Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
File:                     rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft (raw, json)
Hash identifier:          L1dtASUE5oFMaZ/xBmcc0ZrSzO44OMPe8vrDGnjCmfs=
Subject key identifier:   B6:CF:27:25:D5:19:B4:5F:8B:F4:08:07:DA:BA:D5:F3:46:4F:DC:C3
Authority key identifier: AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F
Certificate issuer:       /CN=A918EBC3/serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
Certificate serial:       090F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
Manifest number:          0905
Signing time:             Thu 16 Apr 2026 20:13:14 +0000
Manifest this update:     Thu 16 Apr 2026 20:13:14 +0000
Manifest next update:     Thu 23 Apr 2026 20:13:14 +0000
Files and hashes:         1: rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl (hash: 51TuOS0TGS/kjRtQQpwfOoeNEDEVhc2a3NdaMyNm7Ig=)
                          2: 7CDBE740C7FD11EAB795396AC4F9AE02.roa (hash: h62+VMn+Dt63VlfLK40869a9uvaLhnaJW7JV3wldaEk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl
                          rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:13:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2319 (0x90f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918EBC3, serialNumber=AC56070DBE5EE6DBBF6711973847233127917A2F
        Validity
            Not Before: Apr 16 20:13:14 2026 GMT
            Not After : Apr 23 20:13:14 2026 GMT
        Subject: CN=69e142da-4576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:16:21:da:e8:a9:00:58:fc:16:b4:e4:4a:3a:
                    07:20:d4:d7:0b:21:1d:e1:15:84:ff:cc:da:8f:f8:
                    66:63:f4:ad:e9:d8:8b:12:3c:7b:97:ae:d5:fb:b2:
                    59:62:12:57:da:a7:42:94:0d:13:69:06:ec:13:c4:
                    bd:a7:e9:72:b7:a7:a3:25:7a:e4:f8:48:85:83:fd:
                    35:5d:a1:7b:3e:e9:c1:2e:45:90:92:d6:d0:78:14:
                    51:15:ef:78:a8:c8:36:bf:d6:05:3b:06:9f:1e:82:
                    4a:cd:54:54:00:2e:bc:8f:04:5c:a9:1b:29:56:9a:
                    b1:5f:11:a0:5c:70:24:83:96:f9:98:32:5b:cd:75:
                    a7:e2:c6:6f:c8:a6:55:2a:a2:70:40:69:57:3a:8f:
                    de:12:a5:c2:8b:d8:8a:0d:3a:d8:a9:53:0b:73:32:
                    0d:a9:3c:75:85:a2:44:b2:e9:7c:62:e0:35:ad:82:
                    48:d1:24:03:71:4f:3f:4c:c0:7d:86:7d:6c:7d:f2:
                    f7:b9:46:99:6b:4a:21:00:45:2d:c0:c3:c7:f2:a7:
                    b9:4f:ea:63:41:ff:0a:f0:14:44:c4:07:4f:a4:9c:
                    6b:61:a1:ec:16:f2:a8:d1:e0:a1:74:6f:2c:a7:57:
                    5e:75:a8:fe:4a:c3:52:c5:33:3c:0f:21:43:1e:01:
                    6a:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:CF:27:25:D5:19:B4:5F:8B:F4:08:07:DA:BA:D5:F3:46:4F:DC:C3
            X509v3 Authority Key Identifier:
                keyid:AC:56:07:0D:BE:5E:E6:DB:BF:67:11:97:38:47:23:31:27:91:7A:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rFYHDb5e5tu_ZxGXOEcjMSeRei8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EBC3/0D41FE5CC7FC11EA962B0069C4F9AE02/rFYHDb5e5tu_ZxGXOEcjMSeRei8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ab:3e:d3:0c:52:cd:0e:47:c7:92:71:4f:0a:60:01:cf:0c:
         eb:6d:b4:d3:c0:39:66:c0:be:b2:9d:50:3d:bc:dc:58:3d:a1:
         8b:be:ba:53:ce:96:41:95:79:90:78:28:20:e3:03:97:1e:11:
         87:02:a5:39:b9:a5:6e:ff:67:ba:89:e5:d1:80:c9:51:92:7b:
         4a:fb:e3:85:31:ba:1b:8b:5f:bb:8a:25:7c:f4:3d:9a:1a:20:
         16:b9:6f:51:0a:db:57:27:36:68:80:93:28:36:89:de:00:f2:
         ef:b8:92:81:a8:60:9a:e0:15:79:f2:6a:51:79:c8:c1:dd:f5:
         c9:4c:f9:f3:f7:93:b6:24:13:01:76:e8:b4:6a:02:19:f3:c0:
         47:20:5d:95:5c:c9:3d:3a:af:b6:f9:33:41:a5:67:94:52:a7:
         10:56:c1:5d:08:05:87:d6:0f:24:b3:1d:a6:a7:ed:1b:58:ce:
         48:1c:7e:58:68:3f:6c:ad:be:0e:23:dc:8d:6f:ee:ee:3d:42:
         5c:9e:38:8e:9d:0b:76:79:c1:90:c8:0a:52:42:4e:31:6b:d0:
         25:f6:d5:2f:e6:f6:e1:9b:2a:99:2d:b0:d1:bd:35:43:92:d4:
         f4:35:e3:6f:fb:32:4d:02:3f:e0:91:dc:01:b3:1e:72:df:73:
         b1:1e:7c:52
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCQ8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEVCQzMxMTAvBgNVBAUTKEFDNTYwNzBEQkU1RUU2REJCRjY3MTE5NzM4NDcyMzMx
Mjc5MTdBMkYwHhcNMjYwNDE2MjAxMzE0WhcNMjYwNDIzMjAxMzE0WjAYMRYwFAYD
VQQDEw02OWUxNDJkYS00NTc2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA7hYh2uipAFj8FrTkSjoHINTXCyEd4RWE/8zaj/hmY/St6diLEjx7l67V+7JZ
YhJX2qdClA0TaQbsE8S9p+lyt6ejJXrk+EiFg/01XaF7PunBLkWQktbQeBRRFe94
qMg2v9YFOwafHoJKzVRUAC68jwRcqRspVpqxXxGgXHAkg5b5mDJbzXWn4sZvyKZV
KqJwQGlXOo/eEqXCi9iKDTrYqVMLczINqTx1haJEsul8YuA1rYJI0SQDcU8/TMB9
hn1sffL3uUaZa0ohAEUtwMPH8qe5T+pjQf8K8BRExAdPpJxrYaHsFvKo0eChdG8s
p1dedaj+SsNSxTM8DyFDHgFqFQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFLbPJyXV
GbRfi/QIB9q61fNGT9zDMB8GA1UdIwQYMBaAFKxWBw2+Xubbv2cRlzhHIzEnkXov
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RUJDMy8wRDQxRkU1Q0M3
RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0dV9aeEdYT0Vjak1TZVJl
aTguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JGWUhEYjVlNXR1X1p4R1hPRWNqTVNlUmVpOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RUJDMy8wRDQxRkU1Q0M3RkMxMUVBOTYyQjAwNjlDNEY5QUUwMi9yRllIRGI1ZTV0
dV9aeEdYT0Vjak1TZVJlaTgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKas+0wxSzQ5Hx5JxTwpgAc8M622008A5ZsC+sp1QPbzcWD2hi766U86WQZV5
kHgoIOMDlx4RhwKlObmlbv9nuonl0YDJUZJ7SvvjhTG6G4tfu4olfPQ9mhogFrlv
UQrbVyc2aICTKDaJ3gDy77iSgahgmuAVefJqUXnIwd31yUz58/eTtiQTAXbotGoC
GfPARyBdlVzJPTqvtvkzQaVnlFKnEFbBXQgFh9YPJLMdpqftG1jOSBx+WGg/bK2+
DiPcjW/u7j1CXJ44jp0LdnnBkMgKUkJOMWvQJfbVL+b24ZsqmS2w0b01Q5LU9DXj
b/syTQI/4JHcAbMect9zsR58Ug==
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:36:19 2026 by rpki-client