Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          2ZgCkApYykJPjpvFgyMsV4rEyyZMnlyL7aqhqhkptWE=
Subject key identifier:   04:DD:44:5C:F9:D0:73:79:9E:11:4A:5B:D7:3A:D1:28:15:C7:EF:C2
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       0362
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          02EC
Signing time:             Fri 17 Apr 2026 01:23:23 +0000
Manifest this update:     Fri 17 Apr 2026 01:23:22 +0000
Manifest next update:     Fri 24 Apr 2026 01:23:22 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: qKdRHrxKz1hNey7V5rWP6F4hRJa1TAAKdIrD84m4MOA=)
                          2: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          3: E76A810A381511F1ABE15B0C98833773.roa (hash: o2/3WY/X8q2n8a29ZI+8ohjXtfNwONgobpYeiQVr1FE=)
                          4: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: wp6/EcySdPY2J9HVTxurzHs/7C5ZFYTx7rFTXPJhFNQ=)
                          5: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: ZS69q+KLB0wxQSpzELQNwnOrdQL0A5TtkzgU+YFIMPc=)
                          6: 43DD36C8184D11F182F41629283D8C67.roa (hash: W2jdh0dCsYZH6chwW5mjxA9lnLxFZ0B7ULAznfGNxoM=)
                          7: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: OyJt2s3qPZnoO34lc+1xKuSSrj0jZolC/kQHql+HGrY=)
                          8: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=)
                          9: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          10: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=)
                          11: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          12: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: RMVp8Qup/NU120gAEj7lgUVqAC4aVcpU8zUbzT1yzig=)
                          13: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          14: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          15: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
                          16: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: L5jvQRnxxxHdy5lodGkjPlaB/lJvpEFIVFuxxQ3ZhTI=)
                          17: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: jniVoFO7asjIWO6HqjPSEhXjJIJMpsAC3AM61zDyHDg=)
                          18: E8672B1C381511F1ABE15B0C98833773.roa (hash: anai9qYPZOFiCk3SsK0WZEhRCz/0EmZXl4ZZ1i9lDIg=)
                          19: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          20: 0634745A36D311F091108A4EC4F9AE02.roa (hash: uaiAXHFgkoPRxU2DoLpe3SDOvNdXy/Ij5A7mMKtf32g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 866 (0x362)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Apr 17 01:23:22 2026 GMT
            Not After : Apr 24 01:23:22 2026 GMT
        Subject: CN=69e18b8b-9f86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:38:ad:f2:92:21:04:3c:93:47:4b:0b:c5:
                    b9:02:5c:99:79:bb:33:09:4e:11:62:3c:cc:ef:8c:
                    6e:49:f8:05:fd:7e:f1:ef:5e:a4:a0:d3:7b:97:d6:
                    9d:6c:c3:d0:75:07:39:a5:fc:94:de:4f:6a:57:c4:
                    17:ae:86:f5:fc:c6:a9:92:bd:04:95:ef:5d:65:28:
                    90:a9:71:20:2b:ed:b0:8a:bd:af:3e:65:1c:18:51:
                    ad:b3:e0:33:6f:f3:67:15:6e:00:db:50:d5:c1:0d:
                    31:94:b3:4c:63:bd:12:ff:ce:23:d1:f9:71:eb:3a:
                    a2:4e:42:87:0b:a3:28:ea:61:dc:4d:02:16:bd:bd:
                    b8:65:c5:7f:12:39:d6:31:fd:c6:10:42:b5:ec:2c:
                    b2:c2:c6:6a:aa:6e:0d:41:47:f1:61:73:70:ab:6a:
                    f1:36:4e:eb:2a:29:9a:60:27:a4:41:e5:cf:4e:8c:
                    39:7f:97:fa:18:87:e1:54:90:8a:5f:70:b0:45:f9:
                    da:d0:1a:9b:e1:8e:ee:37:89:4a:0c:51:a1:c9:d9:
                    b8:6e:e5:52:af:3b:24:64:9b:e5:d7:e9:7b:18:77:
                    97:49:4f:8f:37:55:5b:d8:61:a9:48:40:88:71:1c:
                    fa:39:97:f0:02:03:45:59:b8:d7:06:f7:ec:a2:71:
                    6e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:DD:44:5C:F9:D0:73:79:9E:11:4A:5B:D7:3A:D1:28:15:C7:EF:C2
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:4a:80:5c:99:53:c4:96:68:b9:3a:de:ab:66:a4:ea:d7:4a:
         6c:83:2a:61:c3:8f:6b:04:d0:3f:78:64:9b:94:c4:7c:e3:c5:
         5e:d1:c1:48:43:d1:3b:33:34:53:a0:09:c2:a0:66:4b:ab:1c:
         15:6f:05:fe:bf:6b:53:01:2e:8b:7b:13:c6:f7:c3:8a:72:1b:
         35:8c:ed:d2:4f:6e:0c:10:2a:cb:3b:29:ad:56:d8:48:e3:98:
         fc:ef:4c:ae:c2:8e:4b:70:df:ae:9c:a6:ba:9d:d6:ea:4a:21:
         2b:12:89:bf:22:e5:08:86:5d:e8:f5:40:4d:76:3c:39:0b:9a:
         19:dc:69:6d:cc:64:7e:df:95:2f:21:c4:f1:71:b6:96:3a:b9:
         92:69:d7:fd:7b:c3:f0:13:47:76:f9:66:e0:60:8b:d6:06:2c:
         52:ff:11:be:c2:34:24:07:24:ab:23:42:5c:2c:a1:d7:e0:ee:
         47:ee:39:e8:8f:d4:36:10:93:f3:11:7d:88:f3:3d:5c:80:4e:
         48:36:43:a4:3f:26:45:bd:9d:aa:76:9f:6f:7c:a0:45:b8:ca:
         f6:75:cd:34:3a:2c:7d:56:b4:18:6b:6c:74:54:42:03:cb:f6:
         a6:65:20:98:04:77:de:2e:36:3f:79:f6:fa:34:76:bc:fc:87:
         1f:39:58:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:05:35 2026 by rpki-client