Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
File:                     dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft (raw, json)
Hash identifier:          AarCXX0Go22dnANBPJ08k5YMDpJcztZM5zTlj9ySf2g=
Subject key identifier:   BE:3B:46:59:C9:50:2B:06:1E:71:75:90:F1:73:89:59:B9:6D:1D:A2
Authority key identifier: 76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07
Certificate issuer:       /CN=A917ADD1/serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
Certificate serial:       01FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
Manifest number:          01F8
Signing time:             Fri 17 Apr 2026 02:56:05 +0000
Manifest this update:     Fri 17 Apr 2026 02:56:04 +0000
Manifest next update:     Fri 24 Apr 2026 02:56:04 +0000
Files and hashes:         1: dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl (hash: 4GxtM2qLhEKEqZM+6gkwmdooda/EGtJ8kv/zfqayYvk=)
                          2: 8D0C1E0E37EF11EE82AF270BC4F9AE02.roa (hash: +d//0YGkCcKL1FsuPM9/LDwxfVKY4NL0IuPYs6NjtuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl
                          rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:56:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 509 (0x1fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917ADD1, serialNumber=7652A22FC250FAAAE3AB2C0C2AFDD04E3047E507
        Validity
            Not Before: Apr 17 02:56:04 2026 GMT
            Not After : Apr 24 02:56:04 2026 GMT
        Subject: CN=69e1a144-60af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:f9:40:3b:f6:c9:e4:57:55:ec:89:d2:43:
                    24:17:d0:77:bf:d5:e2:9e:3a:6a:44:66:f1:41:76:
                    b7:a4:50:9c:85:8f:55:14:c1:78:53:16:02:a2:8f:
                    11:18:f2:94:66:8b:3a:96:7d:70:a3:81:ba:01:ff:
                    ce:9c:e0:f8:ec:7e:f6:65:c2:62:1b:9a:9f:e3:d5:
                    2a:28:3a:94:04:e6:dd:a8:03:fb:cb:30:5e:11:22:
                    25:95:e6:79:a9:c8:f4:6e:69:f2:18:96:da:ac:3a:
                    92:cb:c9:3e:2e:69:c7:68:aa:2b:a4:9f:41:a4:b7:
                    6f:34:5c:7a:1d:0c:c9:3f:8f:3c:f2:19:ee:64:fd:
                    ed:5c:ee:62:fa:11:ba:a3:3d:33:06:8e:97:ef:7a:
                    2e:8e:ef:c9:91:e5:27:84:a7:3f:6a:59:d4:2b:1d:
                    4a:f9:e3:e3:7e:57:bc:ad:42:c1:0c:49:d8:ec:a9:
                    47:2d:e5:ef:1f:45:47:bd:0b:0e:c4:e2:28:a9:be:
                    9d:9d:d1:72:11:3f:01:00:36:b0:92:f3:f8:16:f7:
                    aa:ce:6b:78:ba:ea:2d:53:1f:2b:90:ff:4c:06:d2:
                    0a:75:0b:0d:88:85:ba:23:e2:12:32:67:67:f1:5f:
                    1f:a4:09:c0:1d:21:5b:77:32:f2:ef:b3:4f:7d:61:
                    f3:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:3B:46:59:C9:50:2B:06:1E:71:75:90:F1:73:89:59:B9:6D:1D:A2
            X509v3 Authority Key Identifier:
                keyid:76:52:A2:2F:C2:50:FA:AA:E3:AB:2C:0C:2A:FD:D0:4E:30:47:E5:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917ADD1/D006C0DE37EE11EE98DF3666C4F9AE02/dlKiL8JQ-qrjqywMKv3QTjBH5Qc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:b1:17:3d:cc:2a:45:5a:7a:51:f9:e6:02:50:ed:67:d8:e3:
         82:9d:39:78:20:ea:5e:79:25:8b:b2:f0:a3:6c:1d:eb:cb:05:
         e9:76:74:e3:75:a7:5c:05:3f:57:2e:b6:b1:e7:ac:70:f8:e9:
         02:d2:1f:69:7d:40:96:dd:bb:b2:8e:66:a6:3b:43:40:84:ee:
         db:1b:51:7d:c4:6a:c9:66:d7:3f:d7:6e:db:f6:5f:d3:4f:80:
         26:ec:5b:0c:03:b0:f2:6f:ab:a8:ce:6d:f8:84:d3:40:0f:fc:
         f3:8b:74:d1:42:20:da:19:eb:7c:74:8e:b3:2b:e2:e9:52:89:
         22:bc:f4:60:c7:2d:28:bf:80:48:6b:b8:90:d9:cb:8d:3e:32:
         5d:ec:1b:fb:71:b5:f1:82:75:d3:30:80:23:67:71:31:1b:49:
         92:b4:32:44:6a:88:39:3e:0f:b0:4c:e8:36:4d:36:b0:82:39:
         fc:57:62:89:fc:b0:bd:89:5c:85:1b:58:92:15:8b:60:64:8b:
         3f:17:9a:80:94:2d:16:9d:82:e5:61:c6:41:04:d7:87:17:27:
         74:82:86:da:a1:b7:4b:3f:64:c8:90:14:e3:b3:c2:32:4d:92:
         f6:ee:08:ac:99:ba:36:60:13:61:50:00:49:f3:a5:f4:a4:11:
         03:af:6c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:03:58 2026 by rpki-client