Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File:                     ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier:          /32KxrJZf6yrxmV2Bi0073OLdQGhzDg1ZHX4cYQQotI=
Subject key identifier:   BB:49:5B:7B:EF:B9:2E:D4:B3:F1:32:BF:5F:0F:2D:9C:2E:7C:6B:45
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer:       /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial:       07CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number:          07BE
Signing time:             Sat 18 Apr 2026 21:22:11 +0000
Manifest this update:     Sat 18 Apr 2026 21:22:11 +0000
Manifest next update:     Sat 25 Apr 2026 21:22:11 +0000
Files and hashes:         1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: BZ6N+ufBc7JG5h0sOl+rY9coCm/cKjM9m7+A5zChJwU=)
                          2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
                          rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:22:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1997 (0x7cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
        Validity
            Not Before: Apr 18 21:22:11 2026 GMT
            Not After : Apr 25 21:22:11 2026 GMT
        Subject: CN=69e3f603-3cee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:70:45:f3:9e:8f:b7:93:27:94:3a:76:35:5f:
                    ba:57:26:34:6c:ef:4a:0c:91:30:24:81:19:4f:02:
                    c6:c3:d4:85:10:1c:9f:d3:1f:a1:9f:f9:6f:e4:dd:
                    e8:3b:d7:94:2c:96:e3:e5:4f:9b:ec:06:4d:cb:e6:
                    be:43:d6:10:8c:4a:19:93:59:9c:fc:bc:eb:c3:9d:
                    5b:75:43:f3:c4:5f:58:04:84:ce:77:bc:d4:32:80:
                    b7:26:cf:9d:6c:92:4c:76:df:2f:31:1b:5c:e5:9a:
                    b0:0f:b1:6f:65:db:e8:e1:60:8b:20:58:81:09:98:
                    9c:19:d2:38:51:c1:37:5e:f9:e5:02:c8:26:54:a0:
                    46:db:27:89:f4:1b:58:32:9e:18:aa:be:bf:f3:2b:
                    47:0b:91:84:b3:ae:9c:a8:ea:96:18:50:3b:3e:53:
                    bb:d8:35:ee:44:9b:17:7f:ad:99:ae:3d:83:12:0d:
                    86:62:37:57:fd:c4:09:f8:44:44:a5:1d:dd:ac:fb:
                    7e:69:24:ab:e8:74:b4:30:ce:2c:fa:8a:58:ac:1b:
                    d1:4c:f4:08:91:3f:0f:d8:01:d0:d6:22:9a:ce:e5:
                    17:2d:a0:12:06:e8:f0:23:00:62:1c:35:37:d0:32:
                    c2:1e:71:42:01:4e:fc:18:17:63:42:29:4b:5c:b3:
                    6d:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:49:5B:7B:EF:B9:2E:D4:B3:F1:32:BF:5F:0F:2D:9C:2E:7C:6B:45
            X509v3 Authority Key Identifier:
                keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:c3:30:6d:22:aa:37:04:6f:dd:37:63:9a:04:02:60:7f:de:
         71:ca:51:1a:4f:c7:01:f8:bf:b3:5b:0f:55:c3:02:5b:89:bf:
         e5:11:b1:f9:55:38:b5:fe:fe:34:d9:0e:5b:e6:ed:ad:e4:4f:
         02:ad:bb:80:5f:f7:85:42:c2:a7:c7:2f:4a:25:c7:ec:8c:50:
         fe:f0:88:8b:e3:73:9d:80:89:2a:9a:40:30:aa:5a:8d:eb:b6:
         b7:62:2a:77:13:20:dc:97:78:c1:22:68:87:3d:c8:19:01:76:
         fd:3a:19:5b:18:11:db:10:24:46:a1:86:46:07:de:32:8d:a5:
         a8:3c:ef:b4:04:86:d0:a5:95:8a:19:47:55:10:e0:23:d3:07:
         74:8e:b6:46:88:97:ea:cc:ad:e6:96:a5:03:65:29:0d:6a:7b:
         1c:7f:c2:e9:98:49:d4:b6:63:f8:a3:73:ee:6e:5e:15:f9:0f:
         09:58:ea:f7:70:4e:e6:f9:93:5f:0c:de:bc:a4:ec:ba:11:18:
         36:36:d6:15:8b:99:85:9c:75:3e:99:39:82:ac:f8:15:b0:4b:
         7e:42:e8:4e:1b:06:00:d5:69:04:da:e9:17:e9:19:f2:5b:bd:
         4a:5c:1d:a4:d5:b8:b8:1b:d7:8d:71:02:96:ea:00:24:5d:88:
         74:a0:9d:9b
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB80wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTdENjcxMTAvBgNVBAUTKDAyOUI4Q0UyRTk1RjQ1ODU4NDYyRTkwNzBCMUI1MTUz
QUM5MTNGRTgwHhcNMjYwNDE4MjEyMjExWhcNMjYwNDI1MjEyMjExWjAYMRYwFAYD
VQQDEw02OWUzZjYwMy0zY2VlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqXBF856Pt5MnlDp2NV+6VyY0bO9KDJEwJIEZTwLGw9SFEByf0x+hn/lv5N3o
O9eULJbj5U+b7AZNy+a+Q9YQjEoZk1mc/Lzrw51bdUPzxF9YBITOd7zUMoC3Js+d
bJJMdt8vMRtc5ZqwD7FvZdvo4WCLIFiBCZicGdI4UcE3XvnlAsgmVKBG2yeJ9BtY
Mp4Yqr6/8ytHC5GEs66cqOqWGFA7PlO72DXuRJsXf62Zrj2DEg2GYjdX/cQJ+ERE
pR3drPt+aSSr6HS0MM4s+opYrBvRTPQIkT8P2AHQ1iKazuUXLaASBujwIwBiHDU3
0DLCHnFCAU78GBdjQilLXLNtvQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLtJW3vv
uS7Us/Eyv18PLZwufGtFMB8GA1UdIwQYMBaAFAKbjOLpX0WFhGLpBwsbUVOskT/o
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1N0Q2Ny82MDI4NjYzODQ0
MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZV0VZdWtIQ3h0UlU2eVJQ
LWcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL0FwdU00dWxmUllXRVl1a0hDeHRSVTZ5UlAtZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
N0Q2Ny82MDI4NjYzODQ0MkExMUVCOTU5OUFEMzhDNEY5QUUwMi9BcHVNNHVsZlJZ
V0VZdWtIQ3h0UlU2eVJQLWcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEATsMwbSKqNwRv3TdjmgQCYH/eccpRGk/HAfi/s1sPVcMCW4m/5RGx+VU4tf7+
NNkOW+btreRPAq27gF/3hULCp8cvSiXH7IxQ/vCIi+NznYCJKppAMKpajeu2t2Iq
dxMg3Jd4wSJohz3IGQF2/ToZWxgR2xAkRqGGRgfeMo2lqDzvtASG0KWVihlHVRDg
I9MHdI62RoiX6syt5palA2UpDWp7HH/C6ZhJ1LZj+KNz7m5eFfkPCVjq93BO5vmT
XwzevKTsuhEYNjbWFYuZhZx1Ppk5gqz4FbBLfkLoThsGANVpBNrpF+kZ8lu9Slwd
pNW4uBvXjXECluoAJF2IdKCdmw==
-----END CERTIFICATE-----
Generated at Sun Apr 19 09:45:46 2026 by rpki-client