Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          Skt3pWyfsmiIP6FFjDukt+F0IGYPDT/0B2m3CjM2lLs=
Subject key identifier:   3F:AE:8B:10:09:C1:D3:8E:38:A8:5F:D7:39:D1:90:5E:45:60:E4:0A
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08E8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          085D
Signing time:             Thu 16 Apr 2026 20:54:18 +0000
Manifest this update:     Thu 16 Apr 2026 20:54:18 +0000
Manifest next update:     Thu 23 Apr 2026 20:54:18 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 2EIaBFW2rQ6YzvGaWIRCQumV/XwhzlyUzDkbYsdNfW0=)
                          2: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
                          3: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
                          4: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
                          5: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
                          6: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
                          7: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
                          8: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
                          9: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
                          10: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
                          11: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2280 (0x8e8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Apr 16 20:54:18 2026 GMT
            Not After : Apr 23 20:54:18 2026 GMT
        Subject: CN=69e14c7a-5e0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:95:25:b5:2b:4e:2d:9a:a7:94:e5:f0:b5:
                    b6:61:25:e9:5e:bf:81:09:c6:0f:70:25:65:d5:0e:
                    2e:67:51:7f:e9:d5:c1:08:fa:74:3e:21:80:e4:02:
                    95:18:02:db:70:ba:08:4f:35:77:66:fa:fe:a4:ba:
                    45:a5:5d:e3:74:28:88:83:62:00:cc:06:ee:bf:e6:
                    88:0a:2f:97:8b:ac:53:d9:80:3e:8b:61:29:38:cb:
                    30:d9:8e:fb:32:e5:58:16:9f:d9:ef:87:3c:29:68:
                    54:1e:9d:e3:80:bf:bf:fc:45:85:1d:77:4e:90:7f:
                    b5:fa:39:eb:72:48:82:bc:29:a4:90:eb:50:f4:80:
                    32:3d:90:75:2b:fe:d8:47:f1:78:83:b7:48:92:44:
                    c4:76:cc:f0:21:4f:43:29:f8:e4:72:1f:2c:70:6a:
                    85:55:2b:c1:c0:61:0b:7b:30:be:b2:2c:09:e0:93:
                    52:92:4c:4a:5e:07:01:88:5b:a6:d4:df:b7:23:85:
                    20:11:64:20:d1:a8:77:db:6d:d4:1d:b0:63:b9:84:
                    b3:78:86:1c:11:bc:32:78:44:e9:70:fe:8b:dd:80:
                    6e:cd:e2:e8:60:fc:f2:26:95:2f:3f:fb:b7:03:a2:
                    c9:93:0f:24:c0:f5:b1:00:9d:45:25:88:11:6e:8b:
                    23:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:AE:8B:10:09:C1:D3:8E:38:A8:5F:D7:39:D1:90:5E:45:60:E4:0A
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e0:d3:2f:fe:5e:b1:db:ed:82:91:25:a2:f4:c9:c5:97:c4:
         e5:81:42:e7:7b:d7:af:78:e2:a6:52:20:61:0e:bc:2b:71:8a:
         e4:b5:13:7c:66:3b:91:f7:77:d7:30:ec:a3:9e:46:c2:c3:9c:
         c5:70:a1:64:bf:fd:13:ed:7b:81:09:f2:33:36:80:34:07:3c:
         f5:df:0f:ab:15:96:84:cc:b3:2a:f6:c5:c7:8e:67:8b:12:73:
         50:25:b4:cb:f7:bd:00:94:de:a9:03:38:6a:fc:3c:86:c8:9f:
         4a:fc:b0:25:84:f2:8e:c3:83:12:dc:62:4a:aa:32:45:57:78:
         51:2f:a6:6b:7b:f1:49:ab:e7:34:f4:a3:fa:28:70:38:3e:11:
         f8:00:d1:3f:2c:ef:0c:4a:82:d9:91:46:7d:91:8f:ee:c0:9e:
         c7:cd:c5:12:86:16:49:0d:99:16:b4:14:55:9e:4c:93:d5:0a:
         55:9a:3d:7f:d3:45:08:f0:bb:d9:cb:d4:8b:e4:64:65:e4:a5:
         85:3d:76:12:7a:14:8f:bc:2d:03:b3:ea:16:69:5c:45:8d:b7:
         fc:2e:c3:8f:6b:bf:78:2f:6f:41:01:53:63:93:2e:03:1b:47:
         a9:ff:d0:b2:01:5a:7c:4b:78:a3:59:f1:01:6a:94:d9:91:26:
         0d:1b:82:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:53:18 2026 by rpki-client