Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
File:                     cmIg2YvMfcZqPM83Z36go9sJDaQ.mft (raw, json)
Hash identifier:          LXBlv2X/L04bEej+wXltthr6HGkn6djw3TXqBx4Y/ps=
Subject key identifier:   5D:70:DF:09:3E:AE:2A:7F:DB:E9:1C:98:08:6D:FB:34:D3:11:B1:E4
Authority key identifier: 72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4
Certificate issuer:       /CN=A914AE22/serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
Certificate serial:       0C83
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
Manifest number:          0C78
Signing time:             Thu 16 Apr 2026 18:31:51 +0000
Manifest this update:     Thu 16 Apr 2026 18:31:50 +0000
Manifest next update:     Thu 23 Apr 2026 18:31:50 +0000
Files and hashes:         1: cmIg2YvMfcZqPM83Z36go9sJDaQ.crl (hash: n3H25r4DTe9wFdVxQa+oltAIPJReEdI2NgjIthTvXAw=)
                          2: 021496F2A4EC11F0A8EB5F7EC4F9AE02.roa (hash: jvXpWHuQMqZIyWCLt8zGlmD/EFuQwBIFv6UJxNzSdzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl
                          rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:31:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3203 (0xc83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914AE22, serialNumber=726220D98BCC7DC66A3CCF37677EA0A3DB090DA4
        Validity
            Not Before: Apr 16 18:31:50 2026 GMT
            Not After : Apr 23 18:31:50 2026 GMT
        Subject: CN=69e12b16-000f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6a:cb:28:90:6c:aa:a3:df:8b:7d:44:a0:1f:
                    ed:fc:55:a1:1a:f3:a8:40:cd:39:ff:f2:99:56:ac:
                    b4:07:6f:a0:26:c0:1a:c3:d9:06:fe:7e:e2:87:1b:
                    da:a5:5b:f1:30:95:1c:8a:b7:96:85:ad:4d:4d:72:
                    9a:f9:49:56:69:a2:ff:00:95:4e:4b:5a:1f:31:52:
                    76:4e:4e:ad:97:73:f0:8a:28:ae:09:8d:c2:81:8b:
                    06:9f:24:cf:62:3e:38:52:af:b4:8d:41:59:8c:ef:
                    85:2b:e1:66:02:50:df:c3:7c:d1:77:f6:d9:7d:81:
                    4c:d0:38:3b:33:af:52:d4:42:0f:0c:57:cd:10:6e:
                    65:9b:9b:5c:0b:ab:20:94:c0:80:21:0d:34:79:81:
                    1c:a6:01:7b:50:6d:d8:d6:a2:70:02:f9:d0:4c:ec:
                    2c:e7:fb:71:04:e1:ea:9e:5f:be:b9:81:22:8f:d6:
                    6d:06:27:12:ea:7b:34:01:74:ab:ba:b0:bf:87:a8:
                    7c:f5:5b:0c:6e:9e:7d:0a:a5:2b:a2:09:34:7b:93:
                    8c:ac:06:fb:fc:41:77:5c:18:25:f2:a4:7f:58:f5:
                    05:51:56:6a:ca:03:30:5c:e9:37:ce:87:8f:f0:e1:
                    51:ff:ee:b8:ae:1e:bf:f1:23:f8:2b:03:b0:b2:85:
                    51:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:70:DF:09:3E:AE:2A:7F:DB:E9:1C:98:08:6D:FB:34:D3:11:B1:E4
            X509v3 Authority Key Identifier:
                keyid:72:62:20:D9:8B:CC:7D:C6:6A:3C:CF:37:67:7E:A0:A3:DB:09:0D:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cmIg2YvMfcZqPM83Z36go9sJDaQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914AE22/B178439E1BBF11EAB6A74F71C4F9AE02/cmIg2YvMfcZqPM83Z36go9sJDaQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:ef:07:e1:60:d5:97:db:13:08:d3:8c:d0:5b:c8:e1:eb:99:
         10:a4:e4:37:4e:71:a3:1b:bc:79:4d:5e:54:c8:a6:97:d0:fc:
         e4:7a:fa:1f:3c:0b:2d:60:c9:ed:da:18:49:f5:18:7a:0b:67:
         ec:5f:9d:e4:ba:41:95:90:b1:25:08:5a:c7:b9:4b:c5:6a:8a:
         b8:37:5b:ad:16:44:fb:ba:c1:3b:63:81:52:d8:53:98:b0:69:
         9c:97:32:35:1f:5a:b2:64:eb:61:7c:7b:86:9f:9e:ac:85:e2:
         b9:52:21:27:8b:34:0f:3b:b3:67:f1:6f:1f:bb:c1:e3:c0:9b:
         6e:19:d7:ea:e6:d9:29:e2:ad:80:f5:8f:56:f8:f5:5d:37:76:
         97:a7:38:79:f2:c4:cb:b1:8e:6c:f7:fe:78:b8:7a:a0:6e:87:
         e5:43:ea:a5:a5:7f:fa:c0:9a:bd:fc:61:39:37:42:8d:ea:4a:
         ed:5a:66:e8:20:40:f5:5b:0a:87:b5:d5:32:36:12:70:b2:32:
         e8:83:d0:ec:05:9f:f2:ff:f5:1a:d1:b8:a6:75:f9:cb:c0:1d:
         65:fa:da:fa:68:ba:31:41:38:c2:59:a9:82:28:60:aa:5e:5c:
         7e:c1:74:e6:a8:7a:be:cd:8d:91:c8:72:52:1c:5b:d2:83:98:
         84:f0:01:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:39:47 2026 by rpki-client