Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          WzgZCMO1Ra6j95tQcz5dUV/qQIhOzIxKQpjy/bRiahM=
Subject key identifier:   2C:C4:38:CA:92:C1:C4:28:4E:6F:C6:83:10:1F:CD:74:8C:36:09:05
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       30FA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          30C7
Signing time:             Thu 16 Apr 2026 15:25:54 +0000
Manifest this update:     Thu 16 Apr 2026 15:25:53 +0000
Manifest next update:     Thu 23 Apr 2026 15:25:53 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: 2eUTEEmii5qqjpJ0BJQtbdKLo7QqYN7AAbfhISRz0X4=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 5DRF3OBPfXV3lU2bu3oUnMJrvoo8XlLJ7cqTsx4GaH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:25:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12538 (0x30fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Apr 16 15:25:53 2026 GMT
            Not After : Apr 23 15:25:53 2026 GMT
        Subject: CN=69e0ff82-7ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:65:2d:28:ff:0a:b1:12:c2:9f:3f:47:07:f4:
                    da:df:1c:68:a9:26:47:29:dc:df:06:ba:a3:10:25:
                    18:28:d3:3f:43:91:68:fd:94:90:cb:27:72:95:d9:
                    82:b6:ad:12:b8:aa:b8:c9:d9:9b:dd:88:36:c4:e6:
                    44:78:6c:70:01:0a:17:f2:86:2c:b3:51:b2:1f:ca:
                    59:57:f4:fd:4a:f4:f5:2a:33:1f:dd:53:1a:79:cb:
                    41:bb:bb:e8:57:34:73:4e:7d:d1:f2:41:86:26:c3:
                    02:9f:bb:6f:2d:fe:c1:51:42:29:b2:9a:a9:6d:25:
                    d5:81:5c:63:f9:0a:9a:cc:38:68:0a:03:af:ce:0e:
                    3b:65:5e:5f:c3:48:fd:40:1d:fb:24:43:d1:a8:1c:
                    4d:16:19:f5:bc:48:28:15:01:e7:53:55:ac:c7:2a:
                    89:43:e5:8c:b4:04:d3:09:26:6a:85:c4:1b:dc:10:
                    83:1e:c8:6d:e9:a4:0f:63:4d:0e:76:f2:5a:e3:99:
                    74:9f:47:2e:fb:49:66:38:94:e5:81:d7:51:8a:c0:
                    e4:66:99:bd:ad:be:45:11:f2:c3:e9:fc:05:dc:d1:
                    c3:75:d1:b4:a1:34:30:f1:39:ee:0d:3e:61:84:cd:
                    a4:cb:a2:03:ed:d1:d8:3f:aa:30:a8:df:e1:66:81:
                    c4:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:C4:38:CA:92:C1:C4:28:4E:6F:C6:83:10:1F:CD:74:8C:36:09:05
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:98:27:06:ac:3b:94:f9:c1:53:a2:4e:31:3f:ed:e2:95:80:
         4b:c4:62:1e:27:84:fc:20:98:64:9d:ef:05:48:1d:b0:e8:57:
         07:69:6b:66:c0:d3:b9:ac:31:c9:c7:e6:c2:63:46:e6:1c:4c:
         c4:c5:6e:07:51:be:8c:18:ad:c9:ba:9a:f1:10:35:cf:e9:4b:
         4e:ae:bd:ea:ad:5b:74:75:55:48:9e:8a:8c:1f:ba:0b:ae:95:
         10:15:7d:84:9e:1e:f7:33:6b:46:ef:ff:6c:d4:71:e6:22:e1:
         33:c1:9a:90:7e:f4:ee:97:30:f3:2e:74:91:78:1d:da:68:15:
         d6:ad:a4:91:12:2f:27:5b:94:42:ba:f7:2c:1b:d6:c3:50:12:
         c5:65:84:b0:b8:a9:62:af:43:94:0d:9e:72:3f:d6:8e:73:bb:
         d0:a4:c9:b8:8f:7f:3a:76:b6:da:f6:92:5a:7e:b0:7c:d0:31:
         61:4a:65:f5:66:54:a4:5e:63:34:df:7b:60:29:55:43:07:22:
         57:7b:9a:57:67:c4:ab:cc:4b:9f:49:99:ba:cf:3f:d3:af:11:
         4f:39:cc:50:21:b7:cd:d1:16:d8:80:06:99:2e:20:1f:d3:61:
         40:9c:aa:57:22:54:dd:87:cb:10:ad:58:b5:68:87:e4:f4:42:
         13:d3:9c:61
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICMPowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEFBNEQxMTAvBgNVBAUTKEQ1QzhGMURDOTREM0MzNDgxRDZDNjk1MzY5NTZBNEE1
MjhENUVEQzMwHhcNMjYwNDE2MTUyNTUzWhcNMjYwNDIzMTUyNTUzWjAYMRYwFAYD
VQQDEw02OWUwZmY4Mi03YWQ4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAimUtKP8KsRLCnz9HB/Ta3xxoqSZHKdzfBrqjECUYKNM/Q5Fo/ZSQyydyldmC
tq0SuKq4ydmb3Yg2xOZEeGxwAQoX8oYss1GyH8pZV/T9SvT1KjMf3VMaectBu7vo
VzRzTn3R8kGGJsMCn7tvLf7BUUIpspqpbSXVgVxj+QqazDhoCgOvzg47ZV5fw0j9
QB37JEPRqBxNFhn1vEgoFQHnU1WsxyqJQ+WMtATTCSZqhcQb3BCDHsht6aQPY00O
dvJa45l0n0cu+0lmOJTlgddRisDkZpm9rb5FEfLD6fwF3NHDddG0oTQw8TnuDT5h
hM2ky6ID7dHYP6owqN/hZoHEiQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCzEOMqS
wcQoTm/GgxAfzXSMNgkFMB8GA1UdIwQYMBaAFNXI8dyU08NIHWxpU2lWpKUo1e3D
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4QUE0RC82QzA1NTgyNDA1
ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcwZ2RiR2xUYVZha3BTalY3
Y00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzFjangzSlRUdzBnZGJHbFRhVmFrcFNqVjdjTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
QUE0RC82QzA1NTgyNDA1ODcxMUUzQkZFNTdDQTE1OTExRUEzMi8xY2p4M0pUVHcw
Z2RiR2xUYVZha3BTalY3Y00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADZgnBqw7lPnBU6JOMT/t4pWAS8RiHieE/CCYZJ3vBUgdsOhXB2lrZsDTuawx
ycfmwmNG5hxMxMVuB1G+jBitybqa8RA1z+lLTq696q1bdHVVSJ6KjB+6C66VEBV9
hJ4e9zNrRu//bNRx5iLhM8GakH707pcw8y50kXgd2mgV1q2kkRIvJ1uUQrr3LBvW
w1ASxWWEsLipYq9DlA2ecj/WjnO70KTJuI9/Ona22vaSWn6wfNAxYUpl9WZUpF5j
NN97YClVQwciV3uaV2fEq8xLn0mZus8/068RTznMUCG3zdEW2IAGmS4gH9NhQJyq
VyJU3YfLEK1YtWiH5PRCE9OcYQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 20:55:08 2026 by rpki-client