Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
File:                     JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft (raw, json)
Hash identifier:          D7qv6XvmOO5Ol2D08/g9Q+VxMCwF5gCr2eg5Qw677aQ=
Subject key identifier:   DA:FB:6D:A7:C1:F9:D8:BA:EF:7B:BB:E1:53:71:02:FF:38:A0:72:77
Authority key identifier: 25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C
Certificate issuer:       /CN=A919EAAD/serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
Certificate serial:       0CF7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
Manifest number:          0CE5
Signing time:             Thu 16 Apr 2026 18:16:58 +0000
Manifest this update:     Thu 16 Apr 2026 18:16:58 +0000
Manifest next update:     Thu 23 Apr 2026 18:16:58 +0000
Files and hashes:         1: JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl (hash: Hnnc9qL0nt8Yhgq3nUa1+/C+eBdKFr7urYS/xTHs/4U=)
                          2: 956DEFE80CDB11EAB14B9162C4F9AE02.roa (hash: 3M325K9PcHmy3y6ghRr+Gv64zJGXAL4b/FNW6UDE+Hg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl
                          rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:16:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3319 (0xcf7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EAAD, serialNumber=25099046EB59D645D419A428FC701A57353FBF2C
        Validity
            Not Before: Apr 16 18:16:58 2026 GMT
            Not After : Apr 23 18:16:58 2026 GMT
        Subject: CN=69e1279a-e0f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:30:d6:68:1b:b8:84:27:00:d4:50:a7:ae:9e:
                    96:f9:93:b5:c6:91:1a:61:7b:8c:15:cd:f9:d6:ee:
                    ad:e0:3c:c1:cf:07:e9:ba:74:b7:0c:24:70:4a:3e:
                    2b:93:2a:7d:94:90:e5:af:fc:de:5f:a2:b5:ed:3f:
                    fa:46:17:de:b1:2e:06:9c:1f:ce:45:00:98:28:f8:
                    a6:02:c2:c2:6a:f1:69:7a:08:6c:ee:34:ae:1c:4f:
                    a2:cf:2b:08:02:51:0a:7b:a5:c5:15:3d:24:81:df:
                    f5:e3:3e:30:88:71:bd:ec:ba:2e:b5:e4:79:44:ab:
                    4b:a3:d5:70:6d:d5:a0:73:7a:ba:85:ef:69:39:56:
                    3f:15:42:2e:6c:70:39:28:62:70:76:32:d0:d2:44:
                    d3:a9:de:d5:6f:50:1f:49:52:9f:7e:28:59:7e:54:
                    ee:39:4c:cd:95:e5:c9:bc:7c:da:90:48:f3:f9:f2:
                    21:ec:13:8d:52:84:c9:f9:77:dd:73:d6:2b:7e:bd:
                    a4:5b:6b:27:b8:71:01:2b:ca:bb:5c:bb:d5:e2:98:
                    ad:4b:79:2d:61:f5:98:df:31:a0:54:3c:9f:38:cd:
                    58:81:43:81:c5:00:b6:7f:ee:1c:e0:79:a1:f5:b6:
                    6c:5f:b3:e8:7e:8d:a1:0b:ba:d7:91:5e:05:15:51:
                    01:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FB:6D:A7:C1:F9:D8:BA:EF:7B:BB:E1:53:71:02:FF:38:A0:72:77
            X509v3 Authority Key Identifier:
                keyid:25:09:90:46:EB:59:D6:45:D4:19:A4:28:FC:70:1A:57:35:3F:BF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JQmQRutZ1kXUGaQo_HAaVzU_vyw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EAAD/77D950F209D511EAB76C7317C4F9AE02/JQmQRutZ1kXUGaQo_HAaVzU_vyw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:4b:d4:9c:04:0b:e5:9e:5a:13:61:da:a5:ba:89:5e:ff:67:
         55:f1:31:9f:cf:48:21:c8:e5:51:4b:ab:15:35:d3:a7:85:a0:
         ce:59:2b:8d:19:76:ee:f7:ff:f1:b0:cd:fb:ae:67:5e:11:cc:
         6a:ae:7e:9c:b8:20:00:79:f7:0a:ff:b2:42:8e:89:d7:0a:4b:
         77:7f:ad:d1:32:73:37:35:4a:8c:5c:58:0d:8a:f2:77:db:3c:
         1a:99:87:3e:89:e7:52:c9:6a:c0:e1:b5:c8:11:61:8e:77:45:
         54:46:4f:ea:91:7e:aa:1d:e1:58:3e:68:45:ce:21:d5:a0:fa:
         c7:b9:2c:ca:bf:a4:79:f5:5f:73:78:e7:db:e6:3e:f1:ce:1e:
         70:f1:d3:a4:01:3e:ec:89:40:79:7e:8d:22:5f:5e:c2:b6:50:
         f7:58:e0:3c:a0:dd:3a:1d:3f:19:1e:87:54:66:15:84:75:ee:
         e2:70:5f:4b:e8:e3:72:30:41:e3:08:2e:aa:bf:a3:e5:fd:05:
         01:9c:7a:27:a4:4d:ee:b8:c9:ae:cf:6f:12:ab:c1:55:be:d8:
         5c:89:e7:92:de:b6:5d:a1:91:94:7b:0f:13:91:5e:41:8b:d3:
         fd:46:80:11:de:3a:24:fa:c4:83:d9:60:06:e8:2f:1c:2c:0a:
         ab:77:ed:17
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDPcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVBQUQxMTAvBgNVBAUTKDI1MDk5MDQ2RUI1OUQ2NDVENDE5QTQyOEZDNzAxQTU3
MzUzRkJGMkMwHhcNMjYwNDE2MTgxNjU4WhcNMjYwNDIzMTgxNjU4WjAYMRYwFAYD
VQQDEw02OWUxMjc5YS1lMGY4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEArTDWaBu4hCcA1FCnrp6W+ZO1xpEaYXuMFc351u6t4DzBzwfpunS3DCRwSj4r
kyp9lJDlr/zeX6K17T/6RhfesS4GnB/ORQCYKPimAsLCavFpeghs7jSuHE+izysI
AlEKe6XFFT0kgd/14z4wiHG97LouteR5RKtLo9VwbdWgc3q6he9pOVY/FUIubHA5
KGJwdjLQ0kTTqd7Vb1AfSVKffihZflTuOUzNleXJvHzakEjz+fIh7BONUoTJ+Xfd
c9Yrfr2kW2snuHEBK8q7XLvV4pitS3ktYfWY3zGgVDyfOM1YgUOBxQC2f+4c4Hmh
9bZsX7Pofo2hC7rXkV4FFVEBZQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNr7bafB
+di673u74VNxAv84oHJ3MB8GA1UdIwQYMBaAFCUJkEbrWdZF1BmkKPxwGlc1P78s
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUFBRC83N0Q5NTBGMjA5
RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFrWFVHYVFvX0hBYVZ6VV92
eXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0pRbVFSdXRaMWtYVUdhUW9fSEFhVnpVX3Z5dy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUFBRC83N0Q5NTBGMjA5RDUxMUVBQjc2QzczMTdDNEY5QUUwMi9KUW1RUnV0WjFr
WFVHYVFvX0hBYVZ6VV92eXcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAmkvUnAQL5Z5aE2HapbqJXv9nVfExn89IIcjlUUurFTXTp4WgzlkrjRl27vf/
8bDN+65nXhHMaq5+nLggAHn3Cv+yQo6J1wpLd3+t0TJzNzVKjFxYDYryd9s8GpmH
PonnUslqwOG1yBFhjndFVEZP6pF+qh3hWD5oRc4h1aD6x7ksyr+kefVfc3jn2+Y+
8c4ecPHTpAE+7IlAeX6NIl9ewrZQ91jgPKDdOh0/GR6HVGYVhHXu4nBfS+jjcjBB
4wguqr+j5f0FAZx6J6RN7rjJrs9vEqvBVb7YXInnkt62XaGRlHsPE5FeQYvT/UaA
Ed46JPrEg9lgBugvHCwKq3ftFw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:11:50 2026 by rpki-client