Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
File:                     _U2MY5rcFYR8e0kRFZ3nG9gTk64.mft (raw, json)
Hash identifier:          zjnq0WVBspxoV+5FmMmbAkClFwtRfYVBPSf8bHX/wgs=
Subject key identifier:   52:74:13:7C:33:89:71:93:7A:BC:76:03:63:7D:07:E9:75:F9:73:F7
Authority key identifier: FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE
Certificate issuer:       /CN=A9152462/serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
Certificate serial:       08BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
Manifest number:          08B4
Signing time:             Sat 18 Apr 2026 20:20:27 +0000
Manifest this update:     Sat 18 Apr 2026 20:20:27 +0000
Manifest next update:     Sat 25 Apr 2026 20:20:27 +0000
Files and hashes:         1: _U2MY5rcFYR8e0kRFZ3nG9gTk64.crl (hash: INmanq222VDIoreTM3nER/kTu6xOHD+iKaoUa0aM2Fw=)
                          2: 4149D206DC4711EA80D5D916C4F9AE02.roa (hash: 08XSlJyPx4Pnv98WRUQO7iPvbktsbvN6HxXtSNgZ5oc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl
                          rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 20:20:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2237 (0x8bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152462, serialNumber=FD4D8C639ADC15847C7B4911159DE71BD81393AE
        Validity
            Not Before: Apr 18 20:20:27 2026 GMT
            Not After : Apr 25 20:20:27 2026 GMT
        Subject: CN=69e3e78b-c26b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2b:ce:63:a1:9b:97:bf:2a:f2:4e:cc:17:e4:
                    35:4d:7a:36:f3:b3:b6:e3:a6:67:cb:ef:48:94:23:
                    a3:52:4e:12:9a:f2:a6:b7:de:61:14:27:3a:26:67:
                    5b:b6:52:08:54:45:89:65:3a:1c:64:94:ad:fa:ca:
                    24:95:69:5f:96:a6:45:db:0b:63:f2:9b:54:c3:ac:
                    7d:3a:e9:61:55:43:bf:12:c2:35:9b:6d:8c:ba:f5:
                    9e:b3:2b:c2:08:1a:85:4d:21:9e:e7:0c:26:47:fa:
                    cd:be:7b:24:f1:6d:2c:f1:b4:f7:6e:e7:fb:f1:37:
                    e1:de:9d:76:5e:00:ae:62:d7:de:b5:8b:8c:00:63:
                    8f:73:96:e2:62:bb:50:7c:95:cb:75:93:13:67:fa:
                    5c:9b:31:b8:23:7c:6e:ad:43:57:6e:26:51:de:0a:
                    12:86:9d:68:20:f0:41:8c:bb:56:ae:67:a8:63:4e:
                    e3:1d:d0:bf:bc:b3:ea:03:c6:53:be:8b:9e:6a:bb:
                    de:f6:2e:31:17:31:48:75:71:29:1f:05:82:42:4e:
                    55:c1:c7:ea:fc:37:88:27:df:41:d6:92:70:65:0b:
                    9d:20:51:f0:cb:30:c7:9b:6b:c9:55:25:78:4e:9c:
                    1c:d4:99:d5:cc:b1:fa:10:56:20:4a:90:bd:46:6b:
                    7b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:74:13:7C:33:89:71:93:7A:BC:76:03:63:7D:07:E9:75:F9:73:F7
            X509v3 Authority Key Identifier:
                keyid:FD:4D:8C:63:9A:DC:15:84:7C:7B:49:11:15:9D:E7:1B:D8:13:93:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_U2MY5rcFYR8e0kRFZ3nG9gTk64.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152462/32C757E6DC4511EA86A73713C4F9AE02/_U2MY5rcFYR8e0kRFZ3nG9gTk64.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6a:46:a5:f5:e0:2f:a5:cf:9d:7c:b3:7e:92:f3:db:bf:32:
         c2:5c:a3:0a:3c:2f:a9:28:cb:fc:68:80:52:91:c1:d4:de:8d:
         35:40:71:ba:8b:43:47:30:60:e0:66:34:07:2a:d9:c5:bc:b4:
         4e:f0:c5:b0:07:aa:e2:19:a4:ce:a0:52:b0:05:2f:30:be:37:
         fa:b6:af:a2:03:1d:79:06:4c:82:b6:32:8c:33:a3:58:fa:9c:
         8b:13:90:6b:e3:9f:bb:22:60:35:c7:b5:49:20:d6:ca:e7:33:
         5d:a1:d1:98:5e:b4:db:50:7b:be:45:d5:22:9b:b6:dc:01:f9:
         9d:8f:dd:89:d1:fd:1b:b1:ac:62:a4:4f:ec:8e:42:67:08:fd:
         0e:27:21:4b:71:e6:ac:a2:2b:e9:2d:cb:d1:aa:aa:7d:ff:9d:
         55:f9:dd:9b:fd:b6:c3:9d:67:e9:4a:9b:6c:46:19:1d:07:35:
         32:7e:26:e5:95:a4:76:a4:cf:7e:98:a8:4b:45:a3:36:47:fb:
         3e:ea:0b:43:0f:dc:e3:91:67:4e:98:26:7c:8f:1e:4b:b0:b8:
         9c:2a:22:13:e7:2b:7e:88:8d:da:59:5c:50:8c:9d:38:44:de:
         89:4c:cb:b1:58:10:c0:c2:83:d2:dd:f6:7d:1a:f3:df:3c:77:
         b6:2c:a5:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:16:10 2026 by rpki-client