Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
File:                     0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft (raw, json)
Hash identifier:          rOgvA3W9mM0qlHppJCLHYekedPFqf4hpxCeFrcOM23c=
Subject key identifier:   7C:2C:BA:E3:A8:BD:99:7A:E8:70:AE:60:E7:BB:E2:71:9A:41:CC:02
Authority key identifier: D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB
Certificate issuer:       /CN=A918FE4B/serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
Certificate serial:       B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
Manifest number:          0318
Signing time:             Fri 17 Apr 2026 01:53:00 +0000
Manifest this update:     Fri 17 Apr 2026 01:52:59 +0000
Manifest next update:     Fri 24 Apr 2026 01:52:59 +0000
Files and hashes:         1: 0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl (hash: S7lZBU99fQFEIy/c0GEoLfPM/IhjtayY6AaG23D5mMo=)
                          2: F22AC4E253FA11F0ACEFB91BC4F9AE02.roa (hash: SMyrmxtQV4hV/cATS/CS4tud6wAe7MdwhtLWVFj4Hls=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl
                          rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 180 (0xb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FE4B, serialNumber=D0A4666AF35B4B654D8181C4CD1C911AEF9945BB
        Validity
            Not Before: Apr 17 01:52:59 2026 GMT
            Not After : Apr 24 01:52:59 2026 GMT
        Subject: CN=69e1927c-9425
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:a0:7f:3e:97:12:e9:32:8e:91:58:9b:c8:1f:
                    8d:9a:9b:39:89:3c:a9:6b:03:74:0e:ad:ab:db:aa:
                    e9:27:50:c6:fe:d6:9b:05:41:34:4d:e2:4b:ec:3c:
                    54:2b:c0:40:df:05:8c:05:62:3e:a7:49:1d:26:8f:
                    b8:22:74:3b:d7:51:84:65:f4:5c:ea:e1:b6:b9:6a:
                    30:3d:ac:dc:9a:0a:45:25:15:bb:a9:37:93:f2:77:
                    bd:8b:22:7f:dc:04:9b:2c:1c:90:fc:6a:9c:73:19:
                    b4:59:63:2a:cb:5c:6e:12:68:ec:f0:32:44:6f:f8:
                    55:50:26:ad:10:a4:13:e8:e6:91:80:35:ca:de:ee:
                    7b:19:78:8c:c0:67:ad:82:c2:7e:39:13:54:df:b4:
                    89:c5:f2:69:ae:04:4d:f5:5c:b1:8c:88:bf:10:5c:
                    2a:3d:71:bd:22:ee:57:28:b6:35:4f:f0:62:34:34:
                    e8:5a:14:9e:23:eb:3e:fa:df:16:ab:5d:fb:9e:b7:
                    a1:69:0d:b2:4d:e5:da:59:78:44:b3:6f:19:df:25:
                    ca:21:b6:5a:1a:60:61:b6:a4:80:9f:31:6a:35:b5:
                    d4:2a:ac:25:f4:37:87:c2:a7:1d:07:f5:14:d3:82:
                    be:2b:58:14:28:93:f3:4a:1f:25:0e:54:06:34:d0:
                    a3:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:2C:BA:E3:A8:BD:99:7A:E8:70:AE:60:E7:BB:E2:71:9A:41:CC:02
            X509v3 Authority Key Identifier:
                keyid:D0:A4:66:6A:F3:5B:4B:65:4D:81:81:C4:CD:1C:91:1A:EF:99:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0KRmavNbS2VNgYHEzRyRGu-ZRbs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FE4B/C14016B48D7F11EDB7DB854CC4F9AE02/0KRmavNbS2VNgYHEzRyRGu-ZRbs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:36:de:e5:92:5b:d8:14:1e:3e:32:8c:20:1a:e7:b5:a4:bb:
         d1:4c:8b:33:dc:b4:25:09:c9:75:fc:57:9c:08:04:a0:3f:ed:
         cc:4e:b5:01:77:58:5c:9d:cf:ef:26:fb:8e:37:16:e1:c6:6c:
         34:09:18:24:1d:1a:59:f8:72:0a:4b:f9:d6:e6:9f:67:64:9a:
         42:28:88:5a:ef:59:13:d0:5f:62:5b:d8:ed:2c:05:9b:25:be:
         19:ee:a5:f0:a8:a7:f1:bc:4a:5e:f2:06:a4:31:04:dc:8d:05:
         ad:86:d3:e9:32:94:23:65:bf:18:c2:74:64:5d:0b:28:e7:0d:
         a3:6b:aa:a9:1e:c4:1e:e0:39:d5:45:4a:8e:fc:40:6c:50:43:
         39:9b:ff:c6:92:9e:48:92:f8:19:29:fe:81:05:b2:12:85:93:
         4c:6b:e8:96:18:6e:ad:2e:b4:67:ef:51:4f:d8:00:65:e1:6f:
         00:b2:4f:c3:4b:f8:a6:30:e3:ed:b5:61:57:aa:03:b1:f9:97:
         5e:d8:12:84:db:50:c8:34:5d:62:c9:03:e8:35:de:62:b8:86:
         03:96:15:1a:41:cb:7e:86:59:2f:c2:c7:b5:b4:b3:37:78:bf:
         00:92:dd:17:47:42:bd:7b:9a:d9:a8:a5:a3:e5:7d:8a:ed:91:
         a3:45:b3:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:45:58 2026 by rpki-client