Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
File:                     -0iFaOdSC8eCoRmJdikDDtBpXNs.mft (raw, json)
Hash identifier:          CTcv94DIEFi1EcKv5uEY5tqCgzRi7v/F5IEXOEjsw5M=
Subject key identifier:   01:B8:70:5D:0D:05:F0:AB:58:50:A0:69:D3:4B:BE:DC:F6:27:88:B2
Authority key identifier: FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB
Certificate issuer:       /CN=A914459D/serialNumber=FB488568E7520BC782A119897629030ED0695CDB
Certificate serial:       F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
Manifest number:          ED
Signing time:             Sun 19 Apr 2026 06:02:56 +0000
Manifest this update:     Sun 19 Apr 2026 06:02:56 +0000
Manifest next update:     Sun 26 Apr 2026 06:02:56 +0000
Files and hashes:         1: -0iFaOdSC8eCoRmJdikDDtBpXNs.crl (hash: ETjAaz6hH4qRTnZG7s4DIxmeFybp5lY4yDXVU/GPDfE=)
                          2: 4720EB9ED60F11EFA2510540C4F9AE02.roa (hash: dIUAkDQ7djth80Fp66K2XB/D2by8C9/LB315auIcwbE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl
                          rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 241 (0xf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914459D, serialNumber=FB488568E7520BC782A119897629030ED0695CDB
        Validity
            Not Before: Apr 19 06:02:56 2026 GMT
            Not After : Apr 26 06:02:56 2026 GMT
        Subject: CN=69e47010-c80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:9f:78:3c:46:b7:ba:c7:05:b1:ba:54:15:1e:
                    ad:cb:e6:88:2b:fe:b5:95:e9:1f:c3:26:86:9f:cb:
                    75:87:8d:22:93:cd:e1:e2:20:d8:9f:84:c4:a4:aa:
                    e1:df:98:08:1f:a6:f1:a1:cd:f6:4b:42:2b:5d:35:
                    39:9c:bb:4d:5c:12:42:55:cd:b9:e4:41:2f:40:df:
                    0f:3e:9d:64:d4:77:2b:67:bb:e9:ac:e0:44:5a:c3:
                    53:78:c3:2a:1c:7b:8c:64:5a:d9:ba:a3:41:68:e7:
                    a2:03:5b:f2:cb:40:05:22:36:65:86:d0:38:85:22:
                    1e:83:0d:e5:3b:5f:2e:ee:47:d5:29:6e:01:c6:cf:
                    e9:c6:c1:b7:4a:21:81:44:00:91:73:ad:ab:2e:4f:
                    37:3a:d0:67:3a:f3:aa:17:a8:cf:74:fd:6d:ae:64:
                    e3:11:20:85:a4:81:b6:8e:eb:75:59:aa:59:96:0c:
                    f2:18:f5:67:8f:8b:7c:a7:80:40:b1:69:5d:6d:db:
                    e5:4a:db:11:32:6b:8e:a1:fc:a0:14:1a:0b:07:e8:
                    4b:5b:6e:75:2b:06:ab:bd:3d:25:95:cc:68:d5:c2:
                    68:09:d7:ca:ad:68:4e:02:27:8e:4b:55:7a:49:97:
                    09:c9:3e:63:8a:fd:e2:16:ee:b8:e9:1a:bb:0c:db:
                    3d:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:B8:70:5D:0D:05:F0:AB:58:50:A0:69:D3:4B:BE:DC:F6:27:88:B2
            X509v3 Authority Key Identifier:
                keyid:FB:48:85:68:E7:52:0B:C7:82:A1:19:89:76:29:03:0E:D0:69:5C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0iFaOdSC8eCoRmJdikDDtBpXNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914459D/0B3F665AD60F11EFB0FA533FC4F9AE02/-0iFaOdSC8eCoRmJdikDDtBpXNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:32:7a:07:a2:a4:0c:b0:0b:f4:27:16:a5:94:4a:3b:3d:96:
         b4:14:69:9f:50:b1:cf:3e:48:ae:ba:fd:aa:a8:83:4f:91:16:
         38:5a:5d:0f:97:c8:83:28:c1:8b:58:35:1f:ad:3b:60:26:d6:
         51:5c:50:b1:51:91:59:d3:a9:b0:8f:55:17:8f:07:31:20:99:
         db:17:53:04:cf:7c:f2:f5:ca:50:14:40:a7:9e:d6:fa:1f:b3:
         9e:c1:65:30:79:70:0c:aa:56:89:06:91:f6:dc:a0:9e:9b:4d:
         d3:13:cd:02:7d:e0:26:f7:0c:35:9b:c2:03:26:c3:58:bf:39:
         28:4c:cc:ee:48:02:89:65:54:ea:1d:51:c3:5f:93:0e:25:92:
         96:82:90:5c:72:43:4a:8e:c5:19:3d:21:40:35:59:6f:ba:fd:
         23:37:75:06:dd:8f:08:0e:01:b0:d0:19:09:58:51:f1:c2:8f:
         19:97:2f:75:6d:95:da:0a:0b:ae:87:87:19:7e:63:2d:9b:50:
         37:ed:62:38:58:8d:69:94:b7:90:7b:c3:86:2c:3b:4b:54:74:
         a6:a1:fb:36:50:9e:31:83:21:1d:97:39:0e:17:cf:34:d0:7b:
         f3:8c:b7:69:42:7d:5c:7b:1f:95:4b:b7:ae:95:90:8e:73:e1:
         95:0c:5e:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:48:18 2026 by rpki-client