Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
File:                     crVJ4D_3UKU5edANyx2mRLtSrKw.mft (raw, json)
Hash identifier:          q84ak472IfK4y2534zPS4vkk9iOWn2tqp/h2iD5/Q1c=
Subject key identifier:   89:FA:D1:F6:07:FC:A5:BD:6E:C6:9A:35:5D:31:76:88:3D:B7:1C:BC
Authority key identifier: 72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC
Certificate issuer:       /CN=A91BFDE1/serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
Certificate serial:       1F
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
Manifest number:          1B
Signing time:             Fri 17 Apr 2026 08:40:15 +0000
Manifest this update:     Fri 17 Apr 2026 08:40:14 +0000
Manifest next update:     Fri 24 Apr 2026 08:40:14 +0000
Files and hashes:         1: crVJ4D_3UKU5edANyx2mRLtSrKw.crl (hash: E/diJRgesq3KcAdzBytw3Dc5DXtgZPzIygfKzLQwSrA=)
                          2: 00B077D6187D11F19A5CAFE7383D8C67.roa (hash: mW9wCzHROG2faL3zV7IIUqQz5qp+XENd/4NuYNOgCwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl
                          rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:40:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFDE1, serialNumber=72B549E03FF750A53979D00DCB1DA644BB52ACAC
        Validity
            Not Before: Apr 17 08:40:14 2026 GMT
            Not After : Apr 24 08:40:14 2026 GMT
        Subject: CN=69e1f1ee-2414
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6e:d9:1e:e1:1e:8a:7c:70:b0:b3:f2:43:07:
                    9b:85:ca:03:ac:4e:da:a7:b2:9b:48:8e:60:a2:11:
                    36:6e:8b:d0:6e:65:c7:f4:3f:58:17:14:85:09:f9:
                    be:eb:65:e7:86:c7:b6:13:ea:c1:0b:e8:1a:43:ea:
                    d6:b5:5c:42:7c:20:20:6e:20:68:7d:86:48:7e:86:
                    51:3b:2b:92:7c:51:b7:d5:3d:8d:20:2b:93:b5:4c:
                    c8:e6:f2:48:8c:e6:7b:ea:39:40:d9:bc:d8:26:25:
                    58:0b:1e:f3:72:70:d3:ab:9d:55:c3:80:40:ef:9a:
                    75:ef:6b:cd:40:eb:53:90:e2:c3:57:f4:4b:3d:2e:
                    d6:a7:a9:7a:38:62:f4:99:17:d2:82:e5:5e:76:35:
                    04:c6:5d:3d:17:d2:0d:a2:01:15:10:39:c3:9c:86:
                    b0:85:a7:5e:6c:f5:25:26:fc:06:59:ae:78:e6:9e:
                    97:ad:11:78:7c:f7:a8:bc:3a:e2:d0:d3:0d:17:8f:
                    ca:dc:ca:34:59:5a:c1:bd:f0:55:f7:ee:e7:3a:87:
                    29:04:e5:83:21:ae:6d:1c:e9:54:96:47:3a:2c:dd:
                    b5:ee:58:65:b6:36:80:ae:1a:84:d9:a7:6b:65:9e:
                    ab:e0:76:1d:c4:12:8a:6d:30:03:bb:b0:ac:fb:c9:
                    80:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:FA:D1:F6:07:FC:A5:BD:6E:C6:9A:35:5D:31:76:88:3D:B7:1C:BC
            X509v3 Authority Key Identifier:
                keyid:72:B5:49:E0:3F:F7:50:A5:39:79:D0:0D:CB:1D:A6:44:BB:52:AC:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/crVJ4D_3UKU5edANyx2mRLtSrKw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFDE1/283100CA185311F18E970ADC293D8C67/crVJ4D_3UKU5edANyx2mRLtSrKw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:5a:88:2e:b1:be:4b:d7:b2:53:f3:53:0d:f6:c8:2a:de:54:
         0e:e0:f9:be:d0:0d:b5:9e:5d:6f:c6:06:b2:aa:2d:f9:9c:22:
         22:1c:53:08:a2:cb:99:9d:d0:ea:85:b3:00:ac:28:6f:d0:96:
         bc:51:4f:cc:0a:47:a6:bd:d3:e0:72:f0:f2:c6:74:fa:53:d6:
         bf:8f:15:f0:21:34:8c:af:d8:eb:6a:9d:a9:4f:3f:2e:5d:8a:
         a0:a6:5a:7a:c1:a1:16:99:4b:52:d5:b6:21:cd:d4:2f:25:6b:
         65:26:99:6f:ef:4e:ab:8e:a0:53:3b:50:55:e9:f4:16:4f:bc:
         8a:68:c8:0b:11:f5:d4:a4:a0:93:d5:dc:8d:a3:f4:7c:91:12:
         ad:ef:7c:24:fb:13:f6:b0:c2:f4:39:61:e6:e1:39:7a:c9:ec:
         d8:d3:35:3d:78:16:23:51:bd:76:85:1c:1e:fa:f1:14:69:e9:
         80:e5:49:a1:89:f3:2a:dc:5b:c7:8e:a1:db:ab:c0:cd:5b:06:
         45:b9:b4:fa:3b:5b:3d:e0:aa:ee:4e:bd:a7:b1:88:8e:02:4c:
         42:69:9b:87:17:bf:23:39:be:e5:57:55:73:9c:10:e3:7f:bb:
         db:0d:d0:89:f6:b5:6e:70:eb:79:61:c0:bd:78:0f:17:f4:73:
         fd:dc:8c:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:21:31 2026 by rpki-client