Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
File:                     cljf1W-lpIfw1KzGnK2xvqwvlw4.mft (raw, json)
Hash identifier:          qxpV0vb6hN0Kn8IJGFxI6q4dg3xdHE+8o/YadjhBImY=
Subject key identifier:   EC:D3:53:DA:E9:E9:71:6A:5F:5A:73:9F:DB:51:F1:18:85:5F:17:F8
Authority key identifier: 72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E
Certificate issuer:       /CN=A913059E/serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
Manifest number:          F2
Signing time:             Fri 17 Apr 2026 07:48:44 +0000
Manifest this update:     Fri 17 Apr 2026 07:48:44 +0000
Manifest next update:     Fri 24 Apr 2026 07:48:44 +0000
Files and hashes:         1: cljf1W-lpIfw1KzGnK2xvqwvlw4.crl (hash: gA14MLEXU3mnIPWNJrwbqnM7/bs41eKMCCHJGT6W0m0=)
                          2: 9A1D26E8DA2C11EFAC53882EC4F9AE02.roa (hash: 3nJqGrjMdf5D7MugjfLyV3mlrWn6RF9SKC0CMqH5eTc=)
                          3: 99AB65EEDA2C11EFAC53882EC4F9AE02.roa (hash: XuBY8r+m0nn8vqkTh0uM6kdpQk4Jsat9oInYlsF5zpo=)
                          4: BE713C72E06211F0BC8E94E0746F56BC.roa (hash: EFjR0asu4wd/yeWWK7gzSOj/T05MOi3CBtWkuJ6nqxA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:48:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=7258DFD56FA5A487F0D4ACC69CADB1BEAC2F970E
        Validity
            Not Before: Apr 17 07:48:44 2026 GMT
            Not After : Apr 24 07:48:44 2026 GMT
        Subject: CN=69e1e5dc-7466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:e3:37:9e:b0:7d:13:df:a3:4a:99:d3:83:bf:
                    c1:2e:ff:0f:bc:cd:46:00:df:5e:9f:db:73:41:94:
                    d0:61:48:c6:39:a7:3a:de:4b:5c:c2:c6:75:f7:55:
                    bf:97:89:ff:a2:82:33:f1:26:4e:f1:09:3e:e4:5d:
                    72:2a:bb:cf:e3:b4:7a:6a:4b:cf:e1:bc:9d:ea:a5:
                    bb:2d:af:cd:ba:1b:48:a8:d2:82:c1:c7:e4:c4:e6:
                    52:fd:b9:db:5b:7c:9a:01:b1:a2:27:8c:ac:72:1a:
                    60:42:25:0f:ff:8e:82:4d:f9:31:87:23:d9:32:a0:
                    cd:14:24:30:8d:ee:3b:56:00:1a:67:9d:32:68:c5:
                    8d:2b:c8:21:4a:54:22:13:cb:fb:07:91:bf:b2:1e:
                    d5:f7:77:c0:62:d6:9b:04:df:cc:78:85:af:42:6f:
                    de:fd:6c:2f:8f:f8:db:c9:27:fd:89:96:16:c3:64:
                    d8:ea:c9:84:bf:a0:85:1b:23:9a:41:50:2a:51:ff:
                    1e:a7:56:d5:8e:44:87:13:94:ba:3b:bf:33:2d:20:
                    a8:98:b0:6a:21:f5:c5:a6:85:a9:13:cb:83:5b:5a:
                    cc:19:ee:2d:53:11:36:de:84:59:9a:35:8d:24:c1:
                    2f:1c:4e:c3:c7:ad:de:5b:69:36:e2:6f:b2:93:c8:
                    73:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:D3:53:DA:E9:E9:71:6A:5F:5A:73:9F:DB:51:F1:18:85:5F:17:F8
            X509v3 Authority Key Identifier:
                keyid:72:58:DF:D5:6F:A5:A4:87:F0:D4:AC:C6:9C:AD:B1:BE:AC:2F:97:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cljf1W-lpIfw1KzGnK2xvqwvlw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/55666B56D9D011EF98B85E6DC4F9AE02/cljf1W-lpIfw1KzGnK2xvqwvlw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:3b:2f:ed:a2:01:a8:91:da:c4:a6:b2:6f:93:e6:d8:4b:cc:
         2d:88:9c:68:6e:ac:af:53:38:4b:c7:15:95:62:cf:b0:82:7b:
         aa:52:54:6c:8a:a3:c6:a1:7c:e6:c9:c8:ce:99:d7:52:e9:68:
         7d:21:e6:22:96:e7:88:43:7c:78:05:50:31:29:76:93:80:bb:
         83:9e:54:43:97:19:c6:1e:04:b2:38:0d:a9:b7:cb:45:4b:d0:
         4e:95:15:62:86:f8:a7:1e:95:f7:fd:02:e0:1d:17:ec:71:06:
         2a:f5:dc:ef:d3:91:95:e9:cb:58:ad:ca:c9:11:65:0e:f6:da:
         f9:1b:88:0e:3f:9c:06:82:d8:b7:d0:8a:a9:cc:b5:89:7e:cd:
         9d:f8:79:03:e3:8c:ef:d4:ad:71:6e:6b:20:35:ab:98:d4:50:
         f5:65:a3:66:fa:f1:38:ab:4b:7e:47:c3:44:d5:4d:8f:d3:a8:
         aa:34:c7:7b:a1:cd:85:f5:4d:d5:22:69:75:d4:83:9a:67:75:
         b7:68:19:f4:2e:82:03:0d:aa:87:eb:a1:fe:39:31:08:d2:a3:
         10:e2:66:d5:a3:c5:9e:11:1f:f5:a0:2d:b1:f5:88:c1:05:93:
         24:c7:06:cf:07:d3:39:36:89:75:da:7c:0e:29:0b:1c:e7:d0:
         61:0f:a4:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:08:51 2026 by rpki-client