Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
File:                     J04DtnsxEz3nwKrpninBmVlSta0.mft (raw, json)
Hash identifier:          o5qrXQS5pkAeb2ceKInsr9EwXGMGqk/CAKtHWGr7tV0=
Subject key identifier:   78:2E:C4:BD:16:FB:69:FE:48:67:DD:4C:A8:AC:11:D5:56:1A:F4:F2
Authority key identifier: 27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD
Certificate issuer:       /CN=A91384FB/serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
Certificate serial:       0C21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
Manifest number:          0C0D
Signing time:             Thu 16 Apr 2026 18:43:25 +0000
Manifest this update:     Thu 16 Apr 2026 18:43:24 +0000
Manifest next update:     Thu 23 Apr 2026 18:43:24 +0000
Files and hashes:         1: J04DtnsxEz3nwKrpninBmVlSta0.crl (hash: gcNKwfXeQf76LTq9vQM6fTALh42Nh19zFDoOA77fjHE=)
                          2: E1647F18303311EA8796D584C4F9AE02.roa (hash: hvHQ4oovH4LfseVNWUdyIbRafNtihmdVkn0b5XITvtA=)
                          3: E1FC5A5E303311EA8796D584C4F9AE02.roa (hash: TblqmML4Z56TJGS/QmGAg1lALjsba+7daK1iMQjSZu0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl
                          rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:43:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3105 (0xc21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91384FB, serialNumber=274E03B67B31133DE7C0AAE99E29C1995952B5AD
        Validity
            Not Before: Apr 16 18:43:24 2026 GMT
            Not After : Apr 23 18:43:24 2026 GMT
        Subject: CN=69e12dcd-97f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:86:c3:25:75:66:93:f5:96:6a:9f:e0:da:50:
                    01:a9:db:8f:00:ec:0f:4b:8b:95:5f:06:97:fb:a5:
                    15:58:0d:a0:d2:bd:ef:32:ae:2a:59:00:46:31:76:
                    84:fe:17:fb:bf:48:4e:41:02:a8:87:bc:39:d8:3d:
                    8c:b2:fc:3f:c9:61:27:73:e6:22:ae:fc:54:a1:5f:
                    f1:d1:ca:d1:d8:1e:99:48:10:5f:1e:2d:ff:79:39:
                    a3:b6:91:02:35:87:65:c0:5f:cd:0e:13:2f:ef:82:
                    16:bb:57:d1:97:e2:d9:ee:88:7c:48:16:19:9a:09:
                    15:74:5e:f8:92:00:48:6a:32:82:fe:27:57:d7:bc:
                    71:0c:76:a7:96:0b:4f:ff:83:48:7a:74:5f:60:52:
                    70:43:2e:23:d8:2d:7a:a8:6c:ba:44:a8:3e:00:b6:
                    be:83:e6:73:28:ad:d4:c3:0a:d9:7c:21:21:55:77:
                    cc:98:44:cb:f4:ec:da:46:f6:fc:9e:43:1a:24:8e:
                    9c:64:af:43:3b:e1:41:65:eb:61:d2:d9:75:d7:b9:
                    14:70:a7:45:4f:7b:bd:75:db:f3:08:10:c4:6d:03:
                    2f:b2:35:29:b3:9d:1b:85:ac:14:39:6d:c0:e3:fd:
                    56:49:a3:f9:47:74:6c:ff:65:b0:f4:34:4d:f4:e1:
                    e1:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:2E:C4:BD:16:FB:69:FE:48:67:DD:4C:A8:AC:11:D5:56:1A:F4:F2
            X509v3 Authority Key Identifier:
                keyid:27:4E:03:B6:7B:31:13:3D:E7:C0:AA:E9:9E:29:C1:99:59:52:B5:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/J04DtnsxEz3nwKrpninBmVlSta0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91384FB/2DD90F2C303311EA8D662C84C4F9AE02/J04DtnsxEz3nwKrpninBmVlSta0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:8e:69:ce:a1:25:6c:84:e8:da:3d:76:ad:9c:d8:9b:ce:3a:
         2a:42:54:d2:38:f7:b6:0f:f6:c3:b5:f4:53:bc:f8:a4:b2:29:
         ac:99:33:51:52:23:49:7c:40:04:50:05:d1:51:cf:16:37:ce:
         ec:25:ad:32:84:67:ed:60:83:fe:8e:b5:03:82:b2:df:02:85:
         4d:ca:3b:ec:f4:07:35:4f:7d:12:da:b8:3a:e7:ce:71:a5:b5:
         ae:33:86:22:93:c0:a7:ad:b4:e7:4e:b6:d5:ea:a5:7b:eb:55:
         c1:cd:d9:06:e0:4e:76:3f:ff:66:fc:9d:40:d4:c0:79:c2:98:
         c4:bc:f3:05:0d:a5:5b:bb:08:fb:bf:93:74:13:00:de:21:b9:
         b7:04:3b:c1:0c:78:12:c2:38:f3:6a:cb:7e:bf:ed:6b:aa:f7:
         3c:ac:f2:f4:eb:b0:c3:0d:ef:c4:eb:f3:7c:62:16:06:10:94:
         4a:fd:51:15:41:6b:26:7b:14:72:b2:aa:86:7b:56:a2:8b:6c:
         14:2b:31:f6:c7:9b:79:4c:b5:f7:91:f9:62:de:02:cc:26:ba:
         d4:62:49:02:c3:47:87:3c:b6:31:cc:d9:b6:a9:b8:64:a7:4b:
         d0:af:4b:c8:88:4f:03:d7:30:8b:5e:6a:80:7c:dd:20:07:07:
         03:3f:36:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:51 2026 by rpki-client