Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
File:                     PXsVvXfZuXTjc1jadU3-qSkeaDo.mft (raw, json)
Hash identifier:          fIBW0XrevoTFF4e3mZPIor7jQuCL0+vjsgBQbZRHh2Q=
Subject key identifier:   8F:10:BB:CB:09:59:4B:D0:56:6F:02:AD:F5:F2:C9:7B:3D:31:C3:11
Authority key identifier: 3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A
Certificate issuer:       /CN=A91304A9/serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
Certificate serial:       FD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
Manifest number:          62
Signing time:             Thu 16 Apr 2026 18:59:45 +0000
Manifest this update:     Thu 16 Apr 2026 18:59:45 +0000
Manifest next update:     Thu 23 Apr 2026 18:59:45 +0000
Files and hashes:         1: PXsVvXfZuXTjc1jadU3-qSkeaDo.crl (hash: 1GYrroSfdQyd7+ucX0Zm+QKUsRD2iA4gr9C/5TNAlA0=)
                          2: 771BED3C29EA11F19F51207DA0833773.roa (hash: lhetkE1o3zD893BL67g7226m3eTgVaDjiXI8n5mc5iA=)
                          3: 85750E9429B911F1A805AEF28F833773.roa (hash: auPSTIw5f+LjJofnwKeEm6Ok//XK0NnQHOUksBcly2I=)
                          4: 32A3B5E229E811F18CA8F3909F833773.roa (hash: oZR2FpzGAe6Sy8Hoz7BhQ2SDTppygN2h+ztgxLfV0mE=)
                          5: 77B9A22029EA11F19F51207DA0833773.roa (hash: yXRZq2LnDkEB9UQOuEQuy9T2mQhWiaU7h3unMMyAOBY=)
                          6: 31EC6B8229D211F1942EF99297833773.roa (hash: 23E29PzVg2WvOU9TXjshaZZFo5X/Z3KW9b5qNM8Z/x4=)
                          7: E6C0E7E629D111F18231948697833773.roa (hash: 2i2D4Yn4ye2PrDbqlGA5eFxQ6MY5YHkU4EJWvkgJNb8=)
                          8: 5CFC71B62C1411F181024EDD95833773.roa (hash: LYiVw5NI1fHfAhRD4kDH03PrbWWGXq/pUB/N2JrOxvc=)
                          9: 670FF7B429C011F1A3F09FCF91833773.roa (hash: xUP7XSpc4JFNaGqOv8kH1G9acfZb1iKUpLORTtA7Q6c=)
                          10: CD8FC3C82D1E11F191B042ACB6833773.roa (hash: 01dbdj5RUmMEaG00LwJYrMguYHvqrK5PH9Dm9dhmHdk=)
                          11: 2D9AAA0629CF11F1ADED11F996833773.roa (hash: bvLxVDCXvbLP68bPFEP8Bi+iW5eH1xSilo34BKnNRMs=)
                          12: 484AAA6E29E711F18BEDC2D19E833773.roa (hash: m35r5GwPvKh9akKr8JCnjaTv1XElnieMLAOq4dk9R0Q=)
                          13: 9EDDEBC029D311F184F1669A97833773.roa (hash: ZwI19PPZAFVOy0THPHh7Bj9dofGXcFYZKYKf+dYn8Lk=)
                          14: 5A0D98C829F211F18AB4C1A0A2833773.roa (hash: tAYt6F3jPR3H15N2TctWPUFlsi7FU0ZCEmkgEQbxSOs=)
                          15: 24DB124029D711F19B6521AE99833773.roa (hash: L9YX4gv3DsNtGEZMP/J2sxI8a+81Ov4a8RF/MY/5byg=)
                          16: E67F9A6229F311F1A8F3E0E1A2833773.roa (hash: XEZVL7Alh83OFsk2zI0eWKkX8Eqh/6+6slghZIlo1CU=)
                          17: 37885C3229D111F18571726A97833773.roa (hash: P7JHdQ2pRj9e0fvIPzqhGuAfmL1SvK2GbF2hyiyOIJ0=)
                          18: 87758D3C2DAF11F1B56D9FADA5833773.roa (hash: a6qcX85tfGR7GPMLmJuOEhU1jvT5cr2M6V6HLw3vIyQ=)
                          19: 2447645A29D711F19B6521AE99833773.roa (hash: bTkwjW+MQMWhkNVOvjMadZL5PfP34DVI/cxNUOw2IwM=)
                          20: 3218652829E811F18CA8F3909F833773.roa (hash: nORgV5f8vbq/wvRFwsRo4Kfy6G6vV8hYtZS1XQwh+EI=)
                          21: 805DF10C29D011F19183AF4C97833773.roa (hash: 6WyGc/D8mHPYUOUx4feYwfW6rBjHV7GI2eIistr7S5g=)
                          22: 769A6D0C29EA11F19F51207DA0833773.roa (hash: E7DOfzymqok/SM7gCnw89bYUPC3XsRSj1/1XKSBxlGY=)
                          23: 9FAF6F8A29DB11F1BFD4871E9B833773.roa (hash: 8UB55J5Yp3o/0cAB1VjFPqBR2V3U93dx8qOKBxRHp6A=)
                          24: A03EA96629DB11F1BFD4871E9B833773.roa (hash: Xpl9lX2NW8aiIn124xTKQqzkWkQLBCN+lopCtcTEhrI=)
                          25: 50DA994A29D411F1916B319D97833773.roa (hash: gmHEru1uu8y3YOU5nRC5sPjqCKvPX8MQZIxdZyPZ8m8=)
                          26: 848534FA2DDD11F1A9BF730FB5833773.roa (hash: u9lltteytbvuVpGg0w+umKh20ZrbZ7O7QXSvCeg3ijQ=)
                          27: 2E2443CE29CF11F1ADED11F996833773.roa (hash: /YTo9EB/J0ugF2nbrB/ty07yqEgw/RHL5BSrl8zCBiQ=)
                          28: 040DC78829EB11F18E7F1692A0833773.roa (hash: z6xCqH756kkIX8f2AVzrhijdwDcnR/vVkM2dlCG3KSM=)
                          29: E7491B5C29D111F18231948697833773.roa (hash: BFFEi9ufTmCq18ajvoBLUoVzM2eGlPTiY5+08StrtsA=)
                          30: 7843AE0229EA11F19F51207DA0833773.roa (hash: s0N7ocsVPT+wkbxRYsrIVJaKpSpOfD4ZijZOHIsz34o=)
                          31: B2EA4BAA29EB11F1A56364AEA0833773.roa (hash: SFh1ah0wSEcelj/ZujwegnhnJcy7Jkl3pHyETC3qbPI=)
                          32: 9F6611D029D311F184F1669A97833773.roa (hash: sU+syfRyHdx8cIMh/58Efro5AeJotud3a9u84LAj0Uo=)
                          33: 666C21CA29C011F1A3F09FCF91833773.roa (hash: R/g3k5D9oKLbcYrSfdUWVh7n1eRtnbw0+zncu1mfi20=)
                          34: B378944629EB11F1A56364AEA0833773.roa (hash: FWRF2CGF/AE1Ig9kYHW81rC361IQXXVUx54ZpsddgpY=)
                          35: 132BB03C29F411F1A9D9FDE9A2833773.roa (hash: XToOxO04S9QiG7w3VXjF3J9J7gTSi3hPlDUo9iDClx4=)
                          36: 3806439029D111F18571726A97833773.roa (hash: vJfFiKVcht0hhV43KX2YNwRRC3QJu1SPSzD28SejiPg=)
                          37: A194680629DA11F1A7234B1B9B833773.roa (hash: m+d8rKrNikI8my7pp1HxKiLAoYdPJmoBfyQi7R0kHN4=)
                          38: 23C5258A29D711F19B6521AE99833773.roa (hash: vLiP86TmWiL86c6JxYkSHz4JTIIMh3/D2cE0XI4dGmI=)
                          39: 11749BE62DA511F1AB5ACB70A2833773.roa (hash: u1IB5dE51O5NoBXF8I3dV5NS6opSVbCQW+k0AqG4/jY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl
                          rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 253 (0xfd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91304A9, serialNumber=3D7B15BD77D9B974E37358DA754DFEA9291E683A
        Validity
            Not Before: Apr 16 18:59:45 2026 GMT
            Not After : Apr 23 18:59:45 2026 GMT
        Subject: CN=69e131a1-853d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:00:ff:9d:0e:b2:4d:f3:e4:0b:63:1c:cc:89:
                    9e:a3:68:7e:a4:1b:1e:24:4c:d7:75:b5:fb:94:57:
                    50:d4:83:bf:ce:0f:9e:9d:bf:e5:0e:b1:21:71:70:
                    5a:8d:5a:d3:ad:0c:8c:f8:51:e8:56:60:6e:ba:bb:
                    7c:88:19:54:d0:f4:44:05:96:48:f0:b2:ca:00:d1:
                    4a:5b:1e:0b:49:b5:dd:79:88:27:36:2c:1b:9d:d7:
                    c0:7b:fb:51:c1:9f:4a:a1:f8:f2:1b:80:36:b0:43:
                    2b:b7:31:4b:42:af:8c:8f:4c:ba:74:6a:09:a6:20:
                    53:76:5f:ac:39:6f:84:5e:7f:2d:2e:8c:91:06:f9:
                    25:41:90:c6:81:91:5e:02:ef:d8:dd:82:11:38:31:
                    32:ef:f2:86:bc:1b:7e:94:44:9f:80:09:8f:8e:2a:
                    04:f4:16:1d:59:d2:c9:16:d6:f2:e6:fa:9d:50:e5:
                    22:e9:e0:80:a1:e1:5a:ca:75:fd:fd:5f:44:46:b5:
                    f5:9f:38:72:58:1e:6a:ee:e1:63:2c:dd:ea:4a:ac:
                    c2:fc:5f:f6:18:24:b7:32:7a:d6:d3:a6:c6:86:36:
                    b9:99:dd:f2:71:52:82:01:ac:7c:69:46:3e:ab:04:
                    6a:fc:8b:59:c4:3b:ec:c8:94:12:a9:45:66:b3:2b:
                    5a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:10:BB:CB:09:59:4B:D0:56:6F:02:AD:F5:F2:C9:7B:3D:31:C3:11
            X509v3 Authority Key Identifier:
                keyid:3D:7B:15:BD:77:D9:B9:74:E3:73:58:DA:75:4D:FE:A9:29:1E:68:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/PXsVvXfZuXTjc1jadU3-qSkeaDo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91304A9/FD372E4A294511F1A7AA3EBD84EE528E/PXsVvXfZuXTjc1jadU3-qSkeaDo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:fc:33:a8:e9:fd:21:09:dd:34:81:dd:63:c1:4b:1c:8d:d4:
         00:4f:c3:2a:9a:27:b1:65:82:c3:aa:8c:a6:c5:73:55:73:7c:
         25:63:5a:a3:85:f6:8b:21:eb:aa:98:9c:b6:80:0a:ce:c2:05:
         d3:88:7a:0c:1c:54:cb:0c:a1:fd:e6:ae:56:12:22:5e:f3:9a:
         f6:62:49:ea:1c:0a:3e:5b:e4:92:87:c7:40:f3:26:d8:84:bb:
         9f:8f:59:89:d9:02:62:44:3a:ff:8f:f7:4c:eb:3c:4d:35:d5:
         ea:44:67:46:c9:95:b6:b1:7c:4e:33:86:d6:d0:67:ad:ce:ce:
         71:1f:0c:72:71:1e:5c:00:8f:58:0d:23:06:3d:0b:bd:c4:30:
         01:77:78:bb:04:20:ce:5d:a8:ec:d1:b2:7c:d1:c6:a4:74:d2:
         42:5b:d7:9d:fc:51:f5:17:ce:7a:c4:45:38:a2:ea:fb:5d:ee:
         3f:96:95:9f:4c:66:94:20:a1:55:8e:b2:2d:ed:90:63:e4:95:
         b0:fa:8f:db:d7:07:e3:a4:4a:ff:c6:de:aa:70:21:d2:af:b8:
         71:0d:36:04:cf:9e:0b:cb:09:62:21:9e:82:aa:86:4b:72:df:
         c5:3b:1b:fb:9b:01:c3:4f:5e:b2:7b:0c:ae:1b:c5:ed:ba:3c:
         bf:13:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:43:33 2026 by rpki-client