Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
File:                     PqQ0fS2f1utqAbROVXH4iwiswls.mft (raw, json)
Hash identifier:          szuKVogpuwNAojcQK7LxPPSfCHD/S1MmP79yhK0ib60=
Subject key identifier:   09:4C:ED:24:1D:D6:A5:4F:8A:14:79:77:F7:CF:35:44:09:26:9E:7E
Authority key identifier: 3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B
Certificate issuer:       /CN=A917BB51/serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
Manifest number:          01A4
Signing time:             Fri 17 Apr 2026 03:57:33 +0000
Manifest this update:     Fri 17 Apr 2026 03:57:32 +0000
Manifest next update:     Fri 24 Apr 2026 03:57:32 +0000
Files and hashes:         1: PqQ0fS2f1utqAbROVXH4iwiswls.crl (hash: n+AqqN4EDnZBFnUPo0dUf2pXCcp4GwF2X4PqthfzycA=)
                          2: A9C5C1CAC4B811EE8A03D547C4F9AE02.roa (hash: +fiYjkOTw29H17V5Q0jS5Cy2xXc6X92nZPkDe2rUAJE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl
                          rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:57:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917BB51, serialNumber=3EA4347D2D9FD6EB6A01B44E5571F88B08ACC25B
        Validity
            Not Before: Apr 17 03:57:32 2026 GMT
            Not After : Apr 24 03:57:32 2026 GMT
        Subject: CN=69e1afad-6306
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:5c:be:55:cc:15:e4:05:12:cf:f0:1d:fd:67:
                    d3:fe:95:03:f5:03:e6:de:38:16:a6:b2:f0:a5:8f:
                    67:02:7c:82:b2:08:0b:eb:26:f2:e4:b3:13:dd:7d:
                    a2:27:16:25:b8:7d:f4:e3:9c:c8:52:c4:3d:bc:6c:
                    2d:4a:31:45:3e:03:51:f1:93:44:89:5e:60:67:30:
                    a6:2c:8b:46:1c:66:ef:9b:3e:8b:31:9c:f9:37:a5:
                    d7:60:64:e8:2c:d5:98:99:52:28:31:db:5c:ff:1b:
                    f7:08:d9:15:ab:9d:0e:82:65:50:ab:d7:16:fb:e9:
                    e5:41:f5:b8:21:7a:5b:56:fa:bd:93:fe:f8:0c:b4:
                    0d:95:ca:bc:2f:6b:65:43:ca:d9:37:b8:85:b9:85:
                    b8:62:24:e6:01:b9:75:62:8b:ce:21:76:4d:c7:e2:
                    8d:b8:0b:d0:67:c6:95:1a:b7:66:ac:cc:4b:bd:4c:
                    5e:c4:4c:43:1b:3d:50:db:f2:11:d2:70:9f:3e:68:
                    50:f8:b1:26:c5:39:5f:fb:90:de:11:71:a6:43:d9:
                    43:e9:81:a7:28:b7:7c:bf:d5:2b:8a:b6:ef:18:8b:
                    4d:1c:96:e3:ca:44:c5:80:78:19:0d:60:62:fb:4d:
                    36:25:46:fa:67:62:f0:8c:33:9a:f2:bf:fc:89:70:
                    5c:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:4C:ED:24:1D:D6:A5:4F:8A:14:79:77:F7:CF:35:44:09:26:9E:7E
            X509v3 Authority Key Identifier:
                keyid:3E:A4:34:7D:2D:9F:D6:EB:6A:01:B4:4E:55:71:F8:8B:08:AC:C2:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqQ0fS2f1utqAbROVXH4iwiswls.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917BB51/25ACF5C0C4B811EEBD71C446C4F9AE02/PqQ0fS2f1utqAbROVXH4iwiswls.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f2:4e:1c:7e:c9:23:cf:97:05:75:5f:24:7c:67:e1:75:e8:
         2f:77:59:30:0e:89:8c:b8:1e:13:22:97:90:7b:81:9f:0e:e7:
         bd:f7:18:fb:e9:df:fb:4d:ca:4c:8f:f3:11:a4:df:2e:a9:f5:
         67:dd:c9:46:84:57:74:e6:f9:73:f0:ab:1d:d9:40:61:b5:b3:
         be:49:b5:ef:27:a6:bd:4f:be:c4:40:26:ba:7c:02:8c:4c:5f:
         13:79:e9:e8:39:97:22:49:fe:b5:ab:9b:8d:d9:a4:25:8f:48:
         4d:80:75:7c:2f:50:44:27:89:3a:17:0a:75:e3:4f:3a:30:af:
         d5:85:1a:f9:3b:5b:f9:20:e1:66:e5:8e:dc:84:40:c0:e7:8c:
         fd:8e:e2:98:4c:3b:7c:23:b1:74:aa:3a:77:ff:27:fa:b2:10:
         7f:35:17:6c:7c:85:7a:ec:91:cf:35:78:b4:e4:29:99:84:47:
         8a:4c:8b:b1:b5:25:df:98:96:da:dd:f2:15:69:b7:1e:05:09:
         06:6e:41:af:e9:7e:d8:04:cf:6f:ae:d9:03:50:6d:61:6f:d5:
         8b:1a:8b:39:a3:a1:11:84:9f:cd:0d:5e:b7:0f:cd:7a:f6:16:
         52:80:d2:5c:75:7c:25:d3:e5:30:fc:a6:ce:47:9a:7f:e2:ef:
         51:d5:6c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:25:49 2026 by rpki-client