Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
File:                     t_uD0cnC98OLcAJxRkrCM2Ti59c.mft (raw, json)
Hash identifier:          3cgJGO9XOVCHj9E0vNk9b392iHXZMTS2ynjSAVn7CVo=
Subject key identifier:   93:23:2C:16:00:5C:87:F0:CE:00:83:CA:A0:2B:A3:19:24:AA:5C:3E
Authority key identifier: B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7
Certificate issuer:       /CN=A915E38A/serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
Manifest number:          57
Signing time:             Fri 17 Apr 2026 07:52:39 +0000
Manifest this update:     Fri 17 Apr 2026 07:52:38 +0000
Manifest next update:     Fri 24 Apr 2026 07:52:38 +0000
Files and hashes:         1: t_uD0cnC98OLcAJxRkrCM2Ti59c.crl (hash: 34NDa2XXsUPDxZtaqalRgMri+4/CICsB3hXEtaS5o8Y=)
                          2: 4AD34C1AC05A11F0B864644DC4F9AE02.roa (hash: fuNnrqSgI2XXye8Z2eFA0jRKqdXrxlxebRTfn3G5134=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl
                          rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:52:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E38A, serialNumber=B7FB83D1C9C2F7C38B700271464AC23364E2E7D7
        Validity
            Not Before: Apr 17 07:52:38 2026 GMT
            Not After : Apr 24 07:52:38 2026 GMT
        Subject: CN=69e1e6c7-e567
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b8:24:49:60:e1:3c:00:04:42:24:5e:ea:71:
                    aa:0e:51:fa:20:3d:9f:b4:a6:f7:ac:c7:48:74:a9:
                    a1:6c:47:e7:75:5d:ca:91:fa:aa:71:58:d4:8f:f0:
                    28:5a:b0:7f:94:ce:33:bc:bf:f6:da:b1:1e:24:11:
                    cd:4f:30:12:95:1f:0f:57:70:88:ab:c4:b4:fa:e6:
                    35:24:7d:7c:96:dc:95:10:51:72:44:b6:2e:12:97:
                    86:40:10:be:20:e7:07:40:02:b3:3e:d5:bc:c6:7a:
                    aa:40:a7:e8:4b:63:32:3e:25:6b:9c:86:0c:3f:57:
                    cb:f7:b6:71:a6:91:1c:d7:4c:2f:c4:3b:1b:bd:53:
                    be:5e:bc:74:16:9f:41:e5:56:c1:3a:27:75:13:1a:
                    b5:17:3e:94:13:c3:28:3f:29:ea:2c:91:d8:fa:07:
                    93:c0:eb:b4:81:0a:92:79:f0:57:15:88:c6:a2:54:
                    26:19:9d:a7:d5:b5:0d:68:0a:63:17:79:b9:b7:10:
                    34:58:b9:ac:9c:5d:3f:25:6a:43:21:6e:67:d8:b5:
                    bb:99:d7:9f:dc:ad:7c:a9:4a:05:aa:7c:31:79:b4:
                    1f:d2:ba:45:7c:a1:f9:32:db:ea:eb:50:b0:94:9a:
                    a8:75:91:57:6e:28:82:8a:a1:ca:a6:0a:25:1b:ca:
                    d8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:23:2C:16:00:5C:87:F0:CE:00:83:CA:A0:2B:A3:19:24:AA:5C:3E
            X509v3 Authority Key Identifier:
                keyid:B7:FB:83:D1:C9:C2:F7:C3:8B:70:02:71:46:4A:C2:33:64:E2:E7:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/t_uD0cnC98OLcAJxRkrCM2Ti59c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E38A/A40D45F0C04711F0A70F7B78C4F9AE02/t_uD0cnC98OLcAJxRkrCM2Ti59c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:35:34:90:78:d1:18:e2:20:80:51:8a:02:91:71:c6:24:56:
         9c:6c:eb:ef:19:31:01:41:f4:28:b4:dc:73:46:76:32:b8:68:
         cc:19:5f:4a:b1:2a:e3:60:f8:fc:29:91:5e:63:2c:83:74:9d:
         48:cd:4d:cc:4c:dd:97:b7:11:85:35:f7:6a:3d:c6:06:04:80:
         32:88:be:15:27:af:c6:99:ec:8a:5b:eb:26:fc:0e:84:91:f4:
         f9:2a:1d:66:60:80:8e:3b:dc:84:55:f4:9f:2f:ad:9d:11:9f:
         7b:8f:9e:74:18:de:c1:d4:ad:10:a3:7a:f2:86:a0:c2:5d:42:
         bb:f1:ed:18:89:7a:bb:aa:53:0a:cb:e4:b4:fa:dd:1d:f4:9e:
         d3:9d:59:6e:bf:36:e5:17:52:24:ad:16:24:9c:1c:b0:e8:94:
         79:a8:73:2d:62:60:3e:23:88:9d:20:ff:83:e7:c6:f7:1c:40:
         f8:f8:0b:e9:60:08:2c:7e:52:18:d1:55:e1:88:a0:7c:38:72:
         6d:e6:ee:56:35:db:2b:72:30:db:f0:60:3c:d5:f7:72:a5:2e:
         f4:3b:dd:53:22:b7:74:7e:9d:4e:0e:31:1a:e5:eb:49:4d:f6:
         8a:a7:56:b1:48:31:d3:93:cf:af:03:1e:59:28:ec:b4:9b:62:
         71:a7:7c:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:18:15 2026 by rpki-client