Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
File:                     ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft (raw, json)
Hash identifier:          NHyTQJOTbekKBdn11g/PIcDMCkvKJxQYVEiqQ5stb0U=
Subject key identifier:   D2:55:1E:7F:7B:74:A8:F1:3F:59:D4:F7:5B:87:46:86:63:12:8E:41
Authority key identifier: 07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27
Certificate issuer:       /CN=A91CEE85/serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
Manifest number:          014C
Signing time:             Wed 15 Apr 2026 04:49:07 +0000
Manifest this update:     Wed 15 Apr 2026 04:49:06 +0000
Manifest next update:     Wed 22 Apr 2026 04:49:06 +0000
Files and hashes:         1: ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl (hash: 9RuL8y0ChUMsXmpcljJQrm6BV6XKvbpQN370JXfyK5s=)
                          2: C2838C8245B011EFAE60CC76C4F9AE02.roa (hash: RzM5XYHpAe7uWEPFy0Uicf76LJbJuN++zhp1wy8rKjI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl
                          rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 04:49:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEE85, serialNumber=07244A994CDC4B938074711C4248D49F9D50D827
        Validity
            Not Before: Apr 15 04:49:06 2026 GMT
            Not After : Apr 22 04:49:06 2026 GMT
        Subject: CN=69df18c3-9a3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:7c:d6:a9:d8:fa:c9:6b:c5:01:7a:dc:67:cb:
                    c5:9a:5d:d5:8f:37:4c:d4:6e:86:a9:92:3d:1d:3d:
                    af:26:47:dc:f1:3f:2b:37:21:c9:81:89:3d:cb:73:
                    ff:ee:3e:e1:ec:6c:cd:4e:11:34:33:b6:9e:ee:9b:
                    c3:34:bc:61:0b:d8:43:fa:e5:7e:8e:88:31:2d:8e:
                    66:e6:f3:fd:19:3b:fe:e3:cb:31:5b:98:e9:a6:2d:
                    d6:e1:96:83:41:dd:8f:26:07:08:4f:e4:6d:a9:ee:
                    b0:a1:5a:8b:f8:13:1a:ea:86:e7:46:32:fc:e5:55:
                    59:cf:7d:49:9d:18:3e:01:5f:42:05:ac:56:cc:6e:
                    5f:cc:0b:ce:24:86:78:ea:49:d1:fa:fa:1c:8a:6a:
                    86:77:a7:ec:e1:47:7d:99:d7:1b:ed:d9:6b:6b:b6:
                    11:f1:58:bb:55:76:f1:4e:08:b0:e0:35:6d:84:21:
                    c9:62:cf:7e:dd:72:d6:01:8c:64:ab:57:84:00:33:
                    01:a8:75:57:8a:41:34:20:62:07:c7:f0:88:59:1a:
                    33:04:b0:fe:44:af:0f:5d:03:9a:f0:c7:b0:79:8c:
                    77:18:00:43:7d:cb:c6:a2:cc:c2:ef:47:a7:0d:fe:
                    29:e3:1d:fd:60:d1:30:22:9a:3d:10:55:74:06:ec:
                    ef:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:55:1E:7F:7B:74:A8:F1:3F:59:D4:F7:5B:87:46:86:63:12:8E:41
            X509v3 Authority Key Identifier:
                keyid:07:24:4A:99:4C:DC:4B:93:80:74:71:1C:42:48:D4:9F:9D:50:D8:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEE85/FC66F5AE45AD11EFB435EB6FC4F9AE02/ByRKmUzcS5OAdHEcQkjUn51Q2Cc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:83:55:a1:15:8b:d4:d4:3a:97:39:62:6c:c7:a5:b4:e4:5e:
         8f:68:aa:1a:d9:ae:06:95:bd:74:e3:64:8a:79:76:b0:4b:b4:
         26:27:14:1c:8d:83:f4:cb:3f:c4:07:bc:8c:58:98:21:3a:c0:
         24:81:9c:88:49:8a:c9:3a:e5:4b:cf:94:32:51:10:1f:a8:d1:
         d8:ab:7f:54:3a:55:ac:13:67:b2:3e:99:58:17:b0:30:d3:73:
         32:dd:12:14:69:bd:a7:03:ad:6e:40:da:14:90:17:ed:10:f2:
         36:6d:3c:5d:77:f9:ac:61:31:63:8f:2c:76:a4:f7:89:55:5a:
         d4:42:be:b9:ef:e7:d7:78:53:08:f8:e0:23:52:95:9c:a5:68:
         f1:f7:a5:8b:0a:b8:35:80:4b:49:99:49:77:6f:84:6b:ec:dd:
         b0:f6:b0:a2:12:80:e4:1c:3a:fc:46:93:ce:93:d3:28:70:94:
         27:b3:b9:a9:37:26:1e:d1:c7:7e:08:6f:43:8b:e7:34:6e:2e:
         72:ed:d9:2e:5c:e3:3d:cc:78:b1:42:79:06:56:be:bf:93:c4:
         c6:14:b6:13:de:06:b9:73:ce:86:d7:99:f5:a0:25:a1:27:59:
         57:e5:74:03:d8:c7:b1:2a:96:ca:a9:17:c8:10:8e:58:40:9e:
         67:f9:28:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:28:21 2026 by rpki-client