Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
File:                     9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json)
Hash identifier:          VjtCcEctn7eTswwr4AIWuCXtVOaUNJ4mPovw8Z46/Fc=
Subject key identifier:   4D:C4:8C:E0:92:81:0E:66:22:7D:F4:71:0B:28:EE:3F:3D:7E:DC:08
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Certificate issuer:       /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial:       5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
Manifest number:          5A
Signing time:             Fri 17 Apr 2026 07:47:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:47:44 +0000
Manifest next update:     Fri 24 Apr 2026 07:47:44 +0000
Files and hashes:         1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: t27y+tXKMEwhGXr1r2KIpyVEWcS+AJJERU4i0pHCoSk=)
                          2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
                          rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
        Validity
            Not Before: Apr 17 07:47:44 2026 GMT
            Not After : Apr 24 07:47:44 2026 GMT
        Subject: CN=69e1e5a0-e66a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:7d:e6:d0:d6:a0:c9:63:87:83:dc:18:e9:28:
                    ef:09:de:12:88:20:ef:52:d6:7c:41:24:1c:30:e8:
                    88:b0:b1:2d:25:20:29:3b:b8:0e:3b:82:f2:75:ba:
                    91:87:71:51:c5:a0:a6:39:1c:fb:c0:70:fd:dc:6f:
                    67:a9:43:41:41:00:e9:d9:48:41:8a:f1:21:da:16:
                    d8:53:2a:de:4d:8b:cf:10:41:95:54:25:9d:f8:85:
                    d8:a4:a6:12:11:8f:4c:b3:fc:c9:fe:41:c7:bf:6b:
                    78:58:33:6b:fc:0b:f4:c2:95:2a:66:d3:73:a9:92:
                    ba:ac:e8:25:b4:73:b6:6b:f2:7f:db:0c:88:5a:72:
                    e4:c7:f4:09:04:9f:d4:d2:07:9f:d4:75:c6:87:43:
                    d0:21:d0:a7:4c:b0:f0:ca:f1:0d:7a:15:ef:18:36:
                    d9:41:7f:0f:9f:7d:f3:16:72:d4:14:8a:9e:12:8b:
                    9b:38:08:c2:a9:68:c1:48:d4:cf:42:de:fb:7c:95:
                    b0:27:b4:10:4f:ce:50:14:f1:6f:15:36:ef:e7:63:
                    8a:dd:37:5f:ba:d1:f8:24:0b:d6:c2:7d:7f:ed:0e:
                    3f:2b:06:82:64:36:2c:08:d1:3e:14:1b:e7:12:d2:
                    22:8b:73:76:42:0c:36:bd:fa:cb:84:5c:b0:17:05:
                    3c:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:C4:8C:E0:92:81:0E:66:22:7D:F4:71:0B:28:EE:3F:3D:7E:DC:08
            X509v3 Authority Key Identifier:
                keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:ea:f9:6f:09:60:11:7e:24:e9:e5:32:b1:0a:23:35:97:95:
         18:71:7e:bd:6a:b8:26:8b:de:f4:09:f6:23:0b:3a:cc:01:f3:
         78:99:48:d9:6a:53:b0:5d:98:1a:78:b5:9d:0d:c1:b5:c1:ed:
         9d:95:57:7f:43:5f:47:90:a6:6d:30:4c:f4:bd:41:df:72:cf:
         af:ed:b0:ab:ea:ac:5e:8e:77:59:92:8f:b7:9f:06:60:dd:aa:
         da:f2:c6:37:f7:09:0f:a3:2d:59:4d:d9:95:de:66:55:b6:a7:
         81:04:ab:0d:0e:56:cd:b0:c5:1a:97:0a:59:c3:ed:07:f7:d2:
         93:76:fa:23:9f:50:b9:2c:d0:8c:aa:20:75:6f:eb:d8:46:59:
         04:0f:2c:65:dc:23:f6:a7:e4:cc:0b:ab:59:d9:39:c4:69:41:
         58:0a:59:f9:ee:85:dd:0b:4b:86:6b:66:49:11:c7:2a:c9:f9:
         7e:8d:f4:f3:e1:c8:d8:ef:97:18:e5:94:eb:51:c5:76:8d:9b:
         ef:73:0a:ee:c5:a0:c2:1a:54:a3:b9:2d:d1:c1:7b:2f:b0:80:
         11:c9:78:f9:0c:77:95:f3:7b:53:e8:b5:ee:ed:42:e6:0d:ef:
         25:cd:fd:b8:aa:9b:d8:f9:40:8b:d8:7c:76:51:b0:bd:26:32:
         f1:c6:58:be
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBXDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
ODIxODExMC8GA1UEBRMoRjdFRjNDODc0Mjk1QjgxRkExMEYxNDBGRUI1NUJDOUM1
Q0VERjlEOTAeFw0yNjA0MTcwNzQ3NDRaFw0yNjA0MjQwNzQ3NDRaMBgxFjAUBgNV
BAMTDTY5ZTFlNWEwLWU2NmEwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCjfebQ1qDJY4eD3BjpKO8J3hKIIO9S1nxBJBww6IiwsS0lICk7uA47gvJ1upGH
cVHFoKY5HPvAcP3cb2epQ0FBAOnZSEGK8SHaFthTKt5Ni88QQZVUJZ34hdikphIR
j0yz/Mn+Qce/a3hYM2v8C/TClSpm03Opkrqs6CW0c7Zr8n/bDIhacuTH9AkEn9TS
B5/UdcaHQ9Ah0KdMsPDK8Q16Fe8YNtlBfw+fffMWctQUip4Si5s4CMKpaMFI1M9C
3vt8lbAntBBPzlAU8W8VNu/nY4rdN1+60fgkC9bCfX/tDj8rBoJkNiwI0T4UG+cS
0iKLc3ZCDDa9+suEXLAXBTw3AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUTcSM4JKB
DmYiffRxCyjuPz1+3AgwHwYDVR0jBBgwFoAU9+88h0KVuB+hDxQP61W8nFzt+dkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4MjE4LzRFMjQwRjIyQjRB
NjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUItaER4UVA2MVc4bkZ6dC1k
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvOS04OGgwS1Z1Qi1oRHhRUDYxVzhuRnp0LWRrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQ4
MjE4LzRFMjQwRjIyQjRBNjExRjA4QUQzQjA3NUM0RjlBRTAyLzktODhoMEtWdUIt
aER4UVA2MVc4bkZ6dC1kay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAD6vlvCWARfiTp5TKxCiM1l5UYcX69argmi970CfYjCzrMAfN4mUjZalOwXZga
eLWdDcG1we2dlVd/Q19HkKZtMEz0vUHfcs+v7bCr6qxejndZko+3nwZg3ara8sY3
9wkPoy1ZTdmV3mZVtqeBBKsNDlbNsMUalwpZw+0H99KTdvojn1C5LNCMqiB1b+vY
RlkEDyxl3CP2p+TMC6tZ2TnEaUFYCln57oXdC0uGa2ZJEccqyfl+jfTz4cjY75cY
5ZTrUcV2jZvvcwruxaDCGlSjuS3RwXsvsIARyXj5DHeV83tT6LXu7ULmDe8lzf24
qpvY+UCL2Hx2UbC9JjLxxli+
-----END CERTIFICATE-----
Generated at Sat Apr 18 06:16:58 2026 by rpki-client