Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
File:                     ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft (raw, json)
Hash identifier:          MoMEZuivXs7yB+PQ79wOp+LkE4jgnYqKgYVHxsWPOMY=
Subject key identifier:   4F:8F:C5:F6:E2:24:68:DF:C1:65:CD:35:08:2F:E6:60:8C:53:94:06
Authority key identifier: 4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A
Certificate issuer:       /CN=A9130138/serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
Certificate serial:       0412
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
Manifest number:          03F0
Signing time:             Fri 17 Apr 2026 00:26:59 +0000
Manifest this update:     Fri 17 Apr 2026 00:26:59 +0000
Manifest next update:     Fri 24 Apr 2026 00:26:59 +0000
Files and hashes:         1: ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl (hash: F4IfB+kYwukuP7w+lk4jbw+mnli6Hy6AkLt89CReMYU=)
                          2: 5E0B2804158811EEA0660D12C4F9AE02.roa (hash: X3lbzZGPgotkq76L6mKpw9+PljAruzWQzmyb0blRPVs=)
                          3: 2A616414808A11EF813A8343C4F9AE02.roa (hash: H4XlQT8YJyI/+h2ZQgxbC5lWcfJk5rnOXu02XWl3y7o=)
                          4: 6D3CF65A134311EEA2AF3B1EC4F9AE02.roa (hash: Ta8P8ZlJNRZOOFxGWrA6sGVXlUCQZKAEPu0o6UyWhpE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl
                          rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:26:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1042 (0x412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130138, serialNumber=4E81E0F6A83ADC2AD5232664A954D267CB43D90A
        Validity
            Not Before: Apr 17 00:26:59 2026 GMT
            Not After : Apr 24 00:26:59 2026 GMT
        Subject: CN=69e17e53-a67c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:86:78:93:c6:08:9d:25:6e:73:3b:2e:60:c5:
                    47:3b:ed:e8:b1:38:2e:ec:fa:2d:16:88:83:af:27:
                    2a:d8:f7:06:3a:a0:1d:05:2c:d2:cd:bc:5e:17:47:
                    33:7a:a1:2d:85:46:26:a2:74:4e:db:db:ec:3a:2f:
                    b1:e1:2f:4b:73:63:0c:21:fd:53:31:53:e1:fd:ec:
                    ae:05:68:c3:f8:c6:f7:8c:fe:17:01:08:84:4c:96:
                    6c:2c:b2:35:18:45:a1:fe:f2:59:37:92:be:6c:8d:
                    2b:c8:9e:70:f7:9c:13:2e:7a:34:f5:3c:3e:2a:78:
                    30:b2:70:cc:57:81:b4:d2:b4:13:56:f5:0f:56:41:
                    cf:bc:39:0f:ac:07:f2:a4:c5:bc:88:f2:37:9c:f8:
                    5d:da:f7:c2:9b:7a:22:16:ed:1e:5a:d8:7a:3a:85:
                    1f:17:7c:fd:d3:29:37:51:09:f6:5a:73:2f:a9:3b:
                    94:1d:39:75:30:e0:66:0b:c8:75:30:b8:df:14:ba:
                    05:d8:91:6b:4d:be:96:f4:df:43:16:4f:e0:b2:27:
                    2b:b2:c6:a6:8d:e8:38:70:20:6a:05:a0:06:fd:c9:
                    7d:e0:33:86:19:47:aa:64:3b:9e:09:87:54:70:de:
                    58:a7:1c:24:55:0d:a6:5b:f4:40:28:91:7b:58:31:
                    5b:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:8F:C5:F6:E2:24:68:DF:C1:65:CD:35:08:2F:E6:60:8C:53:94:06
            X509v3 Authority Key Identifier:
                keyid:4E:81:E0:F6:A8:3A:DC:2A:D5:23:26:64:A9:54:D2:67:CB:43:D9:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130138/63A4D1BCC47A11EC8B344964C4F9AE02/ToHg9qg63CrVIyZkqVTSZ8tD2Qo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:70:dd:75:a1:41:44:9c:c4:98:bd:12:7f:00:0a:ed:ba:
         76:7f:f7:b6:ff:8c:89:99:e1:be:d8:25:ef:d4:cb:f3:29:db:
         1b:3e:d5:f5:7c:42:4c:9b:08:30:dd:85:25:d1:81:3f:32:08:
         c2:6a:d3:8e:6b:fa:65:ca:a9:51:de:7c:3d:ad:27:d1:c4:10:
         7a:f1:bb:de:06:7a:84:4f:b0:9a:63:8a:54:da:69:cb:f6:13:
         94:d4:fc:70:ec:f4:32:e6:f0:cf:18:fb:81:8e:8e:dd:ee:e2:
         79:17:b4:50:75:d5:26:9d:59:c2:e3:a4:c9:cd:57:f2:75:17:
         87:8f:db:f1:c7:7e:4c:83:ba:21:47:6f:95:e0:87:3e:fc:96:
         61:8f:75:a8:22:d2:2d:fe:d4:b0:0b:08:df:18:ff:b1:cf:2d:
         3b:68:61:34:c3:41:fb:f6:0f:2a:e1:1b:72:5c:e7:fd:f2:b9:
         68:5c:1f:4f:04:e4:5b:c9:a2:b8:8e:21:d1:f4:27:87:98:34:
         c3:6f:57:04:80:07:ea:4d:82:28:52:f2:46:f6:21:ba:ce:f1:
         63:ce:18:7f:69:95:07:c1:04:b9:60:cc:10:b2:ab:94:3e:cd:
         f1:d3:11:5e:2b:be:da:57:01:13:9d:78:d0:6c:cc:5d:41:a6:
         36:51:95:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:33:09 2026 by rpki-client