Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File:                     Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier:          4Kcad8eUPQO+RJHWFsNLm1T9ZL6S3LBK293TfcaNREA=
Subject key identifier:   A6:96:D3:46:DC:2E:FC:D7:72:2D:30:84:37:38:F4:FD:73:0C:DB:44
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer:       /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial:       01E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number:          01E0
Signing time:             Fri 17 Apr 2026 03:14:03 +0000
Manifest this update:     Fri 17 Apr 2026 03:14:03 +0000
Manifest next update:     Fri 24 Apr 2026 03:14:03 +0000
Files and hashes:         1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: gbMLksaWP0wbRyXTGQnBa1KtxAkARris0gKMxLLkJVc=)
                          2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: XpOJLqrrUhEc7ebQkkMofYS8+Tg7b9rkq4W6zmxVycM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
                          rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:14:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 485 (0x1e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
        Validity
            Not Before: Apr 17 03:14:03 2026 GMT
            Not After : Apr 24 03:14:03 2026 GMT
        Subject: CN=69e1a57b-5120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:78:e8:01:7c:b7:40:de:30:54:26:a0:c2:d8:
                    73:5a:a4:b2:43:b8:3b:20:5f:cc:f2:69:f5:f9:86:
                    26:f1:d0:fb:44:09:fb:eb:cb:70:3b:24:bf:c2:81:
                    18:69:9f:bf:ce:44:f1:a5:25:c4:1a:bf:26:73:0f:
                    da:34:4c:c0:75:75:ef:6b:ef:f1:dd:56:52:87:9f:
                    bd:f5:e5:5e:b5:17:67:62:4d:41:47:9d:bc:ef:43:
                    95:df:2b:80:07:df:ee:55:83:d2:d3:50:d7:2b:dc:
                    36:a0:e2:50:51:36:66:66:85:c8:71:03:60:b1:0d:
                    89:46:27:6d:d6:6d:e7:a9:d6:32:08:12:18:33:fe:
                    39:2a:5f:71:d1:a0:bf:2a:98:44:1f:d2:93:1f:8b:
                    09:ba:fd:b5:1f:5a:2a:7a:80:b9:b0:e6:c4:19:a6:
                    55:0f:45:0a:f6:63:d0:01:3f:a9:ba:28:32:fa:56:
                    17:51:b5:54:ce:f9:d8:12:b0:cd:8d:f3:1c:03:04:
                    36:9d:10:4d:73:57:ea:60:72:e2:7c:e1:70:6e:20:
                    b4:21:69:53:ea:5a:9e:77:8b:9e:e3:3e:ee:8a:0b:
                    0b:0c:d8:c9:cd:b2:6d:8e:07:90:1a:80:2f:87:8a:
                    fb:7c:e3:b1:bc:b4:0a:65:7d:9c:fa:15:6a:f9:09:
                    f8:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:96:D3:46:DC:2E:FC:D7:72:2D:30:84:37:38:F4:FD:73:0C:DB:44
            X509v3 Authority Key Identifier:
                keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         44:c0:f6:a9:76:e7:ac:cf:89:3c:9f:41:3c:6d:33:f1:d7:60:
         68:2a:02:f1:ca:88:97:88:3c:a3:47:95:25:9f:88:bb:65:e6:
         5d:4b:e6:ec:1b:ac:31:67:6a:eb:22:9c:02:c0:f2:cc:ee:d6:
         f4:55:f9:26:09:81:02:e4:17:6a:14:ed:e6:86:01:05:c9:c8:
         49:6c:90:e2:2c:2f:bc:80:f6:68:04:49:2b:86:d9:2a:c1:a4:
         a9:82:e2:2b:4e:51:5f:e9:3f:6f:33:f2:f9:0e:bc:a1:bf:7d:
         3c:d2:4a:c5:f1:7a:da:ae:36:47:36:20:a7:9d:dc:f7:4c:09:
         27:be:68:bb:82:52:4f:60:1a:44:a4:53:42:82:f5:80:bf:21:
         26:2e:81:e8:6b:53:c9:4b:0c:3e:0a:e7:73:3a:69:06:72:ef:
         e0:27:94:ee:50:72:44:d3:d1:80:81:f9:6b:f2:e6:a6:3a:f8:
         3f:e0:be:c2:12:df:e2:b7:b7:81:cc:b6:c0:c2:ac:21:9f:5e:
         7d:d0:9a:ec:fd:8a:29:b1:ad:9a:8c:66:77:91:2d:ce:86:48:
         30:77:23:1f:e7:8d:73:94:8a:e4:c3:43:6d:68:6b:93:68:d2:
         8e:2a:03:c0:8e:17:12:7d:c0:3f:92:a5:b4:0e:ac:72:f5:ed:
         d6:88:ad:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:02:47 2026 by rpki-client