Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
File:                     iV2mi62Kf50xeIVse2LpwWiLK3M.mft (raw, json)
Hash identifier:          7hMmL1EN2nS4HL36dRy5gdDOVPfpMaAR/35eW2n1r/0=
Subject key identifier:   EC:2F:CE:54:C1:19:BE:15:33:33:55:53:FE:17:36:64:6C:90:23:F3
Authority key identifier: 89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73
Certificate issuer:       /CN=A9169CEB/serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
Certificate serial:       1031
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
Manifest number:          1018
Signing time:             Thu 16 Apr 2026 17:22:09 +0000
Manifest this update:     Thu 16 Apr 2026 17:22:09 +0000
Manifest next update:     Thu 23 Apr 2026 17:22:09 +0000
Files and hashes:         1: iV2mi62Kf50xeIVse2LpwWiLK3M.crl (hash: XcXsBWgd/gg5UXbasXegeBbMQi5KdDzUM6/ez304sBA=)
                          2: CC72753A7CE511E985E29B7BC4F9AE02.roa (hash: 4tcTWtdYNVrFzyHxN1+sODGXpMdP8UrLT8P96A9YCSI=)
                          3: 4735CB9A93EE11E9B1F2926AC4F9AE02.roa (hash: QCuDILdrzkvIxZmj1iyxDFhjLdsSBcMetxYoHDCi4D0=)
                          4: 47B75B3893EE11E9B1F2926AC4F9AE02.roa (hash: rWIdUt0QV7XE1Z1Db6/TzOZnervJxxEdviXAUMODu4s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl
                          rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:22:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4145 (0x1031)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9169CEB, serialNumber=895DA68BAD8A7F9D3178856C7B62E9C1688B2B73
        Validity
            Not Before: Apr 16 17:22:09 2026 GMT
            Not After : Apr 23 17:22:09 2026 GMT
        Subject: CN=69e11ac1-21bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:56:97:47:67:77:0d:ad:b3:56:03:b4:9c:bf:
                    51:f9:bf:d8:c9:07:d5:9d:1e:7c:0c:65:d4:e0:b0:
                    ae:16:75:95:ef:67:a5:71:f0:3f:ed:6b:95:9e:cd:
                    a3:48:63:57:60:84:4d:15:55:73:db:bb:28:a3:9b:
                    5c:60:21:3b:ed:49:86:ff:74:96:84:a1:4a:b4:f9:
                    41:14:0e:13:d5:55:33:b8:c2:c5:00:43:55:5f:a5:
                    33:24:44:5e:ac:9b:14:ec:e1:b5:e2:af:62:1a:82:
                    f6:22:3a:00:c7:69:91:ba:ae:dd:bc:c2:39:e3:0a:
                    aa:6d:b0:86:fa:7e:a2:0e:80:90:15:ee:48:01:7e:
                    67:bd:39:d8:d8:03:43:c3:e1:70:56:92:b5:6f:ee:
                    12:68:b6:df:00:01:39:f3:b3:c2:05:67:b8:9e:2a:
                    04:f4:26:0e:33:c3:d8:83:5d:e7:41:77:71:8c:2f:
                    44:2d:96:bb:1b:7a:58:94:79:85:b1:ae:97:9e:0c:
                    b5:ab:d6:de:a1:00:47:e3:14:0c:e2:e0:f3:0e:55:
                    ec:8e:2c:09:96:e6:ab:6b:90:7e:f9:56:ca:ad:8e:
                    ea:4d:ce:97:09:0e:36:50:a0:af:c3:bd:a5:c4:65:
                    4e:f9:02:de:e7:5d:c5:77:9d:8d:99:63:fd:21:c2:
                    4c:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:2F:CE:54:C1:19:BE:15:33:33:55:53:FE:17:36:64:6C:90:23:F3
            X509v3 Authority Key Identifier:
                keyid:89:5D:A6:8B:AD:8A:7F:9D:31:78:85:6C:7B:62:E9:C1:68:8B:2B:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iV2mi62Kf50xeIVse2LpwWiLK3M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9169CEB/7DA583E4655611E985810D37C4F9AE02/iV2mi62Kf50xeIVse2LpwWiLK3M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:35:ea:16:b7:c8:0b:1a:6a:71:1d:52:5e:fe:77:66:3a:eb:
         58:39:2b:fa:7f:4a:3d:ad:97:3e:0a:4a:f3:9f:cf:ca:6d:51:
         0b:80:f8:db:24:94:54:ed:48:59:1c:f9:10:58:17:1c:62:d2:
         2a:61:35:ad:99:c2:cc:08:b7:68:33:b5:8b:83:00:d1:e1:ff:
         ac:5e:48:b4:05:89:26:aa:9e:79:27:c6:c9:7d:96:26:c4:e0:
         b3:67:ba:c8:f6:12:41:85:7b:7f:da:10:41:77:30:6f:01:47:
         ab:61:cc:2f:36:59:3f:8f:47:51:01:64:b7:aa:18:df:19:d5:
         41:49:a4:ff:2d:5d:4d:e3:4b:d8:fc:46:5c:2c:40:f3:59:21:
         d7:b3:46:dd:f3:44:a4:28:a4:eb:c0:85:28:dc:a2:24:3a:19:
         b5:73:15:e7:d3:19:de:dd:42:90:3e:c2:c4:22:a1:5e:eb:30:
         31:08:a5:a3:fd:54:08:ed:f9:29:16:d3:c9:2b:26:5d:bc:6a:
         7d:43:85:12:74:ba:52:fb:2c:81:21:aa:3b:5c:4f:f1:e8:1d:
         e8:72:b8:64:46:b7:42:c2:17:92:6e:db:d8:f1:d4:dc:83:c6:
         10:db:bf:95:8d:7e:ed:65:04:23:44:de:34:46:ea:18:cf:2e:
         7e:b1:9a:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:25:35 2026 by rpki-client