Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          7rqFv7ZmKnhBU694BCggh67qMIKBrmyACfuA6Oss4/4=
Subject key identifier:   D2:FE:9A:8A:24:49:6E:C6:82:F7:24:42:A0:B2:31:84:1E:DC:D2:25
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       04FE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04A7
Signing time:             Sat 18 Apr 2026 23:59:24 +0000
Manifest this update:     Sat 18 Apr 2026 23:59:24 +0000
Manifest next update:     Sat 25 Apr 2026 23:59:24 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: prOI6RjJbHrcFCjgsMxJQ4LVrxImm+RwzTYCFN3lZyA=)
                          2: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          3: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
                          4: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          5: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          6: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          7: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
                          8: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          9: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 23:59:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1278 (0x4fe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Apr 18 23:59:24 2026 GMT
            Not After : Apr 25 23:59:24 2026 GMT
        Subject: CN=69e41adc-81e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ed:14:c7:0c:ac:46:03:dd:d9:7f:70:15:df:
                    d1:84:de:64:53:86:fd:c8:40:54:6f:ed:99:7f:60:
                    6e:02:7e:9c:ac:b2:74:6f:8c:05:0f:28:0d:88:85:
                    c8:7a:7f:bd:bd:b5:20:5f:8c:6f:ee:8c:af:13:70:
                    31:19:ca:34:01:83:09:d2:ef:8e:80:34:82:03:f2:
                    b0:d1:69:a0:10:1c:a0:ef:30:7b:05:26:38:c5:4d:
                    5a:da:b9:27:fe:91:19:1e:f7:6c:e9:42:06:34:af:
                    54:60:ee:85:ae:bf:05:e7:09:29:bb:26:99:99:ce:
                    13:df:49:b7:9b:67:08:23:25:f9:3f:2f:6a:79:32:
                    ea:f8:f4:a1:b0:6b:43:aa:3c:7c:c5:6a:6e:e8:91:
                    f0:f3:ba:1b:06:e6:bc:34:c6:5d:ab:f5:8e:cb:a3:
                    5c:fb:21:63:43:a4:a0:0f:c1:01:95:36:d6:0a:fd:
                    b5:d3:11:f4:6b:4d:b5:60:ce:88:fb:e3:4b:5d:67:
                    2a:5e:c6:0e:b3:28:91:c7:76:61:b7:cf:16:22:5c:
                    e2:0e:0f:e8:e9:05:94:19:81:ed:06:04:83:fc:6d:
                    15:17:b6:b3:f2:d5:5c:af:4d:56:55:b0:7d:1d:16:
                    01:03:c2:74:a5:aa:35:6a:fa:66:bd:85:be:d1:3b:
                    92:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:FE:9A:8A:24:49:6E:C6:82:F7:24:42:A0:B2:31:84:1E:DC:D2:25
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:88:d2:f5:16:f4:b9:90:a2:80:f9:15:7f:b6:26:3b:b3:4c:
         3b:94:54:5e:73:53:31:c8:61:a5:b6:bb:23:bb:dd:f6:a0:0d:
         5b:4e:92:d8:cc:35:b7:a4:1c:8a:6a:3b:83:6b:c6:5d:4d:e9:
         ad:92:02:9c:4b:4d:94:22:53:e8:39:bd:b2:4d:52:6e:57:2e:
         8e:d9:32:21:b4:71:9a:38:9d:d8:37:5c:55:9c:ac:a2:69:98:
         b2:83:06:94:90:58:a4:c9:fa:0e:de:bd:77:0f:f4:5d:d1:33:
         f8:cc:3c:ee:2a:65:c5:ab:f0:20:e3:30:85:da:eb:34:55:fb:
         ec:0c:48:db:10:c1:a5:37:86:da:48:df:04:60:3e:56:9e:c7:
         de:f8:37:51:d2:cb:9a:90:0a:9f:af:fa:8e:30:be:2c:5f:09:
         21:24:ac:d9:df:87:97:f1:3c:0e:b3:33:aa:a0:8a:7d:e2:d3:
         7a:56:68:b7:94:53:93:c2:51:55:fe:e1:6c:13:70:38:76:46:
         3e:5d:84:f4:fc:b2:f1:a9:de:e2:18:a6:88:dc:b5:36:15:40:
         94:b6:b0:74:98:73:40:df:a5:84:62:5c:30:33:63:00:15:17:
         86:e4:02:5d:4d:6e:2a:cf:10:cd:6c:b6:ee:e2:f3:17:c2:21:
         70:86:17:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:18:56 2026 by rpki-client