Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
File:                     pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft (raw, json)
Hash identifier:          U44UM5qtL9omvXjynEoAJ5TCuDfvJ/XmTyZkqhaiTY8=
Subject key identifier:   F0:36:5C:EE:D6:93:91:20:B6:DB:CF:A5:55:97:92:5E:75:80:DC:52
Authority key identifier: A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F
Certificate issuer:       /CN=A913D0CA/serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F
Certificate serial:       A4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
Manifest number:          A4
Signing time:             Fri 17 Apr 2026 07:00:31 +0000
Manifest this update:     Fri 17 Apr 2026 07:00:30 +0000
Manifest next update:     Fri 24 Apr 2026 07:00:30 +0000
Files and hashes:         1: pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl (hash: lBn64ApGRTzJcSv4OjadVIqNeUbayKKZAzB6O2ymI/M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl
                          rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:00:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D0CA, serialNumber=A474F08C7F3F488D5B90E1299A349FF251DDE11F
        Validity
            Not Before: Apr 17 07:00:30 2026 GMT
            Not After : Apr 24 07:00:30 2026 GMT
        Subject: CN=69e1da8f-02a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:08:26:d9:dc:fa:04:88:aa:2c:16:9d:87:06:
                    a0:9c:b0:73:e5:aa:20:5d:00:6f:3e:db:53:d5:f8:
                    65:87:24:00:81:d6:ca:4d:b0:bf:0a:7a:2d:0b:bc:
                    e7:94:64:03:68:92:5b:df:dc:6c:97:c0:eb:8a:2c:
                    e0:f4:2e:ad:ab:be:0e:ee:52:32:4a:8b:dc:cc:6e:
                    47:20:1a:a9:7e:0f:96:aa:22:b6:dc:f1:d8:88:f9:
                    48:9e:22:90:ce:32:5f:aa:f7:71:73:ef:1b:97:62:
                    c8:90:eb:97:4c:30:1c:22:cb:78:86:d1:3e:94:fc:
                    2f:c0:d8:2c:aa:bd:fc:f1:8f:47:02:4e:62:93:62:
                    27:e4:54:8d:a4:1d:07:57:31:b1:48:f4:6b:a0:36:
                    a5:b3:1f:e2:57:94:81:92:21:63:0f:a9:c6:fb:1e:
                    73:b7:28:cc:7c:1b:fb:38:01:8a:2d:60:6f:14:74:
                    9d:8f:4e:80:3b:9d:28:6c:f4:b7:0a:13:08:b8:d4:
                    2b:30:78:3e:0c:81:1f:b0:35:47:e0:3e:92:de:cb:
                    6a:87:d2:33:ff:ca:06:eb:80:80:ff:75:dd:6a:54:
                    86:6c:b4:7f:e1:2e:3d:e4:f6:5a:04:12:3c:9b:cb:
                    f4:c6:ab:d3:0e:4e:e8:4e:bb:cc:4f:06:fc:be:03:
                    54:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:36:5C:EE:D6:93:91:20:B6:DB:CF:A5:55:97:92:5E:75:80:DC:52
            X509v3 Authority Key Identifier:
                keyid:A4:74:F0:8C:7F:3F:48:8D:5B:90:E1:29:9A:34:9F:F2:51:DD:E1:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pHTwjH8_SI1bkOEpmjSf8lHd4R8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D0CA/B78873A245B811F084F36C5FC4F9AE02/pHTwjH8_SI1bkOEpmjSf8lHd4R8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:58:33:0e:c1:79:1e:0f:5c:c9:d5:1e:e0:91:bf:ab:a7:b2:
         25:61:ad:82:16:2d:3c:38:95:87:9b:d7:91:db:c6:38:a6:e6:
         58:16:e4:49:02:0d:3b:44:b2:b0:b7:ce:58:b8:af:b2:03:94:
         3b:6e:ff:5e:1b:22:50:b4:81:ee:a6:0b:65:bb:c8:61:aa:95:
         72:32:30:64:cf:f5:85:e3:f4:f2:38:b1:2c:67:df:0f:81:95:
         14:1e:9c:8d:64:4d:2a:e0:4d:1b:c9:d2:82:5d:d2:f4:0b:ef:
         aa:81:1c:26:e6:c7:06:71:2c:50:54:91:ee:7b:24:22:0d:cf:
         f1:e4:c1:a7:fd:f0:a0:ba:17:3f:9b:93:f6:ac:9a:a0:da:f4:
         07:c1:aa:29:87:22:28:68:c0:a4:42:9e:cc:e0:0a:55:f9:35:
         1d:41:e4:41:21:1d:82:86:db:4f:e9:0f:c6:7d:2e:e6:1f:b2:
         0a:12:12:c7:ae:47:30:52:49:ee:3b:e1:6d:9b:a5:60:db:0d:
         59:41:74:a8:71:2c:64:8c:df:b5:2f:d5:e4:e2:6b:3a:c4:0e:
         a6:1f:3c:c4:00:15:5f:d8:40:c0:55:11:b3:e1:8b:7c:74:81:
         e6:54:fb:57:73:7a:b4:95:35:3a:47:f7:af:cb:1f:9f:57:68:
         59:e4:63:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:21:19 2026 by rpki-client