Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
File:                     iEjsDto5b-IU7sAxfw9RuRjW_O4.mft (raw, json)
Hash identifier:          r67IIZjq/AwOqNevqcnmpDHDBk1OpFRNp9TVKJQUZU4=
Subject key identifier:   58:7B:81:3D:1A:82:8C:1E:67:E2:DC:CB:EA:D5:38:BC:2B:34:E0:8C
Authority key identifier: 88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE
Certificate issuer:       /CN=A9190A18/serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
Certificate serial:       14
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
Manifest number:          0C
Signing time:             Fri 17 Apr 2026 08:54:02 +0000
Manifest this update:     Fri 17 Apr 2026 08:54:02 +0000
Manifest next update:     Fri 24 Apr 2026 08:54:02 +0000
Files and hashes:         1: iEjsDto5b-IU7sAxfw9RuRjW_O4.crl (hash: 6TQEkILZD8A9d+Ds7gNyYUXyOrJZ7/doFAeTMCeKAPs=)
                          2: 30C6735E371C11F1AB220340C9833773.roa (hash: r1zttv5Tg4fvomOU2T9kTIcd0o8O/m74nqkwAFCr7V8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl
                          rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190A18, serialNumber=8848EC0EDA396FE214EEC0317F0F51B918D6FCEE
        Validity
            Not Before: Apr 17 08:54:02 2026 GMT
            Not After : Apr 24 08:54:02 2026 GMT
        Subject: CN=69e1f52a-571a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:66:1f:5b:02:db:b8:49:28:1e:35:d0:f8:71:
                    e9:d5:f1:fb:7a:ac:26:1e:8a:99:ea:3d:26:79:16:
                    2e:6a:15:c5:56:ea:11:28:5b:98:8a:b8:3b:33:f1:
                    85:6f:39:84:01:37:f7:bd:e2:f1:03:c8:c3:fb:e3:
                    7b:25:90:d9:b3:b1:00:89:a2:3f:e0:82:eb:e2:e4:
                    ce:a6:ae:b1:b8:82:42:7f:f9:9e:74:9c:95:0b:e2:
                    52:2c:d6:03:de:99:43:75:f8:f4:37:2f:27:00:89:
                    2b:63:ed:9d:6a:36:05:22:e8:6f:50:22:f8:1c:8e:
                    ea:68:a2:1f:22:8c:20:52:1e:c5:f5:8e:49:c3:60:
                    9c:78:9a:b9:a0:6d:e4:f9:49:ab:60:15:e0:16:b5:
                    51:aa:11:7d:c3:7d:d2:76:a7:9f:c3:af:0d:28:04:
                    f1:54:bb:36:eb:5d:ff:47:0a:eb:b2:16:8f:92:47:
                    50:f3:b0:1f:4b:41:59:f1:67:95:8a:07:68:fd:45:
                    4a:a2:6f:ce:0f:19:f7:f5:37:6b:b0:3e:bb:e3:0a:
                    6d:65:ee:09:d3:f2:e1:92:e3:16:0f:be:7d:0c:23:
                    db:32:95:cb:fd:8b:a0:74:2a:47:f1:0f:88:ce:f8:
                    46:47:17:e9:d2:a1:69:93:a4:76:ce:d2:c4:81:f4:
                    e5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:7B:81:3D:1A:82:8C:1E:67:E2:DC:CB:EA:D5:38:BC:2B:34:E0:8C
            X509v3 Authority Key Identifier:
                keyid:88:48:EC:0E:DA:39:6F:E2:14:EE:C0:31:7F:0F:51:B9:18:D6:FC:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iEjsDto5b-IU7sAxfw9RuRjW_O4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190A18/4FEC71CC36D911F18DD0FE27B1833773/iEjsDto5b-IU7sAxfw9RuRjW_O4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:8f:9a:4b:65:d3:8a:92:d1:95:58:52:06:22:2b:11:db:eb:
         4e:39:d5:d4:ab:cb:39:b4:13:17:91:c6:f6:fa:14:f0:87:85:
         e4:98:3c:5d:ac:df:d4:77:8a:e6:a1:d6:a4:5b:25:be:05:60:
         3d:0b:4b:bd:55:c7:b2:70:05:eb:4b:45:be:68:0b:ec:ac:bf:
         c4:14:c8:4d:b7:22:a8:ce:bd:b9:39:81:c4:67:79:e8:d2:17:
         ab:a0:a2:da:b6:b0:6d:19:09:40:b2:a6:93:31:0b:24:11:5c:
         25:3a:42:e5:d5:46:5c:79:49:57:76:52:bf:b1:35:c7:46:05:
         0a:d5:0a:ed:17:08:14:67:97:bb:6c:91:b3:e8:9f:3b:2b:74:
         3d:c5:70:3b:49:6c:92:74:10:aa:e1:ec:3a:82:3d:d1:57:1c:
         07:f8:f5:60:d2:6b:a3:d1:8e:b0:1c:3c:a5:51:15:05:3b:47:
         9f:a0:31:94:1d:ad:b2:79:06:ae:35:ec:98:9c:71:cc:0e:a3:
         18:7e:2a:d7:c2:ed:e3:3e:f0:be:12:17:2e:0d:1c:18:f6:08:
         36:e3:e6:69:9d:6f:7f:49:be:f6:02:50:63:1a:24:8d:d8:17:
         04:9a:e6:d1:2a:b4:57:ac:26:30:a4:9d:d2:a4:3c:56:2f:32:
         6f:18:b0:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:30:46 2026 by rpki-client