Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
File:                     fIyfexbMnstE8DINx4y4FM1Cp6Y.mft (raw, json)
Hash identifier:          z6oovqVUJIIcX3Un+npA9Kdla+zVpe/Q1paHEmCUyOo=
Subject key identifier:   4C:A9:F0:18:2A:F1:DC:5E:C0:9E:C2:97:B9:05:53:11:52:0C:B5:6C
Authority key identifier: 7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6
Certificate issuer:       /CN=A9168973/serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
Certificate serial:       037F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
Manifest number:          0378
Signing time:             Sun 19 Apr 2026 00:44:14 +0000
Manifest this update:     Sun 19 Apr 2026 00:44:14 +0000
Manifest next update:     Sun 26 Apr 2026 00:44:14 +0000
Files and hashes:         1: fIyfexbMnstE8DINx4y4FM1Cp6Y.crl (hash: 1JVr7IXOO6sr9lHklUNwAsnPEInu5FVBwSuHmopQxjo=)
                          2: 686A55E2EB4811EC85B4E60EC4F9AE02.roa (hash: Xl6LPHCgMIaL4uMyGZdF/u4P23v9oCG6fy6f1O7/cxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl
                          rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 00:44:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 895 (0x37f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168973, serialNumber=7C8C9F7B16CC9ECB44F0320DC78CB814CD42A7A6
        Validity
            Not Before: Apr 19 00:44:14 2026 GMT
            Not After : Apr 26 00:44:14 2026 GMT
        Subject: CN=69e4255e-3444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:c4:79:e7:7c:39:c8:24:a2:68:d9:0e:e8:82:
                    06:eb:44:4a:34:52:b8:6d:c4:25:ca:60:9a:cf:35:
                    bd:17:0c:0d:59:7e:6d:b0:41:1b:10:ca:8a:d1:80:
                    08:68:b5:24:c4:d8:ed:78:8a:43:c0:c9:b2:a0:6e:
                    4c:03:44:47:97:5d:7f:2c:ab:69:94:c0:0b:1c:5f:
                    f0:b5:a9:4e:c5:0d:4c:87:03:04:0e:12:2d:34:9a:
                    4e:ed:48:cb:9e:c9:98:ca:7e:34:ed:ed:1a:69:47:
                    e1:59:a5:ce:c3:b8:d1:87:5e:0e:11:e8:1c:c4:a3:
                    3b:2d:9f:b3:e6:b1:07:a4:c6:2d:f5:95:5f:d7:40:
                    1d:f3:5e:f8:5e:2d:2a:29:dc:ab:85:bf:e1:c2:cc:
                    ae:2a:d2:7f:63:27:bb:8e:72:9b:15:3c:bf:16:3b:
                    d4:0d:29:ce:f9:b1:3a:fe:21:fb:c3:66:26:09:a1:
                    7d:f5:fd:59:ac:fc:2a:fd:b8:51:9f:03:1f:6e:7d:
                    51:c2:f3:2b:8c:dc:08:3f:8b:6e:04:3f:05:a9:a7:
                    83:5a:9f:f9:a8:bc:06:d1:6f:e4:a3:08:36:3d:e2:
                    ea:d6:04:fc:c9:2c:95:39:6b:81:67:c0:ae:00:3d:
                    4e:6f:8c:31:69:70:9d:83:c3:04:51:37:a9:fc:f6:
                    e2:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A9:F0:18:2A:F1:DC:5E:C0:9E:C2:97:B9:05:53:11:52:0C:B5:6C
            X509v3 Authority Key Identifier:
                keyid:7C:8C:9F:7B:16:CC:9E:CB:44:F0:32:0D:C7:8C:B8:14:CD:42:A7:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fIyfexbMnstE8DINx4y4FM1Cp6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168973/5606AE22EB4411ECADE1ED62C4F9AE02/fIyfexbMnstE8DINx4y4FM1Cp6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:cd:d2:dc:4e:ba:e2:63:fb:d8:c7:96:76:d2:bb:9e:e2:6e:
         fd:11:91:b9:ac:2c:52:f0:89:e7:52:05:25:b0:29:64:96:4a:
         ed:75:7b:d4:9b:92:f5:57:8a:8c:66:05:7d:2b:f9:59:f3:cc:
         96:78:57:d7:0f:72:90:ca:85:22:90:70:4e:97:b5:4f:5b:ff:
         15:48:59:89:7f:86:9f:26:0d:b0:20:be:83:e2:9e:a4:ef:8e:
         c3:4f:e3:39:98:c6:d3:ae:a7:d5:c6:6a:94:60:45:2e:35:29:
         f1:e4:ae:f9:72:d1:42:be:e0:d8:68:3f:36:dd:13:2e:92:f8:
         5a:0d:a4:fb:5d:0e:00:69:18:57:21:d0:a3:d7:57:31:20:f6:
         a2:f8:53:b4:e8:fb:0f:b8:06:31:df:08:36:21:81:25:6e:d8:
         fe:d1:a6:b4:bc:6d:82:b2:cc:51:e6:6d:ef:8b:d6:7e:d1:87:
         9d:33:07:9c:44:aa:17:6f:1b:5c:9e:8e:c2:e0:fc:0d:10:75:
         2a:40:8d:90:53:7a:ca:38:dd:5a:60:f4:fb:58:40:98:d8:00:
         a4:91:b9:3a:2a:61:5c:6d:44:87:07:a0:4e:4d:bd:51:d8:00:
         4a:67:ad:ae:12:2c:a4:77:db:8e:fd:cd:de:88:cc:f5:10:cb:
         75:aa:d7:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:19:20 2026 by rpki-client