Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
File:                     4JlhFVCKOtWZFdurzLaW26C0zHI.mft (raw, json)
Hash identifier:          6ywJzyWZnIOYFn5EQNKTg0RLs0wvbp7kpebnR07A4OE=
Subject key identifier:   F8:B2:7D:81:57:DB:80:5B:6B:DF:09:C4:6B:22:64:2F:22:94:3C:06
Authority key identifier: E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72
Certificate issuer:       /CN=A9153CE9/serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
Certificate serial:       0624
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
Manifest number:          05FE
Signing time:             Thu 16 Apr 2026 22:52:27 +0000
Manifest this update:     Thu 16 Apr 2026 22:52:26 +0000
Manifest next update:     Thu 23 Apr 2026 22:52:26 +0000
Files and hashes:         1: 4JlhFVCKOtWZFdurzLaW26C0zHI.crl (hash: mWAtnYqvzhnPUrYIOVeBvKr06TDo4tWzmO0Eth1LP0s=)
                          2: 03C7AA80F01111ED9C345840C4F9AE02.roa (hash: TBXfHIsLBP1r3Og38/Zn+SGz/Jmiive4bvBF8Q5gW6Q=)
                          3: F650791EF01411ED9210D060C4F9AE02.roa (hash: AWc+boEStiOUVPv+8IUahYFAvtg7A+MrQdgGzHZN4Yg=)
                          4: 6D655B7CAF4F11F0A741B236C4F9AE02.roa (hash: 2NIJ+RBIKW5iZiN3H8lcUO6ml0C3TxyzXOWCEv8U7M8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl
                          rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:52:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1572 (0x624)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9153CE9, serialNumber=E0996115508A3AD59915DBABCCB696DBA0B4CC72
        Validity
            Not Before: Apr 16 22:52:26 2026 GMT
            Not After : Apr 23 22:52:26 2026 GMT
        Subject: CN=69e1682b-b244
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:75:e8:1f:03:ed:b6:c0:db:8a:cf:07:c3:
                    b0:5f:97:28:32:a6:4f:e6:22:7b:a2:91:4a:95:ef:
                    e7:1a:25:ff:b7:a4:fd:4a:4a:ab:79:46:78:c9:88:
                    00:4b:75:ec:0d:88:a9:60:2a:b1:73:27:86:f6:19:
                    f6:74:0e:c1:03:e7:29:1f:16:07:4f:3e:1e:94:21:
                    17:5e:7a:11:2a:80:eb:e3:82:7d:41:e7:99:c5:23:
                    a7:c3:b7:60:59:b2:1a:a8:98:6c:a4:3d:ae:ae:9e:
                    47:73:7e:00:d0:d2:19:18:3c:53:d3:58:bb:a6:b2:
                    65:b4:18:e1:f8:87:72:a7:58:2e:98:1c:18:16:8a:
                    b1:26:0b:82:c5:12:76:90:2f:f5:82:33:7a:d3:24:
                    03:cd:57:4d:3e:f6:db:ef:db:88:7b:53:95:fb:cd:
                    25:72:ae:30:eb:ff:3a:02:00:d6:7f:f9:50:ce:c3:
                    65:bd:73:0d:10:34:33:1f:b4:ed:4d:e2:96:2c:b1:
                    43:2e:4c:17:97:dc:a6:fb:c3:b8:22:c7:df:7f:ff:
                    03:fd:6a:86:31:6e:2d:4a:20:5f:6a:53:db:2b:f7:
                    8a:e6:16:79:ac:07:30:4b:75:a8:d1:50:fe:84:17:
                    76:e6:87:d4:5b:67:16:ce:96:2f:9e:f1:15:4e:25:
                    21:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:B2:7D:81:57:DB:80:5B:6B:DF:09:C4:6B:22:64:2F:22:94:3C:06
            X509v3 Authority Key Identifier:
                keyid:E0:99:61:15:50:8A:3A:D5:99:15:DB:AB:CC:B6:96:DB:A0:B4:CC:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4JlhFVCKOtWZFdurzLaW26C0zHI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9153CE9/0AB1D396F51511EB9EFE0750C4F9AE02/4JlhFVCKOtWZFdurzLaW26C0zHI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:a4:9c:c2:18:1d:65:22:bf:92:65:a4:af:f2:d4:33:88:
         2f:1f:e9:ba:be:5c:04:5e:18:ab:13:35:4b:e6:d1:8a:22:d4:
         6b:44:2d:29:41:98:4d:16:c0:73:bc:63:1d:9a:5c:91:18:45:
         c9:a6:3d:1e:cb:34:23:59:b9:89:39:09:13:95:24:ca:0e:ae:
         ca:62:4e:3d:8b:48:2b:51:bf:d7:70:a6:be:5d:92:eb:3e:f2:
         ad:db:d2:1f:07:6b:5e:fc:bc:a2:44:cf:28:29:9d:50:6f:cb:
         c4:dd:f2:0f:b8:93:46:4f:fb:b7:df:41:9a:02:e7:a5:bb:95:
         e9:9c:b7:91:9a:f6:38:a1:a4:14:4d:5c:66:99:b8:af:95:a3:
         0e:d4:fb:b1:fa:7b:d7:3b:f5:56:36:99:2b:46:45:24:f4:a2:
         9d:63:fc:36:5d:89:59:1b:57:df:fb:23:bd:61:d6:24:ad:a1:
         5b:53:7f:8f:35:23:c1:09:7b:eb:33:c1:60:3f:5e:88:68:c8:
         9d:22:2d:69:c1:d1:78:d7:26:ae:1a:f2:ca:ca:05:79:de:0f:
         06:59:24:15:ca:ef:87:ea:68:06:33:4e:17:48:c1:b3:05:18:
         7d:96:1f:05:41:29:11:b6:f5:c0:51:02:8c:f1:b4:af:75:c1:
         2f:27:b0:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:20:11 2026 by rpki-client