Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
File:                     4D9YAHuXKQulI0NZeReytqtd0uk.mft (raw, json)
Hash identifier:          /5wBekgUKAVC2hslHJ9DK5kvkrH/C73F+Or66N8kvus=
Subject key identifier:   DD:B2:C9:09:6C:5A:BD:CD:11:79:FE:7C:15:E9:E9:C3:AE:7B:11:C8
Authority key identifier: E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9
Certificate issuer:       /CN=A9166646/serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
Certificate serial:       0699
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
Manifest number:          0691
Signing time:             Thu 16 Apr 2026 22:22:26 +0000
Manifest this update:     Thu 16 Apr 2026 22:22:26 +0000
Manifest next update:     Thu 23 Apr 2026 22:22:26 +0000
Files and hashes:         1: 4D9YAHuXKQulI0NZeReytqtd0uk.crl (hash: R1bXqr6cgbasNtfiuWkVe0KPgaWmgmH3ysvBO9u1SiY=)
                          2: 5AA0DC6EB13E11EBA7704F2CC4F9AE02.roa (hash: KUFpITjmEQk4KwJuH8Fzfxux74GG5EXnnN6hM3cW4nU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl
                          rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:22:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1689 (0x699)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9166646, serialNumber=E03F58007B97290BA52343597917B2B6AB5DD2E9
        Validity
            Not Before: Apr 16 22:22:26 2026 GMT
            Not After : Apr 23 22:22:26 2026 GMT
        Subject: CN=69e16122-d41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:06:a8:4c:78:96:f0:0a:60:a5:61:a2:8d:e4:
                    b1:3a:53:0a:63:a5:32:0f:b7:65:db:c1:cb:21:ae:
                    95:13:59:c9:e5:b9:38:57:a7:67:ab:04:8e:18:e4:
                    e1:22:1e:ea:61:89:0d:e3:f4:ff:32:32:67:05:d2:
                    38:c9:cd:7c:c8:47:ec:9e:2c:5f:77:dd:07:bf:87:
                    49:de:20:0b:81:d6:a1:5e:11:e5:fb:ce:50:11:b2:
                    e2:98:b6:4a:4d:c4:c6:07:65:8b:26:b0:c0:71:48:
                    db:d2:60:08:37:38:5c:f1:f3:fe:3a:12:d7:8c:f2:
                    58:bc:0b:21:67:4b:ee:99:77:4a:e7:73:22:3e:01:
                    28:28:94:58:fe:df:ab:c1:22:69:5f:bd:d0:07:a6:
                    54:a1:79:30:87:cb:7c:42:f2:dc:38:2a:07:45:c6:
                    2d:c3:10:ff:6c:9e:2e:6b:23:8e:59:01:34:99:f4:
                    41:59:a7:2b:4e:05:51:0d:d3:02:c4:66:95:d6:e5:
                    80:c9:ce:07:78:25:ad:6e:eb:0a:75:b5:a2:fd:34:
                    2b:b0:dc:fc:3d:16:fd:b0:0e:33:ab:15:a0:46:9a:
                    0b:1e:00:f8:f4:33:71:57:4c:e7:9f:45:b7:78:c8:
                    5d:22:5f:44:f3:40:bd:66:05:97:ed:e7:97:01:96:
                    6f:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B2:C9:09:6C:5A:BD:CD:11:79:FE:7C:15:E9:E9:C3:AE:7B:11:C8
            X509v3 Authority Key Identifier:
                keyid:E0:3F:58:00:7B:97:29:0B:A5:23:43:59:79:17:B2:B6:AB:5D:D2:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4D9YAHuXKQulI0NZeReytqtd0uk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9166646/7B16AC28B13C11EB8179FA29C4F9AE02/4D9YAHuXKQulI0NZeReytqtd0uk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:3d:de:98:0f:04:48:ec:08:1c:d6:75:98:41:85:03:66:18:
         4a:60:fb:4f:25:09:72:02:3c:8c:96:29:9f:0d:41:5e:07:a6:
         5b:45:08:82:59:98:6e:c3:d0:40:38:16:24:41:2b:28:db:c9:
         43:ca:10:bc:4f:63:2e:11:46:22:90:f9:e3:16:89:1e:e0:33:
         b9:40:03:74:9e:4a:00:05:77:b4:4a:5a:67:ee:98:66:0f:8d:
         12:c2:0e:a0:9f:96:e4:e1:f0:51:ac:bf:f0:b0:22:76:1f:77:
         3e:cf:77:6d:ec:96:cf:35:0b:ee:30:94:d7:59:b2:85:c9:af:
         40:f0:51:1b:ce:a5:59:38:60:d1:34:f0:9f:fa:13:6f:3b:11:
         5d:9f:a5:84:7d:dc:7a:c1:b4:88:75:22:98:d3:42:3e:eb:e4:
         f0:31:15:45:8c:3b:ee:73:d3:26:65:10:96:8a:28:54:e7:01:
         7b:d9:a2:dd:6d:ae:b1:d8:5c:7c:4f:af:a1:a3:e3:5f:ee:2f:
         e9:3f:fe:d3:c1:fd:df:d7:51:05:5f:1f:4f:2c:7a:c4:bf:97:
         7a:cf:c3:ef:da:31:dd:27:d4:70:26:28:e1:42:4c:82:09:6a:
         1f:34:fd:84:ed:41:c2:2d:6d:91:0a:e1:98:c0:b8:cb:3e:18:
         84:9d:92:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:48:59 2026 by rpki-client