Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
File:                     79iPiiibFMeUQxKLu7eRtS2lEa0.mft (raw, json)
Hash identifier:          cNwLm0qOkrhA53ElDRIzmZOEQO8MIQpq+hRrMerFkmk=
Subject key identifier:   A6:A0:0B:14:81:4B:6F:29:AD:69:9E:74:55:7B:38:99:22:25:41:3B
Authority key identifier: EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD
Certificate issuer:       /CN=A9171D3F/serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
Certificate serial:       0265
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
Manifest number:          0259
Signing time:             Sun 19 Apr 2026 02:03:00 +0000
Manifest this update:     Sun 19 Apr 2026 02:02:59 +0000
Manifest next update:     Sun 26 Apr 2026 02:02:59 +0000
Files and hashes:         1: 79iPiiibFMeUQxKLu7eRtS2lEa0.crl (hash: e4o4ZMOtfr8nikLVqZcrS0WjQgQqGQO4Qm7HhnqhILE=)
                          2: D0A263DCB09A11F0937ACB4DC4F9AE02.roa (hash: sGhpkR6yhXyOK18x4RQlxvcaTO+7oSqNbdwtlNU5FBw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl
                          rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 02:02:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 613 (0x265)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171D3F, serialNumber=EFD88F8A289B14C79443128BBBB791B52DA511AD
        Validity
            Not Before: Apr 19 02:02:59 2026 GMT
            Not After : Apr 26 02:02:59 2026 GMT
        Subject: CN=69e437d4-829e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f6:eb:38:a0:4e:fe:b3:88:8a:18:55:7d:df:
                    d2:fe:df:69:83:b4:d4:6c:c7:43:4e:ec:50:ed:59:
                    d2:18:40:1b:c7:b2:5a:ee:e9:13:22:62:46:40:67:
                    9b:b6:44:1a:2c:d2:7f:f3:a7:be:40:ba:ee:95:b9:
                    1e:4b:9f:f6:1b:9c:b7:ce:e7:4e:ba:d8:51:fb:d1:
                    92:e6:68:84:42:35:6d:b1:02:97:6a:a7:ca:c8:c6:
                    98:af:85:0e:96:af:82:e8:91:25:9a:1a:2c:4e:fc:
                    10:74:b1:01:e9:f0:ce:e2:cc:cc:52:bc:2f:89:1b:
                    20:34:5b:33:02:ad:81:45:d7:64:11:09:a6:7a:71:
                    e4:d4:eb:d5:2c:0c:e6:bb:28:aa:b7:9c:d9:0a:2b:
                    b4:cb:1f:b5:56:ca:98:77:65:db:88:a5:0c:ee:5f:
                    21:59:a7:6c:1c:0b:71:67:e9:3f:39:23:e6:c5:ce:
                    c1:09:80:6b:2f:a9:12:85:99:34:da:eb:d8:16:22:
                    0a:7f:e8:79:f6:47:7a:a7:39:10:59:8a:4d:86:fe:
                    ed:36:5f:72:f7:b1:cb:5a:2e:ac:4a:f7:4c:c9:8c:
                    d6:58:8e:f9:29:52:e2:1a:d8:31:31:13:1b:c6:04:
                    33:20:87:50:7b:39:1f:91:77:4d:c7:8f:23:c1:f1:
                    42:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:A0:0B:14:81:4B:6F:29:AD:69:9E:74:55:7B:38:99:22:25:41:3B
            X509v3 Authority Key Identifier:
                keyid:EF:D8:8F:8A:28:9B:14:C7:94:43:12:8B:BB:B7:91:B5:2D:A5:11:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/79iPiiibFMeUQxKLu7eRtS2lEa0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171D3F/9B9C8E6AB1B511ED99E32669C4F9AE02/79iPiiibFMeUQxKLu7eRtS2lEa0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:47:c7:9d:d9:08:cc:29:c2:ff:7b:5c:b3:ec:73:66:ba:64:
         2c:ae:17:cc:39:f0:3d:c9:b4:5b:0d:60:9f:00:49:60:9a:22:
         c6:96:0a:cb:ee:4d:aa:e4:68:da:6c:19:c4:4f:6d:98:43:3c:
         ed:f1:ba:9e:f8:c2:b5:6a:89:7e:c0:64:9f:2b:9b:07:95:a8:
         1c:8e:95:37:44:b5:71:c1:38:52:59:c4:0c:c6:fd:31:d2:9d:
         0d:16:8e:72:53:2f:85:a8:40:f2:11:a9:76:eb:6b:52:09:9e:
         82:db:09:3d:10:3a:d5:b1:ba:e4:bf:45:1e:59:9d:60:92:8a:
         dc:d3:d2:1c:b4:dc:2a:b1:a7:e5:ae:4d:de:eb:92:d6:4e:ce:
         d3:43:46:f7:1d:14:64:36:3c:cc:e5:e1:a6:28:3f:1a:af:0e:
         6d:19:bd:38:1c:95:1b:d2:01:0e:20:40:73:ef:a0:9f:35:fc:
         ff:6f:8d:9f:fb:67:d8:4d:9a:84:b4:b8:74:23:b9:dc:bd:2a:
         25:e2:68:ef:72:27:fd:b2:6e:1a:e2:78:95:22:4c:c6:8f:17:
         ae:bc:83:61:5d:c6:80:45:a5:4f:d4:a5:12:bc:11:76:00:ba:
         f3:aa:54:04:5e:9a:a2:bd:e3:6f:09:f0:71:be:ca:40:bd:9a:
         0e:a5:f6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:50:48 2026 by rpki-client