Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File:                     d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier:          NxZ2nV7j+GgeRoW0Yj3c27WzTb4+tlW2rSSahu9wlrU=
Subject key identifier:   F9:2F:84:67:CC:11:BE:68:57:9E:DC:CF:AA:49:CB:1C:6D:75:37:4B
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer:       /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number:          51
Signing time:             Fri 17 Apr 2026 07:55:57 +0000
Manifest this update:     Fri 17 Apr 2026 07:55:57 +0000
Manifest next update:     Fri 24 Apr 2026 07:55:57 +0000
Files and hashes:         1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: KMTqC3C1DudZC5yUkGnC+ePFmfStulRMxyXRuSGKINM=)
                          2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
                          rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
        Validity
            Not Before: Apr 17 07:55:57 2026 GMT
            Not After : Apr 24 07:55:57 2026 GMT
        Subject: CN=69e1e78d-f4a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:36:7d:df:08:60:9f:f5:d9:e2:77:de:cb:92:
                    43:cd:a3:80:fe:eb:2e:a6:14:e6:d7:84:82:d7:4d:
                    5c:ee:c0:6c:56:f0:ed:18:0b:7d:db:53:ae:b5:fc:
                    b3:1d:3f:71:5c:22:7a:fa:a9:e4:ac:32:82:90:5d:
                    70:f6:75:3d:2f:53:a5:52:32:cf:1a:e6:16:ab:3f:
                    40:49:7e:b5:9f:f9:f0:58:bb:3c:f0:2e:31:4f:fe:
                    29:6c:a8:72:e0:13:7d:3d:c2:2f:dc:47:be:56:e6:
                    fd:e1:cd:fa:ce:f1:6f:dd:33:06:b0:1a:af:b9:a3:
                    17:90:bd:56:85:b1:41:48:82:28:1c:56:8c:0f:12:
                    96:e0:cd:d4:8c:b4:06:c2:d5:f8:f9:1c:9b:37:da:
                    4e:f8:28:fb:94:a9:58:44:98:3c:9c:1c:9e:57:4a:
                    55:46:7b:b7:3e:28:51:6b:a5:e5:6c:87:91:b9:ef:
                    62:69:b2:3b:a0:9d:3d:19:c1:7d:fe:70:99:62:f5:
                    62:25:32:fc:30:e3:d0:7a:af:36:60:db:c2:85:a0:
                    bf:e6:da:eb:8f:da:4b:ec:6a:2b:14:77:7e:60:0e:
                    f5:89:e0:0a:05:36:ca:04:6e:9d:61:3b:8b:07:1b:
                    a6:fb:48:4c:25:94:f5:ba:8a:d3:c3:81:3b:ad:44:
                    85:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:2F:84:67:CC:11:BE:68:57:9E:DC:CF:AA:49:CB:1C:6D:75:37:4B
            X509v3 Authority Key Identifier:
                keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         95:e1:7e:2a:7b:ee:6a:a9:dc:33:54:75:db:d0:d4:87:63:d8:
         62:ae:5a:4b:01:2e:6e:24:1e:e6:02:1a:d6:21:70:e0:4b:61:
         70:6b:eb:f8:75:0a:84:8c:c1:cd:73:10:8f:d9:17:97:d8:33:
         80:c2:6e:4a:8b:61:ab:96:0f:ac:0e:ec:c7:0d:9a:28:ce:91:
         29:87:ca:d4:92:e6:39:fa:ed:80:7e:ef:e1:bf:89:ef:13:90:
         70:99:3c:9c:d4:67:a2:3f:f7:1d:29:6b:25:4d:f8:6c:64:83:
         14:51:3d:ff:8d:a3:f6:e8:09:9d:14:cb:4f:d5:f8:9a:a6:b3:
         4c:ee:bf:ec:f7:0c:e9:14:6d:ad:44:38:60:a1:52:f6:89:8d:
         72:2c:87:f4:00:3a:eb:0e:9b:c2:8d:d9:41:7c:ee:04:03:52:
         35:f9:04:71:58:bd:db:13:2f:f6:76:9a:31:c5:66:44:01:48:
         d3:9e:a4:86:29:9d:92:c5:87:66:a1:c9:2c:41:56:78:d0:15:
         d2:ca:65:53:b1:34:ab:c8:b9:40:b5:41:09:13:11:0d:fe:3c:
         0d:19:db:ca:27:4f:e6:4a:6c:aa:9b:c8:80:29:8e:a5:26:c5:
         b3:bf:79:45:0e:68:6e:ff:cb:e9:09:e6:25:d2:b9:fc:26:d7:
         32:75:9c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:33:41 2026 by rpki-client