Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
File:                     98T1xyjQwEdsUy6sGMKSfB1bgzs.mft (raw, json)
Hash identifier:          W46CsJ1wqCwvPI608Uvsa8RPb9WxLnb4QN9xwdKa/50=
Subject key identifier:   D2:A5:5F:F5:86:AA:C1:68:38:E7:56:A3:1C:1A:05:98:BA:13:9F:E6
Authority key identifier: F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B
Certificate issuer:       /CN=A9185D4E/serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
Manifest number:          0124
Signing time:             Fri 17 Apr 2026 05:22:42 +0000
Manifest this update:     Fri 17 Apr 2026 05:22:41 +0000
Manifest next update:     Fri 24 Apr 2026 05:22:41 +0000
Files and hashes:         1: 98T1xyjQwEdsUy6sGMKSfB1bgzs.crl (hash: YE0+eZ5ER6iURahtO2jByEfjZoqHfpMFeGHmFDwktz0=)
                          2: 5495EE5C9B4311EF87E5073DC4F9AE02.roa (hash: A1NTD7h2xgDeyXadTLZEojHNP4VwUiQbYlMzYMHSPLQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl
                          rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:22:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9185D4E, serialNumber=F7C4F5C728D0C0476C532EAC18C2927C1D5B833B
        Validity
            Not Before: Apr 17 05:22:41 2026 GMT
            Not After : Apr 24 05:22:41 2026 GMT
        Subject: CN=69e1c3a2-06f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:5e:15:a1:56:16:52:bf:5f:24:e7:fb:86:75:
                    a8:ce:08:1b:5c:9e:5d:cb:12:ec:49:6c:a2:62:90:
                    51:3b:30:c1:89:8a:e2:01:b5:9c:41:64:bb:b4:22:
                    f0:11:75:0c:f1:c3:4b:55:77:35:7f:9e:2c:07:8b:
                    39:47:8e:03:b2:89:ea:bf:eb:27:17:44:81:30:db:
                    a3:39:8e:77:82:a0:4f:d8:68:cf:b6:fc:5b:67:b6:
                    c1:8f:36:d9:a2:71:89:a0:0e:27:89:f0:71:de:33:
                    77:be:1e:ca:af:f6:2b:c9:ed:4d:74:b9:b1:47:64:
                    97:4f:d7:17:d9:56:22:7c:2e:ac:d0:79:10:a2:a0:
                    c8:3b:e9:2a:e5:55:82:a4:6d:71:90:9f:56:3f:2e:
                    93:aa:7e:43:df:99:f0:9b:bb:cd:41:06:a7:3b:7f:
                    34:f7:d0:e9:9e:9e:8e:19:e3:05:38:66:86:63:a4:
                    a2:a7:fe:d1:55:da:a7:b8:c3:9d:c0:c9:20:07:36:
                    20:8e:73:3a:cb:4a:a1:e8:d3:fb:de:90:07:f5:1b:
                    91:1d:56:3d:ee:6b:64:89:86:8d:9f:4b:39:15:2d:
                    60:07:09:6f:eb:5e:71:7d:74:c5:f4:46:48:20:60:
                    ac:60:cd:a0:e5:53:11:b4:5a:51:4e:4e:10:8c:d5:
                    3a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:A5:5F:F5:86:AA:C1:68:38:E7:56:A3:1C:1A:05:98:BA:13:9F:E6
            X509v3 Authority Key Identifier:
                keyid:F7:C4:F5:C7:28:D0:C0:47:6C:53:2E:AC:18:C2:92:7C:1D:5B:83:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/98T1xyjQwEdsUy6sGMKSfB1bgzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9185D4E/5B8442027FF211EF90E14F60C4F9AE02/98T1xyjQwEdsUy6sGMKSfB1bgzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:c6:f5:1e:9f:4f:c6:ac:e2:ae:53:bd:7c:77:2d:55:80:b2:
         8a:41:b8:ee:40:d2:6f:28:26:2d:da:53:f2:53:c7:78:77:44:
         a9:91:ed:e5:04:09:22:71:cb:df:44:3c:27:7b:c0:dc:b3:f9:
         9d:61:d8:78:ee:54:40:67:4f:41:72:78:eb:d3:93:66:12:0e:
         12:bf:64:7e:3f:6e:b4:25:65:44:18:0d:99:53:1c:95:51:8e:
         b2:91:1d:df:01:dd:a9:75:13:58:32:90:12:fe:58:11:b1:bd:
         7e:14:bf:87:ec:f8:13:46:ef:0c:03:6c:24:bf:e3:ba:31:ea:
         94:4e:ac:92:a9:e3:be:0d:47:85:71:eb:2d:e8:38:0c:96:e4:
         c5:b9:85:9c:b3:6f:49:51:a6:3b:43:36:d0:7c:6f:ec:9f:0d:
         65:2e:75:e3:7f:2a:7c:0e:1e:7b:a3:17:68:a8:24:a9:4e:03:
         ab:31:e4:de:28:d9:f5:1d:b8:0f:09:5c:da:04:72:16:a5:69:
         8a:52:b3:c4:f6:d2:f9:1a:4a:8d:0e:a7:b6:05:47:2f:aa:4d:
         ae:be:ae:0e:fb:05:5a:6e:48:4a:a4:b8:22:bd:56:c5:35:59:
         17:a2:c8:04:f1:73:32:f8:0b:6f:16:eb:e7:30:b2:00:7b:9f:
         a0:1f:55:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 23:44:31 2026 by rpki-client