Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
File:                     _Vx4mxrWjgh0PYbOoMmfx4dr25M.mft (raw, json)
Hash identifier:          lHPOKqVaKntK8RAodNIBVGLj3VEHoTPax1PGRjqWKpk=
Subject key identifier:   ED:5D:A0:E2:33:02:34:7F:01:0D:C2:92:AD:3C:49:F9:16:42:EA:15
Authority key identifier: FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93
Certificate issuer:       /CN=A9190B27/serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93
Certificate serial:       071E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
Manifest number:          0717
Signing time:             Sat 18 Apr 2026 21:47:09 +0000
Manifest this update:     Sat 18 Apr 2026 21:47:09 +0000
Manifest next update:     Sat 25 Apr 2026 21:47:09 +0000
Files and hashes:         1: _Vx4mxrWjgh0PYbOoMmfx4dr25M.crl (hash: P1dIzPs0QOOp7yyerrW+AIgxABHGrl2QyaNWO33A4Po=)
                          2: C014EDF67CB911EBBB4E2D1CC4F9AE02.roa (hash: 5flu37eXqeBQxSx8vUOT8ntHTYiJyv0WpMum6Y5RMTA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl
                          rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:47:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1822 (0x71e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9190B27, serialNumber=FD5C789B1AD68E08743D86CEA0C99FC7876BDB93
        Validity
            Not Before: Apr 18 21:47:09 2026 GMT
            Not After : Apr 25 21:47:09 2026 GMT
        Subject: CN=69e3fbdd-11fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:92:4b:28:33:87:89:11:0a:c2:12:9b:f4:a7:
                    f1:33:0c:69:00:9e:0d:a3:3f:9d:ef:72:76:29:8b:
                    95:1d:94:5a:00:1a:94:b9:7c:b5:cc:38:d3:84:a8:
                    72:fc:0f:fb:25:c5:a2:a6:68:5e:8e:d0:08:01:36:
                    86:01:8a:c0:d9:06:06:d9:de:7a:8e:da:a1:42:4a:
                    08:13:98:cd:7f:a7:22:7d:04:37:2b:3b:c2:68:ab:
                    96:b4:c3:b2:d6:5e:08:09:62:f3:58:58:53:81:19:
                    9f:f1:37:92:57:35:66:74:a8:7f:4e:9a:82:75:6d:
                    a5:bb:6a:e5:13:a9:5f:04:4a:68:7d:98:1f:a6:81:
                    9f:f3:eb:b0:85:d8:82:b7:be:b6:69:93:48:b6:39:
                    92:f7:da:b9:8b:45:02:84:6b:35:c7:bd:80:e1:a3:
                    6d:b6:04:56:06:ba:d1:af:38:44:26:48:23:8b:ac:
                    6f:43:0a:2e:e1:ea:3b:b0:4d:81:be:36:33:be:55:
                    b2:0f:ca:f7:b9:07:43:d7:b7:83:ed:d7:e9:cc:f8:
                    b2:d5:0f:b0:33:cc:58:10:ac:54:3a:ab:4e:23:c8:
                    a0:8c:3e:fd:8a:3a:37:8b:3f:76:05:59:b0:a7:59:
                    1d:c6:b5:01:a4:c1:00:39:02:a3:78:4c:20:f0:e9:
                    1c:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:5D:A0:E2:33:02:34:7F:01:0D:C2:92:AD:3C:49:F9:16:42:EA:15
            X509v3 Authority Key Identifier:
                keyid:FD:5C:78:9B:1A:D6:8E:08:74:3D:86:CE:A0:C9:9F:C7:87:6B:DB:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vx4mxrWjgh0PYbOoMmfx4dr25M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9190B27/9E2429107CB811EBA20E011CC4F9AE02/_Vx4mxrWjgh0PYbOoMmfx4dr25M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:cd:85:4c:26:30:cc:bb:96:40:fc:3a:db:a7:b1:ae:99:d5:
         4f:d3:51:d3:e1:7a:63:95:ce:62:9f:ef:3c:66:c7:86:bb:18:
         7a:e7:f6:b5:70:ad:ba:93:38:cb:f9:78:b7:f0:3c:56:0a:cd:
         9f:e8:78:73:64:2f:bf:6c:01:21:69:e2:f2:b7:f2:88:00:38:
         5c:c8:85:dd:07:55:5d:93:92:04:c0:ee:ae:54:e7:29:ef:54:
         13:c5:23:9b:82:e1:1f:12:73:48:5d:ff:39:40:2a:cf:30:87:
         9d:33:44:a9:52:4c:9d:a7:dd:97:1e:4c:fa:a7:c0:0c:58:70:
         d6:2e:04:3c:fc:9f:6f:1d:f6:0e:2d:49:b0:16:25:1c:c7:0b:
         42:d9:29:c7:f4:7c:c5:11:b1:da:9f:40:66:63:2e:19:94:c8:
         ad:23:df:36:54:a6:c7:5a:a3:5b:f5:38:a9:a2:b4:25:6a:bb:
         82:80:8a:7d:b3:76:b5:8f:df:c4:9f:a4:a0:da:b8:f0:e2:22:
         c5:57:15:e6:65:cb:82:ef:76:bf:05:fe:82:04:7d:06:11:d5:
         a1:74:97:3b:61:0e:fa:03:c7:f2:8d:85:b6:2c:c2:a3:e6:0d:
         bb:8e:ac:a3:89:50:bc:39:93:5b:72:36:60:40:46:e7:7d:2c:
         59:5c:6e:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:58:45 2026 by rpki-client