Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
File:                     4FxkVUXZ74a0UeUhnYMnYPQFyug.mft (raw, json)
Hash identifier:          xlu7DZljhBZr96YrYten+JfA1lZ1CSQ5Ezjo8949uLI=
Subject key identifier:   BD:34:67:14:B5:6B:EB:10:CB:6A:C4:AF:98:7C:1E:09:68:94:17:73
Authority key identifier: E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8
Certificate issuer:       /CN=A911E09E/serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
Certificate serial:       96
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
Manifest number:          92
Signing time:             Fri 17 Apr 2026 07:14:35 +0000
Manifest this update:     Fri 17 Apr 2026 07:14:34 +0000
Manifest next update:     Fri 24 Apr 2026 07:14:34 +0000
Files and hashes:         1: 4FxkVUXZ74a0UeUhnYMnYPQFyug.crl (hash: 2DI6s7q3MKzWqEDqcWW8ciDTGPPAvAZnINCXH1af0Ho=)
                          2: E1A91004624811F098E5B95AC4F9AE02.roa (hash: DfP6HXkk7ZkiBK57u8/8M6u5qiXHtYdjtBByCV+JXf0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl
                          rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:14:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 150 (0x96)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911E09E, serialNumber=E05C645545D9EF86B451E5219D832760F405CAE8
        Validity
            Not Before: Apr 17 07:14:34 2026 GMT
            Not After : Apr 24 07:14:34 2026 GMT
        Subject: CN=69e1dddb-41ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:4b:10:6c:53:48:33:85:38:f4:5b:33:32:64:
                    b4:56:1e:02:6f:c5:d1:f7:0a:ec:6b:4a:d3:ce:a9:
                    fc:e6:d7:d1:2e:f8:19:ee:6e:27:ae:b9:fe:32:14:
                    65:76:24:7e:f8:25:11:a3:68:15:60:4d:54:8c:d9:
                    59:2e:f2:70:32:b1:04:4f:15:d7:e8:30:14:fa:3e:
                    47:fe:9b:c2:8f:51:5d:d5:3c:02:93:c0:f1:f5:4b:
                    d6:7d:ad:b2:08:29:ee:5d:39:0e:e8:44:9e:96:c8:
                    27:5c:b4:0a:e2:b4:f1:0c:8d:ed:ad:51:8c:79:32:
                    e5:99:14:24:0c:d1:3b:7e:89:49:b7:3f:2c:08:4b:
                    ad:ad:cd:c9:28:a5:cf:1e:ff:86:3a:bb:3b:cd:0f:
                    11:b6:81:4e:e2:35:57:46:fb:0a:e6:bf:9a:e9:cf:
                    f6:be:5b:1d:96:a3:f4:fd:f5:bf:bf:0c:44:8f:a9:
                    17:34:97:91:7a:35:e6:c3:a5:53:ea:c0:48:95:c3:
                    1b:bf:19:85:24:9c:2d:2d:25:c8:cd:b6:90:36:fe:
                    fc:c2:f0:fb:a0:63:b1:a5:a6:a2:b3:2e:bd:89:64:
                    01:91:41:4f:f3:1f:39:89:ad:f4:7c:8f:54:b8:b4:
                    bd:e0:e2:de:19:f6:77:10:3a:ea:ae:03:0f:92:7f:
                    0c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:34:67:14:B5:6B:EB:10:CB:6A:C4:AF:98:7C:1E:09:68:94:17:73
            X509v3 Authority Key Identifier:
                keyid:E0:5C:64:55:45:D9:EF:86:B4:51:E5:21:9D:83:27:60:F4:05:CA:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4FxkVUXZ74a0UeUhnYMnYPQFyug.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911E09E/D8BB0F3661FA11F0BD4F606EC4F9AE02/4FxkVUXZ74a0UeUhnYMnYPQFyug.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5f:10:23:db:71:ca:53:ed:8f:d5:ee:3a:ae:e5:7d:ec:9f:
         77:f3:35:8b:84:c1:bb:d5:b1:fc:7e:ca:98:89:8e:22:15:ad:
         46:81:34:3d:fb:fe:ea:6e:d2:c5:c6:77:6f:f3:fd:17:9f:13:
         1f:f1:4c:2c:85:81:bc:80:e8:0a:db:73:d8:99:8b:76:50:12:
         d5:3b:55:bb:31:0c:10:1d:b1:1a:17:4d:a8:16:d3:90:b8:4b:
         3a:ea:36:26:f6:13:96:23:7f:57:7b:49:94:d9:9f:1a:77:a0:
         f7:35:ee:83:68:aa:f4:60:90:50:70:c4:e0:78:64:83:7f:04:
         c8:7b:13:f4:b2:19:18:d5:68:8c:fa:9c:02:c0:4e:fc:dd:bb:
         c4:d6:64:64:b5:51:fb:c2:bd:22:e9:4a:c0:11:b2:d4:82:c6:
         01:ca:73:18:df:d2:76:07:f2:fe:1c:86:f6:ef:6b:12:bf:8f:
         8a:66:73:16:b6:81:69:2e:7b:7b:1b:c2:15:4c:71:55:2a:31:
         57:59:3e:fe:88:62:00:fe:2f:e7:97:73:cf:9a:83:4d:e2:f1:
         ee:55:23:6c:a8:ab:18:10:09:31:1d:bc:7b:11:4f:a6:f9:6f:
         c7:11:e3:c5:8d:96:04:2d:a1:17:1e:23:de:72:00:ef:9e:b9:
         9e:a6:06:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:48 2026 by rpki-client