Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File:                     em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier:          EoFILSvGBFrFuQzCKi/+ljdSfLlQvkPbqVccwLdim8s=
Subject key identifier:   FB:24:D7:C9:07:78:B2:C9:D4:D1:70:69:C1:64:E2:CE:2A:04:32:C5
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer:       /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial:       18EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number:          18C4
Signing time:             Thu 16 Apr 2026 16:25:42 +0000
Manifest this update:     Thu 16 Apr 2026 16:25:42 +0000
Manifest next update:     Thu 23 Apr 2026 16:25:42 +0000
Files and hashes:         1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: K3WxslnTlkPdfLTp1IfQ/cf9K93LVvsUc51T5m37vfo=)
                          2: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=)
                          3: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: F7gvzg0So++J2V4XA9vCkNOHszA1gZ0+wMtYApbJrQM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6379 (0x18eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
        Validity
            Not Before: Apr 16 16:25:42 2026 GMT
            Not After : Apr 23 16:25:42 2026 GMT
        Subject: CN=69e10d86-153c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:f7:8a:81:09:31:cd:d1:28:c2:8a:bc:6f:
                    c3:87:cb:92:a4:57:9c:7e:a8:1a:bd:d2:50:a3:9b:
                    a9:3b:87:46:84:46:2b:4d:b2:18:d5:d7:b2:79:d5:
                    6c:54:ad:b7:04:49:8c:61:76:b1:a3:04:3d:0e:90:
                    46:99:7b:2f:a7:e7:41:d1:09:7e:12:e8:08:40:84:
                    0c:65:bc:26:95:42:38:af:76:c1:90:0a:81:29:05:
                    66:cc:ba:ac:9e:24:62:aa:69:70:3b:dd:96:ee:78:
                    d8:0d:9e:c2:93:92:48:fc:f7:9b:f7:10:fc:a9:a2:
                    f5:8e:0c:b1:10:74:56:9f:85:09:b8:1d:a2:03:a7:
                    59:a9:db:85:ec:19:2c:3e:db:1e:e4:48:a6:24:28:
                    63:fa:44:57:67:53:7a:0b:a3:4a:44:02:7f:a2:f6:
                    1e:ee:0e:68:94:8b:32:0e:be:f5:a0:46:da:b7:20:
                    e8:23:14:9a:81:5a:dd:4c:8c:5f:38:34:7d:97:0b:
                    4d:bb:0d:35:94:f9:c2:80:3e:3a:0f:4c:49:09:40:
                    97:6c:18:ae:e5:2d:7d:83:2e:46:00:34:6c:93:12:
                    5a:f3:cb:22:44:4c:a0:19:26:75:c5:ff:7e:24:f3:
                    4b:94:df:47:87:2d:2b:01:ca:70:df:04:c7:30:e7:
                    fb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:24:D7:C9:07:78:B2:C9:D4:D1:70:69:C1:64:E2:CE:2A:04:32:C5
            X509v3 Authority Key Identifier:
                keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:ee:97:d8:67:cd:e5:4e:eb:76:b3:99:4f:44:c8:57:42:7d:
         78:8a:95:60:d2:96:fc:85:b0:d6:59:28:15:40:59:1a:3a:66:
         46:32:f6:08:ed:e0:41:ae:cf:22:1e:fd:f3:c9:3a:fc:9c:4d:
         97:b9:2e:a7:69:eb:4a:9e:48:26:10:e3:fe:cd:b4:6d:a5:e2:
         e5:6b:e5:1a:f8:03:6d:6d:71:d5:65:e7:f4:4f:4f:bd:9a:cb:
         5e:bb:85:0d:68:14:51:af:a1:6e:c0:9e:72:5e:05:73:97:9d:
         47:d5:50:ad:71:24:5d:49:fc:c0:a9:31:29:57:b8:ef:ea:d6:
         a9:8e:cb:86:41:a7:7b:c5:84:e4:6c:84:01:51:9d:71:e4:91:
         b8:ab:93:85:d1:97:34:4a:a2:21:7f:ab:92:7b:b7:74:a2:e1:
         95:ec:ea:f8:52:d9:2a:02:3f:d7:5d:f5:c8:dd:d1:1a:ec:2c:
         2b:28:90:11:40:01:78:e5:08:f4:5d:2a:1c:03:26:c7:31:9d:
         90:10:b5:9e:14:19:57:2c:2c:25:99:8b:53:f5:bd:d0:a5:98:
         96:86:a1:97:bd:51:a9:4f:6d:ad:f4:89:8a:3d:b2:a4:a3:59:
         50:34:60:bf:d4:2d:15:ba:60:41:ab:9d:31:ad:eb:6f:85:df:
         98:96:2e:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:12 2026 by rpki-client