7d:d8:34:4c:ac:18:
         1d:3d:c1:58:f5:4b:af:52:eb:b2:2d:9c:f4:a9:00:0f:ed:51:
         51:2a:29:95:e7:1d:76:48:91:74:1b:35:07:d8:c3:f4:24:5f:
         7f:c7:0e:cf:ee:67:1c:a9:7b:11:c9:d7:91:2b:9a:66:5d:5e:
         94:24:41:3a:a5:f7:b1:74:ad:02:90:be:8a:a6:1e:aa:86:3d:
         39:a7:d3:a2:9e:b8:59:8a:e6:06:27:eb:fc:ea:fb:23:aa:78:
         8e:f5:21:ca:b1:e9:fa:fd:b1:24:d5:40:3a:bd:a4:2b:62:bc:
         30:05:38:ac:19:f2:3a:4e:73:1b:4d:34:c3:ed:b6:e8:55:9a:
         cc:57:b5:be:ee:2b:40:e1:99:f6:56:22:80:1d:01:45:3f:3c:
         20:76:14:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:47:34 2026 by rpki-client