Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
File:                     PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft (raw, json)
Hash identifier:          y3CTWTy858yFMMMnP9EsaSqsXyW+6IwK+8sA0dOAM5c=
Subject key identifier:   3E:A1:9E:3A:20:3C:36:09:D5:15:80:77:2A:54:6A:FE:27:B6:E1:0F
Authority key identifier: 3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C
Certificate issuer:       /CN=A917535F/serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
Certificate serial:       C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
Manifest number:          B8
Signing time:             Fri 17 Apr 2026 06:47:04 +0000
Manifest this update:     Fri 17 Apr 2026 06:47:04 +0000
Manifest next update:     Fri 24 Apr 2026 06:47:04 +0000
Files and hashes:         1: PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl (hash: 4BFW8KEHVLGA7jXDjXguidYNgswm/U+ETaPyZ48iz+0=)
                          2: A7E91DCE275A11F09892587AC4F9AE02.roa (hash: 87D6nuf5v49Tli4xwHZuhqMSGj+/KqzNB34sSWREAF8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl
                          rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:47:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917535F, serialNumber=3D15363FB0A6F4A8D1A8A5C99FA3B4E5931F8B7C
        Validity
            Not Before: Apr 17 06:47:04 2026 GMT
            Not After : Apr 24 06:47:04 2026 GMT
        Subject: CN=69e1d768-ff02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f8:54:aa:d8:32:da:1e:3a:37:86:08:b4:f3:
                    fa:b1:7e:bd:9f:f2:67:d7:ee:c9:7d:60:d7:42:f0:
                    63:6d:94:b2:b7:f1:15:e0:17:f9:a9:86:09:52:c0:
                    db:b7:fe:ee:22:34:e4:e4:24:29:0e:29:e2:e3:3b:
                    16:aa:b6:51:90:f4:a8:f3:f7:f1:d5:d9:84:7a:f0:
                    09:88:7d:36:04:15:e9:2a:e8:b8:b3:72:85:44:75:
                    53:b0:4a:fa:95:26:3a:74:bd:2b:3f:85:73:82:42:
                    64:8c:ba:6d:19:8a:81:9f:a9:0c:02:77:36:a4:98:
                    72:a8:e0:57:c4:20:a7:97:7d:f0:77:6e:6a:49:c6:
                    4a:b2:40:89:6a:3e:fb:9e:78:ae:52:e6:ad:24:f0:
                    cb:3e:41:c9:01:7a:ac:57:8c:b2:8b:e3:8f:ea:d1:
                    03:14:05:15:ef:d7:40:6b:2b:47:9c:e9:11:f1:b6:
                    89:a9:b7:00:2d:58:9f:27:8b:dc:c0:6c:30:18:7c:
                    b2:61:8f:cc:69:00:f0:aa:59:82:be:e6:c4:cc:f2:
                    d5:9b:a4:07:7e:b7:3b:f2:94:18:3d:b8:95:08:96:
                    5e:2c:98:fd:95:bc:4c:e1:75:f4:4f:22:7a:2e:22:
                    7f:86:40:75:59:01:14:97:4d:26:51:19:ab:88:88:
                    57:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:A1:9E:3A:20:3C:36:09:D5:15:80:77:2A:54:6A:FE:27:B6:E1:0F
            X509v3 Authority Key Identifier:
                keyid:3D:15:36:3F:B0:A6:F4:A8:D1:A8:A5:C9:9F:A3:B4:E5:93:1F:8B:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917535F/2E28C85E275A11F08EFF6B76C4F9AE02/PRU2P7Cm9KjRqKXJn6O05ZMfi3w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:09:a2:35:a5:60:46:f0:8c:e9:33:fc:c9:f4:63:aa:e8:b0:
         78:7e:4e:7a:dc:0b:71:15:06:b4:e1:59:11:c5:7b:94:e4:e3:
         ef:22:61:de:a5:dc:91:52:a6:73:50:76:50:ca:d0:e5:6a:59:
         97:59:bb:0f:ba:e7:e3:0b:54:8a:a3:f0:f6:f0:c7:5f:4d:60:
         f7:e5:5a:f9:95:8b:8e:56:7f:c6:b6:8d:66:8d:64:ef:76:22:
         4c:be:bc:23:58:3f:2e:ac:4f:75:39:22:15:84:96:b9:e9:3a:
         54:bd:ea:66:d5:2e:da:28:42:11:eb:ca:61:bc:ea:c2:34:24:
         78:66:53:23:ba:c7:f8:47:e2:42:69:94:2a:49:eb:d1:06:33:
         a1:2c:a9:b1:f9:f1:4f:60:4e:31:6a:69:a0:32:da:34:ef:71:
         f6:67:ad:8a:eb:6c:e0:6e:f3:6a:f7:f6:24:d8:7d:8c:5f:0f:
         48:a2:9b:1f:f8:8e:1d:64:56:d6:49:7a:d1:a5:a2:57:8b:3d:
         2e:95:8d:e3:4e:02:8b:f0:50:77:65:17:88:e9:36:ea:3e:3a:
         74:95:23:df:cf:e2:66:d2:cb:5d:20:8b:05:87:3c:2f:ca:66:
         fd:e4:21:e5:4c:38:fc:1f:31:fb:15:f6:ac:d3:a3:bd:70:08:
         4b:75:9b:fc
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzUzNUYxMTAvBgNVBAUTKDNEMTUzNjNGQjBBNkY0QThEMUE4QTVDOTlGQTNCNEU1
OTMxRjhCN0MwHhcNMjYwNDE3MDY0NzA0WhcNMjYwNDI0MDY0NzA0WjAYMRYwFAYD
VQQDEw02OWUxZDc2OC1mZjAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyvhUqtgy2h46N4YItPP6sX69n/Jn1+7JfWDXQvBjbZSyt/EV4Bf5qYYJUsDb
t/7uIjTk5CQpDini4zsWqrZRkPSo8/fx1dmEevAJiH02BBXpKui4s3KFRHVTsEr6
lSY6dL0rP4VzgkJkjLptGYqBn6kMAnc2pJhyqOBXxCCnl33wd25qScZKskCJaj77
nniuUuatJPDLPkHJAXqsV4yyi+OP6tEDFAUV79dAaytHnOkR8baJqbcALVifJ4vc
wGwwGHyyYY/MaQDwqlmCvubEzPLVm6QHfrc78pQYPbiVCJZeLJj9lbxM4XX0TyJ6
LiJ/hkB1WQEUl00mURmriIhXwQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD6hnjog
PDYJ1RWAdypUav4ntuEPMB8GA1UdIwQYMBaAFD0VNj+wpvSo0ailyZ+jtOWTH4t8
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3NTM1Ri8yRTI4Qzg1RTI3
NUExMUYwOEVGRjZCNzZDNEY5QUUwMi9QUlUyUDdDbTlLalJxS1hKbjZPMDVaTWZp
M3cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1BSVTJQN0NtOUtqUnFLWEpuNk8wNVpNZmkzdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
NTM1Ri8yRTI4Qzg1RTI3NUExMUYwOEVGRjZCNzZDNEY5QUUwMi9QUlUyUDdDbTlL
alJxS1hKbjZPMDVaTWZpM3cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlQmiNaVgRvCM6TP8yfRjquiweH5OetwLcRUGtOFZEcV7lOTj7yJh3qXckVKm
c1B2UMrQ5WpZl1m7D7rn4wtUiqPw9vDHX01g9+Va+ZWLjlZ/xraNZo1k73YiTL68
I1g/LqxPdTkiFYSWuek6VL3qZtUu2ihCEevKYbzqwjQkeGZTI7rH+EfiQmmUKknr
0QYzoSypsfnxT2BOMWppoDLaNO9x9metiuts4G7zavf2JNh9jF8PSKKbH/iOHWRW
1kl60aWiV4s9LpWN404Ci/BQd2UXiOk26j46dJUj38/iZtLLXSCLBYc8L8pm/eQh
5Uw4/B8x+xX2rNOjvXAIS3Wb/A==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:40:15 2026 by rpki-client