Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
File:                     -0toP7pNtqwaWsUIgH_H6klsXsU.mft (raw, json)
Hash identifier:          b483WPY+LH1MWR4s06tj3OfhhUwYK9Q4Y873UsZAHkc=
Subject key identifier:   7A:45:8C:02:21:95:EA:33:A5:91:69:6C:E5:1D:F3:B3:BC:E4:42:41
Authority key identifier: FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5
Certificate issuer:       /CN=A918B759/serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
Certificate serial:       E3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
Manifest number:          DF
Signing time:             Fri 17 Apr 2026 06:18:53 +0000
Manifest this update:     Fri 17 Apr 2026 06:18:52 +0000
Manifest next update:     Fri 24 Apr 2026 06:18:52 +0000
Files and hashes:         1: -0toP7pNtqwaWsUIgH_H6klsXsU.crl (hash: dmbjsx9uKBUC8k+RL88fSZrgkk3NvDES88qaGqwFkd8=)
                          2: 44DE35D0EBE011EFB534ED7AC4F9AE02.roa (hash: qrM0axK44PGlug9CSywwyJZWvc/Bi96UzYkyFDe2HFo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl
                          rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:18:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 227 (0xe3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918B759, serialNumber=FB4B683FBA4DB6AC1A5AC508807FC7EA496C5EC5
        Validity
            Not Before: Apr 17 06:18:52 2026 GMT
            Not After : Apr 24 06:18:52 2026 GMT
        Subject: CN=69e1d0cd-3bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:ce:f3:c0:0b:0a:70:3f:d4:89:45:5c:41:b2:
                    79:08:77:66:5c:38:be:43:c3:ed:47:63:67:fd:01:
                    1d:42:2d:e5:77:ef:66:bb:2a:9c:af:bb:9e:96:7b:
                    f8:84:8a:1c:1b:6b:4d:e3:76:9b:1c:31:e2:0a:ec:
                    18:2d:99:ea:2d:26:31:9d:2f:20:87:63:8f:16:75:
                    40:47:19:06:26:a8:79:2b:6c:8f:26:7b:43:88:0c:
                    66:38:f5:4b:ee:2e:9d:69:6c:9d:30:9d:7f:6d:45:
                    4f:4d:5a:36:ae:58:cc:dd:29:eb:54:2b:95:8e:28:
                    23:10:6e:ad:a4:f8:55:05:51:13:4d:19:ba:73:34:
                    9e:1f:4b:91:29:2b:c8:80:1f:ab:94:39:fa:80:98:
                    d3:00:22:1d:95:11:95:a1:bc:22:32:24:f7:47:96:
                    4a:b2:1c:3e:32:8a:14:f6:97:c5:2b:2e:27:db:78:
                    2c:4b:43:ca:89:9e:11:ee:ea:89:c3:6e:1f:7d:54:
                    da:8c:75:43:d7:28:d7:d2:85:94:53:0d:e5:14:04:
                    57:09:de:5f:a5:15:10:3d:38:91:d9:71:8f:a7:11:
                    49:a0:5c:65:c2:65:6a:f4:ca:3b:ac:05:c7:6d:7b:
                    03:8a:e7:5b:ea:ac:b0:c0:ed:39:9e:d1:b3:92:07:
                    96:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:45:8C:02:21:95:EA:33:A5:91:69:6C:E5:1D:F3:B3:BC:E4:42:41
            X509v3 Authority Key Identifier:
                keyid:FB:4B:68:3F:BA:4D:B6:AC:1A:5A:C5:08:80:7F:C7:EA:49:6C:5E:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-0toP7pNtqwaWsUIgH_H6klsXsU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918B759/69C3BEE6EB6411EFA9A2C261C4F9AE02/-0toP7pNtqwaWsUIgH_H6klsXsU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:f9:88:9c:54:bd:ba:40:77:78:a1:32:76:2f:42:7d:0b:46:
         41:96:bc:11:92:f8:e7:a4:cb:98:13:bf:a1:82:00:fd:35:ff:
         e8:f3:7a:9b:34:1b:56:87:fd:b8:f8:e5:84:7a:6a:11:11:da:
         88:fb:2a:45:eb:af:8f:47:21:60:50:2b:92:2b:56:fb:9e:08:
         f5:33:a5:7d:e9:b3:ff:e5:5e:96:3f:a6:43:d6:76:e8:1c:6d:
         0d:d3:da:a9:0f:59:48:2c:5a:69:a2:83:d7:01:0f:d4:1d:c7:
         71:4b:49:e6:58:7b:fb:42:29:b8:48:f0:a0:85:8c:b3:26:fc:
         05:3f:01:86:ee:ce:9e:a4:a7:f1:a7:a5:8d:e0:d8:6f:e1:6d:
         e5:ca:ae:7b:55:df:67:0c:de:41:f1:da:7e:b7:36:92:27:67:
         1f:a3:74:98:79:df:c0:d1:1b:57:5d:5b:d1:20:84:29:2e:b6:
         29:1f:99:48:de:c4:a3:df:c1:c9:a9:af:5a:90:8b:c9:b8:f2:
         ae:39:62:bd:20:29:75:06:54:9c:09:9c:c9:d4:c1:f9:9a:b0:
         b2:33:77:19:f0:49:66:46:95:78:e6:2b:81:9d:fc:6b:40:3f:
         de:f0:0f:e7:ec:ba:d9:85:9f:50:55:d7:54:b9:90:71:6a:9d:
         08:03:6c:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:51 2026 by rpki-client