Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
File:                     uRm6CzrV4m_DHTlL4TK7yof8yFI.mft (raw, json)
Hash identifier:          PkqVeALVmflVq10BH/RtDzg8y4U1FzBX0tFG71djzDk=
Subject key identifier:   B2:36:94:A2:44:57:07:5B:E6:28:04:0F:67:31:95:6B:01:5A:42:66
Authority key identifier: B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52
Certificate issuer:       /CN=A919E4C6/serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
Certificate serial:       02FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
Manifest number:          02F7
Signing time:             Fri 17 Apr 2026 01:11:25 +0000
Manifest this update:     Fri 17 Apr 2026 01:11:25 +0000
Manifest next update:     Fri 24 Apr 2026 01:11:25 +0000
Files and hashes:         1: uRm6CzrV4m_DHTlL4TK7yof8yFI.crl (hash: LXM8ElYvQcfphCPLIsK6TxDU0WVPZgbuXahFPVDFNfI=)
                          2: 4C0F405E1E1C11EDA19CF560C4F9AE02.roa (hash: z6B80o610gzveHmOz46h0MViWPRDNqbgDfSiN3K9epw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl
                          rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:11:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 767 (0x2ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E4C6, serialNumber=B919BA0B3AD5E26FC31D394BE132BBCA87FCC852
        Validity
            Not Before: Apr 17 01:11:25 2026 GMT
            Not After : Apr 24 01:11:25 2026 GMT
        Subject: CN=69e188bd-43fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:b7:87:d4:79:8b:3c:3a:ba:18:e4:da:91:98:
                    8b:81:c4:e2:08:16:03:5f:1f:d9:67:30:74:e1:b8:
                    e9:5c:af:d2:26:ba:ae:3d:fd:93:de:06:2f:50:71:
                    ff:56:a7:a9:1e:58:ad:12:cb:bb:ca:a0:21:83:4a:
                    b1:28:a9:39:99:b9:c2:78:3f:83:a9:9c:ef:7f:db:
                    f9:86:b8:4d:9d:d4:f7:a3:08:af:d0:1d:f2:59:44:
                    c2:4c:4a:eb:a0:c0:17:e4:17:a1:4d:ab:f7:2a:7d:
                    42:e2:29:29:70:c2:36:48:61:21:a4:b4:a8:82:23:
                    5a:50:cd:a1:66:fb:1c:21:9f:5c:82:d6:8e:ff:d8:
                    9a:54:b0:ba:ab:23:19:0b:ea:4d:4a:e8:ce:bc:ab:
                    a8:b4:6a:04:ff:8e:a3:52:ca:c2:47:99:3b:09:b6:
                    da:f9:83:b0:46:a8:2d:bc:92:02:69:27:d1:9c:dd:
                    92:0a:99:e4:d6:24:c5:1e:be:c0:85:98:59:3f:c7:
                    0e:7b:95:c0:b7:8d:7f:c9:bc:19:76:20:08:98:66:
                    42:03:21:ef:1f:56:b7:15:f6:41:ca:3f:32:09:18:
                    81:ad:f1:b4:35:20:d7:16:b3:53:dc:6d:fb:8f:82:
                    e5:3f:d9:ba:05:38:08:a1:7e:7a:be:32:ab:c8:2f:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:36:94:A2:44:57:07:5B:E6:28:04:0F:67:31:95:6B:01:5A:42:66
            X509v3 Authority Key Identifier:
                keyid:B9:19:BA:0B:3A:D5:E2:6F:C3:1D:39:4B:E1:32:BB:CA:87:FC:C8:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uRm6CzrV4m_DHTlL4TK7yof8yFI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E4C6/EAB947A81E1811ED9479365DC4F9AE02/uRm6CzrV4m_DHTlL4TK7yof8yFI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:65:96:5c:51:00:04:df:d0:05:56:e6:b6:f4:94:62:29:69:
         09:53:f6:67:28:96:fb:d1:d9:2b:2f:1b:1d:ca:cd:d7:3a:5f:
         01:a0:1e:d0:70:98:cd:58:67:a7:17:50:e6:20:e7:bb:ca:58:
         79:55:5d:df:8a:9f:34:df:d1:0f:4e:2f:9e:ca:d3:e8:73:35:
         a9:43:16:46:a8:70:dd:b7:27:b7:fb:b0:a5:33:d4:bc:73:21:
         28:a4:35:6a:a4:d1:65:d7:19:56:56:80:81:43:85:1e:46:34:
         e2:b3:10:08:73:77:43:6b:91:6a:f0:13:ea:e9:76:25:e4:b1:
         d6:0d:5f:0c:93:da:91:c6:67:97:2f:ff:d7:4a:9d:30:2b:0f:
         c9:ab:76:5f:91:eb:e5:d4:81:77:83:64:11:df:32:5d:b1:a7:
         b4:8e:76:b9:4d:51:20:bb:f9:47:55:81:5d:75:38:96:20:fe:
         1a:28:35:99:e2:6e:b5:bf:f6:4c:05:f9:98:2a:66:97:d1:11:
         8a:59:05:2c:8a:56:c7:9b:9d:fb:9a:47:3d:ef:22:e7:fe:ea:
         8f:f4:b8:43:80:e1:33:2a:c7:c2:c6:5b:8c:f3:56:5c:d7:c7:
         c9:4e:9c:a2:94:46:30:73:d4:9d:8e:8b:5b:17:51:61:ba:b0:
         22:40:38:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:29:27 2026 by rpki-client