Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
File:                     S630I4efFU256siNFgtOEW9mzak.mft (raw, json)
Hash identifier:          FhL0NeRatTYqq5fJqdCIAtrvipKk2Cz8Z8m/XaBivfw=
Subject key identifier:   E2:31:F6:F9:1F:65:8A:41:1F:0E:7C:FA:10:3D:A2:5D:D2:67:BD:85
Authority key identifier: 4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9
Certificate issuer:       /CN=A91B30E5/serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
Manifest number:          026F
Signing time:             Sun 19 Apr 2026 01:49:07 +0000
Manifest this update:     Sun 19 Apr 2026 01:49:06 +0000
Manifest next update:     Sun 26 Apr 2026 01:49:06 +0000
Files and hashes:         1: S630I4efFU256siNFgtOEW9mzak.crl (hash: idjVhT4JUVxytsMHWorv2rBj8gZ++DVszl+qPyGskkY=)
                          2: 0F1061D0868911EDA888A96CC4F9AE02.roa (hash: slVc2MAuomJ1lVCpaSZf3MYFxy+QIrbxktNgNNmSdu4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl
                          rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 01:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B30E5, serialNumber=4BADF423879F154DB9EAC88D160B4E116F66CDA9
        Validity
            Not Before: Apr 19 01:49:06 2026 GMT
            Not After : Apr 26 01:49:06 2026 GMT
        Subject: CN=69e43493-40e8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:22:2f:1f:3e:ab:24:62:87:ce:bf:d9:92:
                    5a:79:9c:07:fe:c9:41:e7:af:a1:88:69:f1:63:02:
                    af:a1:f9:eb:a7:c2:f4:06:9b:dd:56:5a:a1:84:2a:
                    5b:1b:a2:f3:19:3c:b4:85:4f:31:8b:80:79:6e:a2:
                    13:96:07:49:ee:91:9b:a6:01:3c:ec:4d:af:4c:6a:
                    8b:fb:53:3f:8f:c9:61:c9:0d:f0:a7:80:99:80:6e:
                    1a:d0:8d:14:f5:2d:14:79:e6:38:e3:8a:39:91:13:
                    2a:12:f4:99:70:4e:67:8f:c8:1a:c0:b4:0b:ad:0a:
                    f0:b3:81:11:31:91:bb:b1:49:4e:20:05:be:79:56:
                    1a:de:6f:f7:47:0c:a5:57:42:98:fd:c4:cd:b9:5d:
                    20:a4:1e:b8:ba:27:84:dc:5d:19:23:18:22:73:0e:
                    90:74:62:c4:fb:18:c2:97:cf:ef:3e:3c:60:6f:11:
                    ee:31:ea:27:4a:c3:e0:d4:5a:81:0d:8e:f3:42:61:
                    56:7a:a4:c4:97:1e:15:7a:8b:57:ce:28:a5:b7:81:
                    94:91:1e:8a:75:ea:c3:96:4d:79:c1:2b:e6:87:9c:
                    5a:cc:ae:7a:64:5b:0e:cf:0d:7c:3f:7e:94:0a:6d:
                    81:64:b7:15:84:58:bc:d0:15:21:c1:1f:86:5e:ea:
                    bd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:31:F6:F9:1F:65:8A:41:1F:0E:7C:FA:10:3D:A2:5D:D2:67:BD:85
            X509v3 Authority Key Identifier:
                keyid:4B:AD:F4:23:87:9F:15:4D:B9:EA:C8:8D:16:0B:4E:11:6F:66:CD:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S630I4efFU256siNFgtOEW9mzak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B30E5/7293C116868411EDB7BFA171C4F9AE02/S630I4efFU256siNFgtOEW9mzak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:70:41:d1:cd:28:d4:b7:8a:69:79:49:60:ff:81:fe:cf:55:
         05:11:01:6d:00:61:98:fa:e6:50:09:3f:a6:f6:1f:a1:65:63:
         a8:cc:35:e7:41:19:0b:aa:95:0a:23:3d:ce:a5:4b:b5:c2:57:
         26:4e:15:70:09:42:50:9e:aa:f4:d1:78:e7:24:13:41:50:d9:
         d6:9a:93:78:da:af:9b:72:a0:d5:ce:74:85:64:b7:02:50:a3:
         34:42:be:1c:2d:63:f0:cd:a4:60:28:38:cb:61:96:1a:f4:c0:
         b5:bb:90:35:65:7e:05:59:53:93:20:9a:5d:27:09:cd:ea:54:
         30:a3:a0:ba:b4:fb:7f:3e:89:2f:9b:e4:28:b8:26:dc:8a:53:
         33:9d:6d:33:13:a0:7c:7c:5b:fc:1a:66:c5:b9:1c:6c:9f:65:
         17:2e:0f:1f:61:85:91:6a:07:8c:7a:85:e7:9a:ec:fc:14:5f:
         ae:61:be:35:ee:27:58:b6:63:3d:86:0e:1b:c6:2b:7a:21:24:
         f8:85:cc:26:8a:70:d9:f4:f3:32:57:de:6d:fe:4d:83:0e:50:
         99:ec:0f:42:7c:c0:c1:8e:95:25:44:31:db:4d:35:78:2f:47:
         12:e1:d9:76:d6:4b:c5:36:88:05:e1:22:e3:74:be:15:0c:eb:
         ff:58:c4:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAnUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjMwRTUxMTAvBgNVBAUTKDRCQURGNDIzODc5RjE1NERCOUVBQzg4RDE2MEI0RTEx
NkY2NkNEQTkwHhcNMjYwNDE5MDE0OTA2WhcNMjYwNDI2MDE0OTA2WjAYMRYwFAYD
VQQDEw02OWU0MzQ5My00MGU4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwfEiLx8+qyRih86/2ZJaeZwH/slB56+hiGnxYwKvofnrp8L0BpvdVlqhhCpb
G6LzGTy0hU8xi4B5bqITlgdJ7pGbpgE87E2vTGqL+1M/j8lhyQ3wp4CZgG4a0I0U
9S0UeeY444o5kRMqEvSZcE5nj8gawLQLrQrws4ERMZG7sUlOIAW+eVYa3m/3Rwyl
V0KY/cTNuV0gpB64uieE3F0ZIxgicw6QdGLE+xjCl8/vPjxgbxHuMeonSsPg1FqB
DY7zQmFWeqTElx4VeotXziilt4GUkR6KderDlk15wSvmh5xazK56ZFsOzw18P36U
Cm2BZLcVhFi80BUhwR+GXuq9/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOIx9vkf
ZYpBHw58+hA9ol3SZ72FMB8GA1UdIwQYMBaAFEut9COHnxVNuerIjRYLThFvZs2p
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMzBFNS83MjkzQzExNjg2
ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZVMjU2c2lORmd0T0VXOW16
YWsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1M2MzBJNGVmRlUyNTZzaU5GZ3RPRVc5bXphay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MzBFNS83MjkzQzExNjg2ODQxMUVEQjdCRkExNzFDNEY5QUUwMi9TNjMwSTRlZkZV
MjU2c2lORmd0T0VXOW16YWsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANHBB0c0o1LeKaXlJYP+B/s9VBREBbQBhmPrmUAk/pvYfoWVjqMw150EZC6qV
CiM9zqVLtcJXJk4VcAlCUJ6q9NF45yQTQVDZ1pqTeNqvm3Kg1c50hWS3AlCjNEK+
HC1j8M2kYCg4y2GWGvTAtbuQNWV+BVlTkyCaXScJzepUMKOgurT7fz6JL5vkKLgm
3IpTM51tMxOgfHxb/BpmxbkcbJ9lFy4PH2GFkWoHjHqF55rs/BRfrmG+Ne4nWLZj
PYYOG8YreiEk+IXMJopw2fTzMlfebf5Ngw5QmewPQnzAwY6VJUQx2001eC9HEuHZ
dtZLxTaIBeEi43S+FQzr/1jE/g==
-----END CERTIFICATE-----
Generated at Sun Apr 19 10:23:03 2026 by rpki-client