Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
File:                     _z4OD6f_JX29huYrEpqZTYpJ2E4.mft (raw, json)
Hash identifier:          8bSPnmYNLCtxd6mXGchxPoDSUL18EItKrpAu6cvcHy8=
Subject key identifier:   5C:69:F8:BE:BD:91:54:BF:76:23:3C:40:01:F7:71:F0:FD:54:CF:88
Authority key identifier: FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E
Certificate issuer:       /CN=A916B1F5/serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
Certificate serial:       02C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
Manifest number:          02BB
Signing time:             Fri 17 Apr 2026 01:19:51 +0000
Manifest this update:     Fri 17 Apr 2026 01:19:50 +0000
Manifest next update:     Fri 24 Apr 2026 01:19:50 +0000
Files and hashes:         1: _z4OD6f_JX29huYrEpqZTYpJ2E4.crl (hash: 1dFraX3147gPzbAkfVD0G53SLqCHxH8HTZRtalr5HJA=)
                          2: 28536FDC340111EDB747A054C4F9AE02.roa (hash: FbLoVUwsuqm0sT8Nxbam5MwbDmX4JcPXq2npG0lokuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl
                          rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:19:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 705 (0x2c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B1F5, serialNumber=FF3E0E0FA7FF257DBD86E62B129A994D8A49D84E
        Validity
            Not Before: Apr 17 01:19:50 2026 GMT
            Not After : Apr 24 01:19:50 2026 GMT
        Subject: CN=69e18ab7-1ea9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:86:8a:f6:4b:06:57:d4:8c:cf:49:97:6f:79:
                    a1:fb:f5:32:4d:68:b8:6f:9f:ef:2c:4e:d1:bf:1c:
                    ca:2d:a4:1a:8e:19:17:19:00:d2:d2:ca:5c:3d:5a:
                    3b:e1:e3:f9:aa:b1:88:b3:b7:f9:45:b2:dd:43:34:
                    9d:3a:95:b8:54:27:87:47:59:74:af:4e:fa:9c:ec:
                    29:f2:58:b9:e6:33:0b:f7:d3:70:17:10:05:a5:9d:
                    d1:d9:f3:2a:23:08:93:aa:b1:5b:b0:6d:13:23:51:
                    3f:e8:bf:22:95:e4:4f:86:12:01:ec:58:cf:ed:fa:
                    44:6a:b5:77:2f:87:31:36:bd:50:b1:62:a2:03:78:
                    d5:9d:ec:02:bf:fc:da:e7:72:c3:d6:3f:5f:f4:dc:
                    94:79:f0:fb:95:4a:2b:a1:84:0d:ae:ce:80:2f:5e:
                    a9:10:48:e4:6a:a6:34:08:ad:d7:a6:df:e4:8b:1e:
                    29:f2:f9:db:c1:cb:8c:13:a1:a2:1d:53:f4:c4:6d:
                    36:fd:0a:91:19:63:81:0a:04:f1:ed:fc:42:97:04:
                    db:99:b8:18:6d:78:53:55:65:a1:4a:ce:bb:80:a5:
                    64:f1:59:91:f7:f0:bb:e3:6f:52:7d:27:73:be:1f:
                    e1:48:70:a8:21:47:06:77:47:56:98:90:96:c7:05:
                    2e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:69:F8:BE:BD:91:54:BF:76:23:3C:40:01:F7:71:F0:FD:54:CF:88
            X509v3 Authority Key Identifier:
                keyid:FF:3E:0E:0F:A7:FF:25:7D:BD:86:E6:2B:12:9A:99:4D:8A:49:D8:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_z4OD6f_JX29huYrEpqZTYpJ2E4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B1F5/0D213EDC33FD11EDABF7CF4BC4F9AE02/_z4OD6f_JX29huYrEpqZTYpJ2E4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:0a:ac:2b:29:5e:0c:bd:a2:c7:e7:20:00:3e:ea:a4:0c:12:
         a3:3c:4b:d2:98:21:b1:65:98:eb:23:33:40:42:ae:cd:8d:f5:
         ca:0c:72:62:d1:47:e9:74:20:d9:35:7a:7c:0d:99:4e:dc:5a:
         cd:a1:69:d5:94:67:31:e4:d2:86:65:43:6e:4f:8d:62:7b:68:
         d7:6e:b8:e0:65:f0:6b:56:f9:8a:80:30:5d:29:63:ed:80:74:
         9a:36:fe:19:10:fe:4a:c7:9f:59:77:82:93:0f:b6:43:21:70:
         92:e4:bd:d8:07:a2:a2:0e:bd:fd:03:3e:28:37:e9:64:66:31:
         df:3a:f8:2e:7d:21:cd:eb:b8:41:4b:b6:7b:c1:4d:92:16:28:
         06:63:32:63:d6:37:ff:70:eb:7e:f5:3b:6e:36:87:01:5a:db:
         6f:05:14:b9:38:93:ca:5d:82:50:5f:60:a3:4b:16:84:59:e6:
         17:52:54:94:84:66:08:ee:85:90:c1:fd:c5:89:76:51:26:bf:
         2a:ee:d2:72:a7:cb:18:28:bb:f5:eb:66:55:14:dd:7e:0f:cc:
         02:e0:6d:92:cc:f3:b7:d0:96:cf:d5:6a:8b:00:ca:82:47:55:
         9b:72:6d:b9:e8:e5:66:49:88:20:11:72:93:35:eb:67:84:f9:
         46:18:24:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:46:16 2026 by rpki-client