Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
File:                     b3fBnxHTKqqkLiaRb3SC77j5ehw.mft (raw, json)
Hash identifier:          D7LJ2dWp1OQhP21E5Iz2r6gDIX+Ry2Q5CoafAqLJgpA=
Subject key identifier:   D9:4B:72:CD:5A:FE:96:B9:52:FE:43:86:43:FB:90:AC:C9:DC:EF:EF
Authority key identifier: 6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C
Certificate issuer:       /CN=A913D125/serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
Manifest number:          F4
Signing time:             Wed 15 Apr 2026 05:55:12 +0000
Manifest this update:     Wed 15 Apr 2026 05:55:11 +0000
Manifest next update:     Wed 22 Apr 2026 05:55:11 +0000
Files and hashes:         1: b3fBnxHTKqqkLiaRb3SC77j5ehw.crl (hash: g8mo2OUdb7fmE8QahBEtzOhzFIHwubYo18OT7tBNmGU=)
                          2: 62743016CC1111EFA5744A6FC4F9AE02.roa (hash: hlc/zBoAtbTj6NsgQPISupfKKjQQ309kzeQx+JZUlfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 05:55:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=6F77C19F11D32AAAA42E26916F7482EFB8F97A1C
        Validity
            Not Before: Apr 15 05:55:11 2026 GMT
            Not After : Apr 22 05:55:11 2026 GMT
        Subject: CN=69df2840-b3af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:d4:7f:b0:a4:3c:43:84:7e:6a:5f:a9:55:
                    3d:29:92:4c:20:ad:a1:15:88:58:0a:e7:25:f6:ad:
                    96:6b:03:d2:a6:f0:95:0f:5f:de:00:46:48:4f:68:
                    ea:94:98:a4:47:f6:7e:92:e2:fe:f4:fe:fa:ab:b2:
                    25:ef:1b:1b:7a:c2:d2:de:e4:d4:f9:5a:f4:63:26:
                    a2:29:36:8f:88:69:ba:ab:00:25:0a:d5:e1:9c:50:
                    87:3d:f3:30:24:1f:f2:e0:7a:b3:12:05:3b:6d:e4:
                    d5:43:fb:d4:c3:ff:06:a4:ba:de:1a:ca:09:b3:70:
                    e8:11:a3:d3:c3:a3:23:27:a2:dc:c1:37:62:63:8c:
                    03:b8:56:7f:14:da:0d:b6:d4:e8:36:04:ee:ce:cb:
                    e1:61:38:e7:2c:a0:df:cf:24:86:90:55:04:31:9f:
                    2e:77:d8:22:8b:28:a0:a4:92:2e:26:ce:cd:55:fa:
                    0c:32:da:b2:58:ef:8e:cf:d7:15:9f:7b:1e:72:b9:
                    c2:85:d4:a4:2c:c7:c7:3a:50:70:49:d4:c0:25:e8:
                    e0:3b:9a:c2:04:1f:78:fb:c7:da:8f:9f:d3:b7:b1:
                    6f:c6:f1:d2:bf:d3:a9:0f:58:b5:07:01:ed:4f:e5:
                    de:c9:d3:f7:8a:b7:aa:b3:46:b2:6d:3c:74:d8:fb:
                    98:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:4B:72:CD:5A:FE:96:B9:52:FE:43:86:43:FB:90:AC:C9:DC:EF:EF
            X509v3 Authority Key Identifier:
                keyid:6F:77:C1:9F:11:D3:2A:AA:A4:2E:26:91:6F:74:82:EF:B8:F9:7A:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b3fBnxHTKqqkLiaRb3SC77j5ehw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/F5F7878ACC1011EF87396A6EC4F9AE02/b3fBnxHTKqqkLiaRb3SC77j5ehw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:f2:88:37:fb:db:40:ee:35:8b:48:c6:d5:5d:3d:e2:fb:bc:
         a6:04:d8:7b:ab:7c:ae:45:91:45:a0:79:7e:31:b2:99:58:d8:
         6d:83:02:ee:31:2b:0e:dc:45:16:dc:28:8a:56:2e:34:96:b6:
         2c:ee:d1:2f:5d:84:ab:9f:7b:1c:48:70:e3:2b:b5:c9:ef:80:
         52:f1:dd:09:71:9c:9e:a4:5f:2a:ec:f6:87:fe:61:41:9d:eb:
         40:95:f8:4b:d0:cc:be:6b:d6:98:45:7e:d4:02:0f:75:92:57:
         6f:84:9f:74:b9:b7:ca:49:f4:34:e0:3d:15:0f:20:1c:bd:d5:
         72:06:a7:b0:8a:4e:da:cc:5a:c5:1e:5a:ed:ee:bb:dc:ba:10:
         d1:0e:51:35:15:62:b6:7b:53:16:e0:f0:f7:05:ab:b9:64:5f:
         ae:6b:c7:b9:55:1c:85:90:f7:44:6a:fd:04:b8:c1:19:b1:b6:
         12:12:d2:3e:5e:b7:05:5d:1a:33:06:c4:ee:6e:ee:a3:c7:32:
         80:e6:df:1c:a8:b2:ce:ac:df:b7:e5:22:aa:64:92:b1:81:65:
         7c:15:2f:ff:5d:59:99:e4:f5:8e:9e:25:8c:7a:1f:9f:32:dd:
         ac:84:73:55:34:5b:1d:af:ad:a6:a1:7c:c0:44:6c:4b:da:8c:
         f2:ff:26:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:51:12 2026 by rpki-client