Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
File:                     P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft (raw, json)
Hash identifier:          sJM23NgCYabEk0jdrkhRTi5f7j+p/loUoANX4bWtT0E=
Subject key identifier:   DF:5F:AD:E5:60:C8:F2:02:79:32:8B:03:6C:F5:DD:E2:8B:44:06:FE
Authority key identifier: 3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80
Certificate issuer:       /CN=A916A2FB/serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
Certificate serial:       A3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
Manifest number:          A3
Signing time:             Sun 19 Apr 2026 06:54:05 +0000
Manifest this update:     Sun 19 Apr 2026 06:54:04 +0000
Manifest next update:     Sun 26 Apr 2026 06:54:04 +0000
Files and hashes:         1: P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl (hash: Xle6YGyUw5B8cAPsbTzS8WeSCuvwyWrJrzDYJ5mH0tM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl
                          rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916A2FB, serialNumber=3F48ACA12A5927A702ECEE24415189194ED4AA80
        Validity
            Not Before: Apr 19 06:54:04 2026 GMT
            Not After : Apr 26 06:54:04 2026 GMT
        Subject: CN=69e47c0d-3681
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:40:c5:15:99:4b:c6:d1:41:0a:b5:9a:0a:a2:
                    ac:6f:5e:60:27:2d:33:2d:b0:9e:f4:32:e8:de:f5:
                    61:38:71:1c:b5:f4:7e:20:93:e9:a3:ce:26:a3:8e:
                    ee:6d:5c:8d:ad:4b:aa:ba:13:4f:41:38:34:26:e9:
                    6f:6b:93:06:cd:ff:c7:5e:c2:3a:95:f3:20:96:3d:
                    a6:d5:26:32:50:87:01:c8:fa:96:2a:1e:b0:6f:21:
                    3d:2c:fe:bc:b9:fb:db:0d:e3:ee:6e:38:b0:d2:45:
                    60:3a:bb:61:b8:8b:ac:ee:ec:47:77:1e:6e:69:f1:
                    fc:9c:2b:84:cb:8b:bb:14:e1:2a:47:2e:93:43:27:
                    1f:ba:33:5d:77:b9:63:2e:e0:74:1a:af:6d:e6:ad:
                    15:00:06:f2:af:de:45:24:8d:10:ac:93:10:70:2c:
                    18:9f:c1:22:73:b5:a6:ec:68:e6:2e:c5:fd:6e:d3:
                    0f:40:80:22:21:48:99:26:13:5a:d2:73:db:5c:45:
                    9c:70:e8:e7:5a:df:f7:2a:f3:41:ea:ca:11:18:97:
                    85:67:0b:fc:6b:76:42:e5:da:60:67:2c:98:9f:55:
                    b5:8d:4c:be:42:38:f7:cd:62:d4:74:5f:bb:55:e1:
                    ab:2c:8f:fa:bf:5e:5b:19:c1:15:c7:6f:0c:fd:c2:
                    d3:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:5F:AD:E5:60:C8:F2:02:79:32:8B:03:6C:F5:DD:E2:8B:44:06:FE
            X509v3 Authority Key Identifier:
                keyid:3F:48:AC:A1:2A:59:27:A7:02:EC:EE:24:41:51:89:19:4E:D4:AA:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/P0isoSpZJ6cC7O4kQVGJGU7UqoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916A2FB/9F8F9D00468711F0AF642744C4F9AE02/P0isoSpZJ6cC7O4kQVGJGU7UqoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:ca:8d:15:1e:59:af:da:b6:5e:83:7f:b4:95:8a:2b:52:20:
         63:e2:4d:ef:52:a6:fb:7d:c5:e0:b8:45:1f:3f:7f:6c:50:9a:
         e1:30:28:aa:7b:15:af:58:36:52:90:15:1d:08:67:30:0f:0b:
         0c:b3:a9:63:9f:89:99:9a:83:5f:2f:63:41:d8:be:0b:54:b1:
         47:6c:f7:89:fb:d1:39:7b:43:4e:cb:6d:b6:95:11:86:49:aa:
         2a:de:c4:3d:15:f2:08:3f:a0:a3:04:8f:b0:7d:91:3b:3a:ad:
         db:51:44:31:40:b6:77:56:38:b1:3e:d0:27:c2:94:e5:7c:d8:
         e1:43:bb:a2:01:54:9b:aa:b5:95:5b:08:d8:85:de:8b:4e:a0:
         c1:6b:84:4d:6c:70:78:35:e9:a8:c3:16:88:26:2b:ca:30:d8:
         94:6c:02:ef:ae:5e:e6:ee:dd:fa:73:de:7d:fe:98:7f:d2:9b:
         58:76:6d:3b:4c:be:88:d7:a6:a5:55:46:d3:ac:85:71:9f:ca:
         b1:29:b5:99:60:64:6e:4e:42:f4:9f:7d:31:70:80:04:25:61:
         c9:8d:0e:98:63:10:6d:2e:17:28:0e:b8:0c:88:65:1e:92:ca:
         17:75:91:e9:d0:9c:90:40:bd:8b:cd:42:c9:76:48:ba:34:28:
         4c:97:a2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:16:17 2026 by rpki-client