Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
File:                     CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft (raw, json)
Hash identifier:          rwY/h6ai91XJu+wGSt2RkUB0iC0RSTB4pHcgJQnv0qs=
Subject key identifier:   2C:9F:80:9E:B1:D3:27:0A:A8:FF:9F:AA:14:8A:80:5D:90:1B:BC:AC
Authority key identifier: 08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED
Certificate issuer:       /CN=A916CCFF/serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
Certificate serial:       0548
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
Manifest number:          0526
Signing time:             Thu 16 Apr 2026 23:30:17 +0000
Manifest this update:     Thu 16 Apr 2026 23:30:17 +0000
Manifest next update:     Thu 23 Apr 2026 23:30:17 +0000
Files and hashes:         1: CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl (hash: 9QHZnuYeNFFtR0J8GbS7ow767o93G3+LfeA1DCO78Xg=)
                          2: 0517C4F0470311EC9E6FA71DC4F9AE02.roa (hash: zOR5TgVBsSHkOmvQ/lOL+jCdE7mO8zRHpP652KPFcEI=)
                          3: 41E32C9852E411EC9E19AA2FC4F9AE02.roa (hash: qtZVADdmFN9d5j6ch3m5PUYodnBui2LsIftYffK0ss4=)
                          4: 02F57BD252E711EC931DB95CC4F9AE02.roa (hash: 6VGJIXHJFD6gG6e/bpw0km40IC6Vms57Pyehvnv97As=)
                          5: 413AD9F852E411EC9E19AA2FC4F9AE02.roa (hash: 3Nz0u0qKawbNn//HDkZr80q3+/OhbNMzbbOUzKEulCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl
                          rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:30:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1352 (0x548)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916CCFF, serialNumber=0803662C571325728F24FAAD8CB1A5F1900715ED
        Validity
            Not Before: Apr 16 23:30:17 2026 GMT
            Not After : Apr 23 23:30:17 2026 GMT
        Subject: CN=69e17109-09d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:e3:1c:d7:72:9a:10:c4:2b:15:19:83:bb:cb:
                    be:ec:10:b5:f3:bb:38:44:89:9b:83:e6:ff:fa:68:
                    9a:73:b9:8f:0b:bc:7c:e6:1d:bf:0e:ea:51:e6:58:
                    2d:3a:62:a7:bc:31:98:77:b6:18:cf:09:6c:77:7b:
                    13:dd:96:2d:07:08:a2:66:37:12:06:0b:01:07:94:
                    a2:a7:ac:c5:79:ba:1b:f3:e1:0a:c7:0c:dd:d5:4b:
                    e2:ee:d6:bc:34:b9:27:c6:22:e7:0c:bd:9e:4b:ca:
                    fb:b9:fe:d0:94:f1:5b:a3:f5:65:5b:25:1d:73:26:
                    20:b8:7f:22:2f:bd:33:ce:1c:ba:56:c5:3b:1f:d9:
                    64:98:84:95:76:d1:bb:68:78:35:4d:75:4a:cd:26:
                    9d:97:18:3f:da:b7:69:8a:8b:a7:5f:b1:9e:eb:71:
                    6a:ea:37:ef:16:81:15:df:57:c9:6f:c1:53:ff:db:
                    f1:c9:8c:21:4a:51:af:eb:02:f2:1d:da:58:fc:1d:
                    10:70:d2:7c:36:7f:4d:ba:56:74:78:1d:68:08:f2:
                    4e:03:d5:17:a8:a5:0d:9a:98:8a:6d:4e:60:c2:60:
                    c3:e7:45:23:68:5f:78:c4:14:53:1b:d2:f1:b8:8c:
                    4c:6f:a7:b5:8b:2f:67:39:13:eb:3a:ec:7b:3a:08:
                    40:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:9F:80:9E:B1:D3:27:0A:A8:FF:9F:AA:14:8A:80:5D:90:1B:BC:AC
            X509v3 Authority Key Identifier:
                keyid:08:03:66:2C:57:13:25:72:8F:24:FA:AD:8C:B1:A5:F1:90:07:15:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CANmLFcTJXKPJPqtjLGl8ZAHFe0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916CCFF/9A5EC16C46FE11EC94E3D24AC4F9AE02/CANmLFcTJXKPJPqtjLGl8ZAHFe0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:d8:67:e7:49:cb:8b:b8:36:08:37:82:b3:42:41:19:32:51:
         df:e2:43:77:c0:09:71:6a:32:c1:cf:a2:67:f9:67:6a:ef:33:
         c2:b3:66:d0:1c:7c:7a:4a:05:d8:41:f8:b5:e4:a9:c1:50:51:
         70:82:96:54:9b:5d:d9:a3:0d:f2:21:1e:4b:76:52:30:86:b4:
         d7:86:01:06:0a:c4:cb:8b:a4:bf:9e:ee:ae:58:40:3f:ad:20:
         a9:c1:15:3b:64:bb:eb:6f:5a:a9:7c:67:20:80:cb:50:03:38:
         2b:ea:6a:26:b7:2e:e7:28:49:54:06:d7:f7:5a:f6:4b:23:36:
         e5:87:ca:8e:84:b2:e0:0b:71:e5:1f:81:b3:08:68:af:c6:19:
         48:ab:b0:f6:05:26:f9:95:1f:b6:20:c1:39:84:b5:dd:3c:c2:
         50:d7:28:aa:a5:ec:88:45:2e:b9:5a:11:1f:32:16:b8:39:ad:
         66:c7:68:3a:f1:7e:4d:3d:2f:89:51:f3:48:60:8f:ff:73:73:
         11:a6:f9:e8:bd:cb:d5:8c:36:3a:83:c2:0c:df:64:6a:32:d8:
         dc:65:39:a1:bf:34:89:93:cc:0e:bb:7c:c5:00:76:b2:7f:e5:
         bb:eb:02:59:43:4e:96:53:c2:07:2f:ad:27:15:d9:93:0d:f5:
         8e:f0:bd:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:25:19 2026 by rpki-client