Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
File:                     cL0aXZUSv23gumklPbvwEQPlOkM.mft (raw, json)
Hash identifier:          7iB6Ddxq7caiRMpeWijQkwxDRdrtN9uGsbC/ltjf+ds=
Subject key identifier:   EA:96:0F:49:8D:A2:48:8B:06:35:95:3D:8B:97:5E:1D:14:93:27:61
Authority key identifier: 70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43
Certificate issuer:       /CN=A9129797/serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
Certificate serial:       11C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
Manifest number:          11A2
Signing time:             Thu 16 Apr 2026 17:08:02 +0000
Manifest this update:     Thu 16 Apr 2026 17:08:02 +0000
Manifest next update:     Thu 23 Apr 2026 17:08:02 +0000
Files and hashes:         1: cL0aXZUSv23gumklPbvwEQPlOkM.crl (hash: V/3ppwCeI5F4GnQ7FYBM7Bc8J9f8flgZ/K4tj67LquQ=)
                          2: 595310E440C911EE9F1D5F41C4F9AE02.roa (hash: OaAKfIcON2XRzyks5YJKaHnYYgiadPipJMC0EisFwRU=)
                          3: 8818EDF88F2C11EDA558DE4DC4F9AE02.roa (hash: PA2mkLdDXnNHB1sn/98JmRqRd0SL8RFnOSlQl5U7aqk=)
                          4: 6B5A80B80B8211EAAD5B6B4AC4F9AE02.roa (hash: dGkv/rtzo56BVtckHVatWs5obEe9EAieuRY8f0MtX/U=)
                          5: E0A2D2B040C811EE90859140C4F9AE02.roa (hash: G1btmWmKU5YH5gEQg9B+VEbXtSEo140Wb5xK6RtnMeY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl
                          rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:08:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4551 (0x11c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9129797, serialNumber=70BD1A5D9512BF6DE0BA69253DBBF01103E53A43
        Validity
            Not Before: Apr 16 17:08:02 2026 GMT
            Not After : Apr 23 17:08:02 2026 GMT
        Subject: CN=69e11772-a669
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:58:28:eb:f6:ca:e4:32:43:18:11:ec:db:
                    fa:0a:4b:46:6c:65:ca:67:aa:e2:bd:81:ce:b9:df:
                    e1:05:e4:5a:1e:0d:82:f9:db:60:1f:4d:ec:db:44:
                    15:aa:1e:fa:00:f1:1b:39:16:21:1c:dd:af:8a:2a:
                    68:c5:cd:cc:d4:c6:1a:02:dc:6a:05:0e:29:a2:43:
                    f5:ee:64:86:05:bf:20:be:67:1e:37:4d:13:d5:d0:
                    03:1c:1d:ad:4f:16:99:47:ec:99:22:c7:90:30:26:
                    6b:64:0b:7f:da:a3:d5:fa:29:c6:11:ae:ed:8d:f4:
                    22:b1:1d:b5:43:3e:c5:d1:30:54:b7:ed:0f:92:9c:
                    85:0d:d6:da:76:97:fd:1e:84:e6:33:5a:c0:65:99:
                    01:a2:9a:71:95:88:28:98:40:e6:e2:ca:2b:3b:0c:
                    91:c6:3b:bc:6a:c6:5f:5e:67:d4:e5:ed:ac:a1:58:
                    3c:df:e4:70:9f:89:cb:1e:46:3e:1a:9c:12:91:b4:
                    3e:02:fe:cd:37:2f:da:9b:58:e2:73:17:f8:c9:be:
                    be:13:3a:9f:3a:51:6a:fb:23:5c:18:10:22:d3:bd:
                    ee:e0:9c:c5:06:f9:02:12:69:17:c4:a9:cc:86:01:
                    9c:ca:b1:16:72:54:ce:64:61:f7:83:78:28:f8:c9:
                    22:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:96:0F:49:8D:A2:48:8B:06:35:95:3D:8B:97:5E:1D:14:93:27:61
            X509v3 Authority Key Identifier:
                keyid:70:BD:1A:5D:95:12:BF:6D:E0:BA:69:25:3D:BB:F0:11:03:E5:3A:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cL0aXZUSv23gumklPbvwEQPlOkM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9129797/09F2D9941A2211E9BC06D30AC4F9AE02/cL0aXZUSv23gumklPbvwEQPlOkM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:4c:21:9e:ff:4b:37:54:1d:a5:ca:67:e2:04:0f:35:c1:b8:
         04:80:f2:4e:94:3a:d9:a2:0d:54:cb:e8:e1:97:75:14:3c:24:
         33:56:f8:64:15:22:bc:77:8b:a4:02:a6:70:58:4f:32:20:fb:
         bd:61:0e:9d:cb:02:cf:07:d4:29:21:c9:13:49:b4:a3:22:b3:
         c8:c1:fc:00:fb:92:be:8e:16:7c:d8:05:6b:83:59:31:e3:49:
         15:5b:ee:ef:92:b2:8e:af:ec:f2:c7:98:ee:62:4e:67:a6:3d:
         35:00:96:25:fe:1a:82:1e:c5:1e:26:7f:fe:af:f7:03:b6:0c:
         49:c3:fc:ed:01:ba:03:30:ef:70:60:dd:86:4e:a6:61:61:d3:
         21:27:08:e2:d8:28:ad:34:74:50:e3:89:63:4c:66:46:f6:64:
         7e:e0:43:f2:d3:28:50:ae:91:d0:d7:61:87:47:27:c2:43:a2:
         cd:91:3b:a9:58:65:92:50:aa:13:60:6f:47:fb:4b:f1:d9:1f:
         14:12:c9:81:6a:94:ea:1a:43:e0:6f:e2:8a:2a:e6:fd:31:a7:
         c9:10:36:94:14:35:6a:1b:58:9d:f8:7e:e9:1f:5f:ec:ac:12:
         ba:c4:07:40:80:d5:bd:94:47:0a:12:88:b8:62:14:18:ad:41:
         6d:74:31:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:37:43 2026 by rpki-client