Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
File:                     eSaDgGyL46wTYU03XpAZJ0CZvHs.mft (raw, json)
Hash identifier:          VXGoKW6x2y4e8rXdg/7Ygx7HYwcnZjNWyqhm90goGlI=
Subject key identifier:   52:C8:4E:18:92:5A:F3:DE:55:24:56:68:D7:E8:78:B3:38:12:5A:70
Authority key identifier: 79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B
Certificate issuer:       /CN=A914A92C/serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
Certificate serial:       0117
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
Manifest number:          010D
Signing time:             Fri 17 Apr 2026 05:43:59 +0000
Manifest this update:     Fri 17 Apr 2026 05:43:58 +0000
Manifest next update:     Fri 24 Apr 2026 05:43:58 +0000
Files and hashes:         1: eSaDgGyL46wTYU03XpAZJ0CZvHs.crl (hash: NJp0s5/AopIobP7j8SxMleuvRX31kbhHBJAuyycavZg=)
                          2: 55B355DCA60F11EF82E7691DC4F9AE02.roa (hash: OpU18Mvs2z700dAbPWy+rw1+oGqs2hvGC4cmM9zQ/YQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl
                          rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:43:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 279 (0x117)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914A92C, serialNumber=792683806C8BE3AC13614D375E9019274099BC7B
        Validity
            Not Before: Apr 17 05:43:58 2026 GMT
            Not After : Apr 24 05:43:58 2026 GMT
        Subject: CN=69e1c89f-1fb3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:dd:be:3d:38:f7:fa:9e:42:c3:03:eb:63:36:
                    42:7c:fb:db:1c:df:42:6c:b3:59:96:0d:7e:93:17:
                    c6:ed:a2:b1:54:d6:c4:68:aa:15:d5:e5:43:ab:7b:
                    89:41:fe:26:bb:a0:51:01:b9:52:64:a2:b9:dc:96:
                    3d:06:03:73:00:98:ee:ad:98:2e:cb:bb:27:ea:f0:
                    ce:e4:51:71:1f:34:6a:04:aa:64:2e:c0:b0:f2:ac:
                    4b:5b:39:53:bf:16:fe:85:c9:c8:79:9c:9a:3a:6c:
                    b2:90:fe:00:7e:f1:c6:0c:ed:25:4f:5c:ad:76:c4:
                    cc:31:34:51:ef:b1:e6:36:f8:86:f3:28:6e:65:1c:
                    1a:d3:06:d5:3d:da:30:19:a2:52:7e:61:b8:f1:a0:
                    06:4a:9b:6a:63:2c:e4:fa:0d:06:61:80:cd:d3:2d:
                    4b:3f:da:1e:ab:03:db:c4:ce:73:3c:a0:e2:c1:1f:
                    12:45:e1:1b:bc:7c:14:a8:a7:57:0b:f0:8e:b3:94:
                    88:d0:c5:aa:aa:b4:4b:6d:46:37:1a:b7:9e:71:e2:
                    88:c1:12:e8:33:52:d3:50:91:f8:06:15:56:ff:5c:
                    13:60:e2:3c:67:6d:69:88:63:b0:90:a6:1e:60:22:
                    43:a7:9e:d9:dd:3e:52:8c:0a:cc:6d:21:f7:76:32:
                    61:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C8:4E:18:92:5A:F3:DE:55:24:56:68:D7:E8:78:B3:38:12:5A:70
            X509v3 Authority Key Identifier:
                keyid:79:26:83:80:6C:8B:E3:AC:13:61:4D:37:5E:90:19:27:40:99:BC:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eSaDgGyL46wTYU03XpAZJ0CZvHs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914A92C/A52814D2A60E11EFA68A6C1BC4F9AE02/eSaDgGyL46wTYU03XpAZJ0CZvHs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:87:0a:2f:47:62:f2:59:3e:84:6f:6a:b4:27:c4:eb:e5:46:
         5e:06:00:e0:af:dd:d1:7a:f5:00:a3:b8:d3:72:2b:42:f8:a3:
         a8:2a:a4:1d:59:05:99:39:08:ec:64:18:3e:21:2d:6c:a7:a1:
         37:ad:cd:75:7d:23:43:fb:b8:b5:09:09:0d:91:de:f7:d3:de:
         7b:de:41:88:c8:1a:02:62:97:2d:c3:59:7e:0b:cd:85:3b:e3:
         79:bb:c3:34:c3:d6:c8:95:da:9c:e1:54:05:07:af:c2:7a:cb:
         11:3b:fa:d3:d5:a9:dc:2c:06:13:45:1c:91:a8:7c:d5:3b:86:
         b0:6d:67:84:26:e9:59:17:91:99:5a:cd:06:79:56:bb:15:c3:
         f0:39:db:db:d8:51:1b:20:36:9d:10:2b:cc:c5:5c:5d:08:f0:
         23:10:20:e9:65:1d:b8:91:8b:94:e5:39:a8:38:90:62:6b:3e:
         5c:ac:0b:44:b4:94:c7:4e:8b:be:56:0d:91:6c:c7:12:38:4c:
         2f:f7:d7:6d:01:c3:c7:71:39:68:a2:a9:28:ee:e3:ba:c4:a1:
         ec:d1:2d:4f:66:71:e6:32:be:a1:c6:e4:d9:50:a6:cb:0a:27:
         b9:c5:0c:45:dc:80:bd:04:32:e7:4f:6d:03:32:a6:b0:cf:82:
         be:2a:06:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:55 2026 by rpki-client