Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
File:                     rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft (raw, json)
Hash identifier:          2JSOsgwTck4SOjcqwJ8UH/wvyhSkCw1PkaGsQ+ZPz4c=
Subject key identifier:   8A:15:5B:6C:70:EC:F1:51:F8:5E:AF:2D:54:23:38:DA:EA:8A:79:A4
Authority key identifier: AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75
Certificate issuer:       /CN=A9172FC5/serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
Certificate serial:       0113
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
Manifest number:          0109
Signing time:             Fri 17 Apr 2026 05:46:43 +0000
Manifest this update:     Fri 17 Apr 2026 05:46:42 +0000
Manifest next update:     Fri 24 Apr 2026 05:46:42 +0000
Files and hashes:         1: rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl (hash: hfRpDaGJjNfQdJ3t9YxD1zoeJDtHHdcg246Irp1FEcQ=)
                          2: 15B99EFC016111F0B1B6A34EC4F9AE02.roa (hash: Ym98AGZEM1BksP4Y3kvzDkvtm38BxUohqAh//gTG7x8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl
                          rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:46:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172FC5, serialNumber=AD545D2504FE1DE92AE1766DF4657637DB7A7E75
        Validity
            Not Before: Apr 17 05:46:42 2026 GMT
            Not After : Apr 24 05:46:42 2026 GMT
        Subject: CN=69e1c943-2144
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ee:f5:b5:d5:84:d2:df:e5:e0:c2:f1:a2:14:
                    88:a2:fc:df:9f:fa:46:28:7a:c9:10:85:7f:6e:09:
                    fd:b4:88:95:05:b2:5b:0b:75:3e:1c:d0:8c:53:2e:
                    c4:8e:76:59:45:ee:1d:c6:8f:00:62:fc:06:85:88:
                    28:e1:dd:76:c6:7e:c0:65:39:f3:d7:a1:48:c1:d1:
                    14:38:bb:1e:d2:3a:71:be:b1:de:be:77:91:68:6e:
                    74:72:34:15:4b:e4:2f:f7:05:9d:6e:07:4c:d2:b4:
                    74:1d:51:a0:e9:0c:c0:f4:55:1a:db:d0:20:78:6b:
                    3f:37:f4:64:1f:6a:99:af:7c:ba:2f:23:9b:14:ef:
                    9b:0a:61:da:31:3e:ca:d5:3f:87:21:4a:d0:a9:d0:
                    13:8d:df:17:46:b5:ad:a9:94:01:1d:4c:18:1c:37:
                    4d:b5:af:54:53:e9:e9:94:2b:ca:30:58:a2:4e:f4:
                    db:92:a4:69:3d:2f:8b:65:c4:9f:58:58:c6:b7:fc:
                    f0:bd:e4:47:a1:fe:dc:c4:9b:a0:fc:da:1b:f0:c4:
                    5c:42:6f:c0:17:66:6a:62:30:b8:29:5e:bc:c8:f8:
                    3c:bc:e1:12:bc:c5:c9:ad:00:f7:5e:56:59:96:83:
                    41:51:67:c8:9f:7d:68:df:ea:7f:b3:c7:a4:61:6c:
                    28:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:15:5B:6C:70:EC:F1:51:F8:5E:AF:2D:54:23:38:DA:EA:8A:79:A4
            X509v3 Authority Key Identifier:
                keyid:AD:54:5D:25:04:FE:1D:E9:2A:E1:76:6D:F4:65:76:37:DB:7A:7E:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rVRdJQT-Hekq4XZt9GV2N9t6fnU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172FC5/E539CDA0AB3F11EFBE02CF14C4F9AE02/rVRdJQT-Hekq4XZt9GV2N9t6fnU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:f7:b3:2c:4d:a4:4a:8c:d0:d8:8c:47:99:1f:d9:7b:f3:60:
         77:19:c9:1b:21:3d:7a:d9:b0:a5:7d:20:94:9c:ab:4c:34:ec:
         06:fd:36:ff:38:b6:25:c4:3a:9e:41:a5:08:77:85:c7:2c:cc:
         c3:b4:a3:3f:f1:f9:64:21:41:bf:7a:fb:a7:f3:28:42:fd:5c:
         a0:86:b8:aa:1d:90:e9:74:8b:c6:00:d5:c2:66:bc:71:43:92:
         ce:c9:32:b9:9f:14:1a:51:15:81:2e:71:74:f7:db:d4:d7:7e:
         3a:ba:6a:4a:8c:ce:b9:15:4f:94:ec:d5:db:2f:73:f9:50:07:
         1f:81:d3:1a:b7:cf:98:25:12:95:ad:b4:ae:b2:8a:aa:41:95:
         af:36:e5:55:90:5a:f7:d6:17:ae:ab:d4:fb:22:44:4f:ba:92:
         e0:2d:9a:ab:48:7d:24:90:39:93:38:26:9f:07:97:3b:df:c0:
         3b:39:ba:d6:b4:b4:e3:0d:70:7d:a3:ad:a8:aa:5f:f3:86:cf:
         c8:bb:e2:b1:d2:31:30:8e:04:a0:d7:0e:b5:51:ad:1d:52:62:
         28:bd:e1:d0:6c:51:3a:f5:4a:3d:93:52:ea:25:d8:2e:03:2a:
         60:24:00:71:da:d6:e4:2f:a6:64:c6:6c:cc:ed:31:a1:89:04:
         92:e1:4b:40
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICARMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzJGQzUxMTAvBgNVBAUTKEFENTQ1RDI1MDRGRTFERTkyQUUxNzY2REY0NjU3NjM3
REI3QTdFNzUwHhcNMjYwNDE3MDU0NjQyWhcNMjYwNDI0MDU0NjQyWjAYMRYwFAYD
VQQDEw02OWUxYzk0My0yMTQ0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAm+71tdWE0t/l4MLxohSIovzfn/pGKHrJEIV/bgn9tIiVBbJbC3U+HNCMUy7E
jnZZRe4dxo8AYvwGhYgo4d12xn7AZTnz16FIwdEUOLse0jpxvrHevneRaG50cjQV
S+Qv9wWdbgdM0rR0HVGg6QzA9FUa29AgeGs/N/RkH2qZr3y6LyObFO+bCmHaMT7K
1T+HIUrQqdATjd8XRrWtqZQBHUwYHDdNta9UU+nplCvKMFiiTvTbkqRpPS+LZcSf
WFjGt/zwveRHof7cxJug/Nob8MRcQm/AF2ZqYjC4KV68yPg8vOESvMXJrQD3XlZZ
loNBUWfIn31o3+p/s8ekYWwoIQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIoVW2xw
7PFR+F6vLVQjONrqinmkMB8GA1UdIwQYMBaAFK1UXSUE/h3pKuF2bfRldjfben51
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MkZDNS9FNTM5Q0RBMEFC
M0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9yVlJkSlFULUhla3E0WFp0OUdWMk45dDZm
blUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL3JWUmRKUVQtSGVrcTRYWnQ5R1YyTjl0NmZuVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MkZDNS9FNTM5Q0RBMEFCM0YxMUVGQkUwMkNGMTRDNEY5QUUwMi9yVlJkSlFULUhl
a3E0WFp0OUdWMk45dDZmblUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEARPezLE2kSozQ2IxHmR/Ze/NgdxnJGyE9etmwpX0glJyrTDTsBv02/zi2JcQ6
nkGlCHeFxyzMw7SjP/H5ZCFBv3r7p/MoQv1coIa4qh2Q6XSLxgDVwma8cUOSzsky
uZ8UGlEVgS5xdPfb1Nd+OrpqSozOuRVPlOzV2y9z+VAHH4HTGrfPmCUSla20rrKK
qkGVrzblVZBa99YXrqvU+yJET7qS4C2aq0h9JJA5kzgmnweXO9/AOzm61rS04w1w
faOtqKpf84bPyLvisdIxMI4EoNcOtVGtHVJiKL3h0GxROvVKPZNS6iXYLgMqYCQA
cdrW5C+mZMZszO0xoYkEkuFLQA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:23:43 2026 by rpki-client