Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
File:                     F4AJbMkKtq6vCNeasYxUx7d6U6A.mft (raw, json)
Hash identifier:          olYdZWO8MT96F/U2cstngIoCKXmuq4HF0wzkSvibnLo=
Subject key identifier:   27:76:D9:A9:0A:23:E9:F7:08:47:FD:84:03:3F:02:29:33:11:EA:7A
Authority key identifier: 17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0
Certificate issuer:       /CN=A91A4543/serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
Certificate serial:       AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
Manifest number:          AC
Signing time:             Thu 16 Apr 2026 20:23:03 +0000
Manifest this update:     Thu 16 Apr 2026 20:23:02 +0000
Manifest next update:     Thu 23 Apr 2026 20:23:02 +0000
Files and hashes:         1: F4AJbMkKtq6vCNeasYxUx7d6U6A.crl (hash: YydnE4I+R3yOJhWwoGO/vdRO5LumlHgf77i3LMvH/Fk=)
                          2: 458F65E8572511F0BE0E492AC4F9AE02.roa (hash: Rx4vAlWyTLV0daFrUy6DuCo/+UjTzyGK5tVT0zVpxsA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl
                          rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:23:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 174 (0xae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A4543, serialNumber=1780096CC90AB6AEAF08D79AB18C54C7B77A53A0
        Validity
            Not Before: Apr 16 20:23:02 2026 GMT
            Not After : Apr 23 20:23:02 2026 GMT
        Subject: CN=69e14527-ecf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e1:a2:2e:14:8f:85:a6:5d:4e:c5:01:1b:92:
                    59:a0:e3:85:ab:4a:47:87:10:28:cc:02:33:bb:c8:
                    89:c4:4c:d5:1f:0c:b3:e6:e3:6c:2a:23:f1:74:f6:
                    36:0a:d7:0f:b4:b2:c8:8a:7d:9e:dc:62:cd:18:2b:
                    8b:8a:b2:8f:74:a4:6a:44:73:f0:68:c7:fd:f9:71:
                    84:90:af:df:df:40:8a:17:df:3f:35:63:a7:c5:f3:
                    81:4c:9d:b6:06:d3:b6:56:98:39:13:60:f1:68:fa:
                    89:ab:c3:43:63:8c:51:47:0f:65:d8:fd:df:99:ca:
                    fe:b1:c6:2b:0e:a4:ee:8d:b7:ee:75:14:a0:80:59:
                    28:d7:c2:97:3c:53:3a:25:40:e6:7f:cf:c2:f2:8d:
                    31:16:e8:7c:86:b2:7d:6f:85:10:16:c9:67:e4:04:
                    3a:62:85:a0:9f:b7:1f:38:13:74:a5:e2:df:39:14:
                    ab:67:b8:b1:6f:7a:a8:95:a0:0c:ef:51:29:b2:4a:
                    30:5f:7a:2e:63:db:ed:e0:f1:db:0e:82:ac:a8:59:
                    99:d7:63:05:c9:d5:33:94:b1:2d:ab:80:85:ed:15:
                    38:b5:f7:d6:69:bf:27:6d:68:4b:ae:f2:1e:0e:f6:
                    a3:bd:53:57:65:76:83:ba:0e:3d:3b:1e:51:98:8e:
                    86:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:76:D9:A9:0A:23:E9:F7:08:47:FD:84:03:3F:02:29:33:11:EA:7A
            X509v3 Authority Key Identifier:
                keyid:17:80:09:6C:C9:0A:B6:AE:AF:08:D7:9A:B1:8C:54:C7:B7:7A:53:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/F4AJbMkKtq6vCNeasYxUx7d6U6A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A4543/AB719FCE3B6511F08742DA39C4F9AE02/F4AJbMkKtq6vCNeasYxUx7d6U6A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:f9:06:8d:64:b3:60:aa:a6:64:3a:a0:00:1c:14:c8:ae:87:
         5c:16:14:69:24:f4:9b:c7:7c:4e:a5:3b:d0:1d:49:21:cf:0d:
         cf:88:25:b9:92:a4:cd:73:22:3a:51:40:89:ca:3d:20:95:b8:
         5e:0a:11:6a:65:39:da:e2:7c:7d:b5:28:2e:de:de:75:a4:72:
         6f:eb:f8:8c:fb:f3:33:f0:3d:3c:79:f7:05:c2:dd:99:bd:8a:
         2b:04:af:8f:f7:fe:45:7d:f5:d7:b6:84:3f:1c:13:26:df:7f:
         c7:6d:bb:fa:a1:c2:a7:df:2d:16:8d:ce:e7:7b:6d:c9:f5:70:
         ca:cc:3b:50:82:18:8a:bf:4b:87:3b:9a:85:25:9c:fe:44:fd:
         a5:c4:6d:a8:ff:43:76:99:7e:bc:6f:11:d4:14:68:0a:7b:ac:
         e9:13:3f:9a:1b:0f:5f:1c:2c:c4:7d:b7:db:dd:47:c3:c4:1a:
         bd:59:12:15:a9:72:bb:9f:b9:c0:c0:34:a5:91:f5:fc:ee:95:
         97:6f:5e:79:a5:86:80:f2:e0:52:b6:05:2e:74:7c:46:51:ff:
         17:7f:21:76:45:bd:93:58:12:46:ff:89:06:b4:be:41:78:1b:
         01:a0:2e:c3:36:0e:d3:67:9e:7a:fa:71:bf:26:44:c5:d8:85:
         60:94:f5:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:50:21 2026 by rpki-client