Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
File:                     aJtDtI4RHmnx33nMohHMtCZaJns.mft (raw, json)
Hash identifier:          X2ilVIWArd8J+WrNo95mWLtrXWB3vSCKg3KdHabYVdk=
Subject key identifier:   44:92:D7:53:68:51:35:D4:56:9F:57:48:76:2A:AC:FB:A6:D9:91:0B
Authority key identifier: 68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B
Certificate issuer:       /CN=A91688C4/serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
Certificate serial:       07E2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
Manifest number:          07D9
Signing time:             Thu 16 Apr 2026 21:15:01 +0000
Manifest this update:     Thu 16 Apr 2026 21:15:00 +0000
Manifest next update:     Thu 23 Apr 2026 21:15:00 +0000
Files and hashes:         1: aJtDtI4RHmnx33nMohHMtCZaJns.crl (hash: uCXheHQGlLXnT4h9fdk9elJTbdV/kpTwzxsqYYAwuko=)
                          2: 56FB3BA630DB11EBB36CAB54C4F9AE02.roa (hash: +dqj5dUwvw+xC7YK9g1ktDdByBUDI++m9TD2lt9C0Io=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl
                          rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:15:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2018 (0x7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91688C4, serialNumber=689B43B48E111E69F1DF79CCA211CCB4265A267B
        Validity
            Not Before: Apr 16 21:15:00 2026 GMT
            Not After : Apr 23 21:15:00 2026 GMT
        Subject: CN=69e15155-fb95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:01:c5:2d:e2:b8:e9:8d:a7:32:0a:98:3e:8f:
                    56:a6:ef:f9:dd:bf:ea:88:75:93:ac:34:c4:6b:4d:
                    38:7c:96:4b:dc:c4:38:2a:0c:bb:fb:70:25:44:5b:
                    76:7a:e1:47:30:d5:82:75:4b:7c:5b:19:9e:f9:a4:
                    37:13:59:3c:96:a2:df:dc:41:26:9f:a9:4d:ce:d6:
                    f5:ad:32:c1:4c:0c:27:23:96:49:b5:67:75:46:ce:
                    b5:99:02:9d:44:21:85:26:ad:b4:a8:c3:29:98:24:
                    a6:20:a2:80:b8:15:59:69:34:b6:15:04:b6:0b:62:
                    e3:09:46:dc:f8:9e:c3:31:ee:2d:ff:38:cf:a2:e6:
                    f1:04:87:57:5c:9b:15:8b:78:53:01:94:bf:92:5f:
                    bc:cc:d6:55:bf:e1:d2:3e:b7:f1:0f:59:d5:b7:46:
                    29:57:1e:55:51:1b:6c:30:9e:0b:36:68:76:87:b0:
                    76:0a:28:42:17:84:69:c7:e1:ad:90:b6:cc:bc:12:
                    28:63:3f:d5:5b:4f:86:71:67:e2:aa:07:8e:fb:48:
                    07:f3:28:8b:bc:a4:c8:86:18:55:17:23:8e:0c:d5:
                    09:b7:a8:8e:21:f1:b8:f5:3d:fb:e2:ea:e8:c0:25:
                    7a:4c:a7:93:d9:52:09:f5:ec:57:9e:36:8f:70:76:
                    3d:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:92:D7:53:68:51:35:D4:56:9F:57:48:76:2A:AC:FB:A6:D9:91:0B
            X509v3 Authority Key Identifier:
                keyid:68:9B:43:B4:8E:11:1E:69:F1:DF:79:CC:A2:11:CC:B4:26:5A:26:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aJtDtI4RHmnx33nMohHMtCZaJns.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91688C4/D8947EB830D911EB87E09353C4F9AE02/aJtDtI4RHmnx33nMohHMtCZaJns.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:fd:b4:37:37:be:1f:fb:bd:05:cb:2f:fc:14:10:05:9f:b0:
         18:5c:0c:19:93:6a:85:91:4c:d6:68:e0:e4:b2:1d:55:fc:60:
         0c:57:d3:c8:85:58:6b:aa:9d:c4:10:f5:e0:3b:c6:00:c8:19:
         eb:07:7f:15:fc:83:51:08:fe:fb:cf:f4:da:25:04:3b:99:e4:
         18:35:e4:eb:fb:b3:da:e7:0f:82:2f:13:e7:4a:44:3f:6c:00:
         ea:e0:a9:12:2b:72:b7:3f:e6:22:4e:21:97:0c:76:9e:40:08:
         49:53:25:4d:8f:bf:9a:33:a6:9e:6e:7e:8c:7c:39:fc:94:86:
         57:84:7e:ec:d1:f0:96:d0:16:1e:c6:74:82:d8:54:ac:a3:68:
         d3:f3:0a:4b:1a:81:14:94:da:12:a1:e3:fb:0f:73:ba:34:1f:
         a0:8c:41:db:cd:33:87:54:09:a9:dc:f4:64:4c:92:ce:7a:d9:
         a3:87:36:61:2c:d5:6e:c0:6c:5e:e4:9d:84:9f:e1:1f:13:28:
         67:d2:a5:59:d2:ba:69:18:4e:2c:2b:2f:a0:eb:70:59:87:5a:
         8e:07:50:0a:12:68:ca:90:62:ab:3f:07:6e:07:5e:9a:9f:6d:
         2e:68:61:9f:b1:30:e9:02:be:3c:bf:81:40:16:7c:23:2f:9f:
         6a:6a:3c:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+IwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Njg4QzQxMTAvBgNVBAUTKDY4OUI0M0I0OEUxMTFFNjlGMURGNzlDQ0EyMTFDQ0I0
MjY1QTI2N0IwHhcNMjYwNDE2MjExNTAwWhcNMjYwNDIzMjExNTAwWjAYMRYwFAYD
VQQDEw02OWUxNTE1NS1mYjk1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtwHFLeK46Y2nMgqYPo9Wpu/53b/qiHWTrDTEa004fJZL3MQ4Kgy7+3AlRFt2
euFHMNWCdUt8Wxme+aQ3E1k8lqLf3EEmn6lNztb1rTLBTAwnI5ZJtWd1Rs61mQKd
RCGFJq20qMMpmCSmIKKAuBVZaTS2FQS2C2LjCUbc+J7DMe4t/zjPoubxBIdXXJsV
i3hTAZS/kl+8zNZVv+HSPrfxD1nVt0YpVx5VURtsMJ4LNmh2h7B2CihCF4Rpx+Gt
kLbMvBIoYz/VW0+GcWfiqgeO+0gH8yiLvKTIhhhVFyOODNUJt6iOIfG49T374uro
wCV6TKeT2VIJ9exXnjaPcHY9fwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFESS11No
UTXUVp9XSHYqrPum2ZELMB8GA1UdIwQYMBaAFGibQ7SOER5p8d95zKIRzLQmWiZ7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2ODhDNC9EODk0N0VCODMw
RDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0UkhtbngzM25Nb2hITXRDWmFK
bnMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FKdER0STRSSG1ueDMzbk1vaEhNdENaYUpucy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
ODhDNC9EODk0N0VCODMwRDkxMUVCODdFMDkzNTNDNEY5QUUwMi9hSnREdEk0Ukht
bngzM25Nb2hITXRDWmFKbnMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAIP20Nze+H/u9Bcsv/BQQBZ+wGFwMGZNqhZFM1mjg5LIdVfxgDFfTyIVYa6qd
xBD14DvGAMgZ6wd/FfyDUQj++8/02iUEO5nkGDXk6/uz2ucPgi8T50pEP2wA6uCp
Eitytz/mIk4hlwx2nkAISVMlTY+/mjOmnm5+jHw5/JSGV4R+7NHwltAWHsZ0gthU
rKNo0/MKSxqBFJTaEqHj+w9zujQfoIxB280zh1QJqdz0ZEySznrZo4c2YSzVbsBs
XuSdhJ/hHxMoZ9KlWdK6aRhOLCsvoOtwWYdajgdQChJoypBiqz8Hbgdemp9tLmhh
n7Ew6QK+PL+BQBZ8Iy+famo8Eg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:19:59 2026 by rpki-client