Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
File:                     cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft (raw, json)
Hash identifier:          3/iYfvTptM9+Na+P32fT6nBNXIP7x6cmegzktlUWz2s=
Subject key identifier:   FF:74:F2:BF:69:2F:54:AB:98:73:34:9F:59:47:9E:BC:8A:57:CD:54
Authority key identifier: 72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02
Certificate issuer:       /CN=A9169411/serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
Certificate serial:       0319
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
Manifest number:          030C
Signing time:             Fri 17 Apr 2026 01:09:24 +0000
Manifest this update:     Fri 17 Apr 2026 01:09:23 +0000
Manifest next update:     Fri 24 Apr 2026 01:09:23 +0000
Files and hashes:         1: cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl (hash: t5JiEfs5w3FXV72jZ7jifxoAcmM4mswQ0bfplHf2tzk=)
                          2: DD976958C2A611EFBB1B9264C4F9AE02.roa (hash: DmII7xnGU6x5+UHNOvDmxgrYS3cKxdXu+2myxdUSRF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl
                          rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 793 (0x319)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169411, serialNumber=72038A88A61D25C4F4065025FC26B8CE3B8A7A02
        Validity
            Not Before: Apr 17 01:09:23 2026 GMT
            Not After : Apr 24 01:09:23 2026 GMT
        Subject: CN=69e18843-7a9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:2a:e7:30:a0:c9:db:dc:56:b0:07:a9:26:cb:
                    88:f6:da:31:cf:9a:14:ae:b0:27:eb:6a:0f:85:3d:
                    e2:00:76:55:1a:26:5b:28:71:84:81:e4:25:1c:07:
                    ed:f6:3f:cb:6d:82:74:17:e0:7f:b3:5f:f0:9b:83:
                    56:db:66:d5:9d:e2:4b:b0:66:f9:eb:24:d2:72:79:
                    01:72:38:00:0b:50:66:4b:ea:7d:77:1e:ab:e9:a8:
                    61:82:83:f5:34:99:c4:f3:8a:ed:73:5d:b7:c2:43:
                    ee:d9:66:03:32:e1:40:17:2b:18:aa:05:dc:f7:12:
                    c4:bd:ef:ba:08:15:53:e6:b1:bb:01:05:35:c8:6f:
                    c9:ce:2d:ec:2a:f5:2a:84:d2:83:58:97:38:16:5f:
                    1e:00:fa:6c:bd:24:17:85:a3:eb:00:cc:96:5b:ca:
                    c9:95:a4:0b:33:ba:b7:d3:69:a7:e8:51:bd:08:d2:
                    c6:bc:6c:35:ae:45:90:7b:9a:5f:da:c1:60:61:8f:
                    8a:41:73:e2:45:de:e6:4b:44:84:f2:fb:b3:18:38:
                    8d:2c:0c:de:fb:04:1f:24:c5:cc:75:e9:2d:d4:94:
                    63:ee:17:e9:9a:d5:eb:b8:c8:21:9a:28:28:fe:13:
                    1d:59:b2:10:a8:cd:22:89:ec:1b:8b:9f:81:20:12:
                    a8:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:74:F2:BF:69:2F:54:AB:98:73:34:9F:59:47:9E:BC:8A:57:CD:54
            X509v3 Authority Key Identifier:
                keyid:72:03:8A:88:A6:1D:25:C4:F4:06:50:25:FC:26:B8:CE:3B:8A:7A:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cgOKiKYdJcT0BlAl_Ca4zjuKegI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169411/91853A0618BF11EDADDC923AC4F9AE02/cgOKiKYdJcT0BlAl_Ca4zjuKegI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:57:31:ee:5d:f6:c0:1b:4a:ae:fe:9d:13:87:81:76:ee:8b:
         a9:1f:4f:6d:35:45:7a:8c:6c:cf:df:1b:2a:ac:ad:ee:cd:e5:
         28:f3:83:65:d9:1e:a1:67:1b:f4:a2:89:6b:ce:a9:1b:bf:0c:
         9e:e3:33:c4:3e:5c:0c:30:31:f2:6c:fe:87:8c:3e:35:0f:a9:
         79:b1:92:35:4c:a9:7c:04:90:9a:c0:42:90:e0:a4:e9:1e:eb:
         13:9c:4a:97:ae:96:74:09:b2:7b:9b:43:cd:b1:1b:4b:6e:62:
         cf:e0:82:cb:22:64:10:d4:f1:d3:89:02:1d:b4:74:62:0f:77:
         34:c1:81:c9:41:77:21:cf:c4:d9:b1:e1:3e:cf:6b:8a:57:25:
         48:e7:9b:13:3d:f4:4f:2a:98:dd:7b:d7:d7:71:1d:26:0f:27:
         c4:41:a4:f1:51:e4:6d:4e:c6:ab:42:1c:f1:96:2a:44:21:fa:
         e7:cc:84:a1:4c:6d:a8:66:4d:a6:c6:d0:d9:73:5b:c4:95:f7:
         a0:93:be:29:60:f5:0d:a0:7c:ad:6c:e7:f5:2b:eb:7d:31:56:
         4f:49:76:62:7e:88:d5:a9:bc:8d:14:51:d7:0a:22:2a:d7:5b:
         44:57:62:5a:55:fa:3f:a6:bb:7b:1d:08:17:75:6d:c3:88:91:
         bc:d6:46:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:01:56 2026 by rpki-client