Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
File:                     pOaGeeZ7phon9Pib0JKu5cH3ITk.mft (raw, json)
Hash identifier:          qusGMtlZ8y2UhnN0h+q9U/XJNtzNidv/FnYHn8TP1x4=
Subject key identifier:   4F:0F:D2:69:36:15:7C:53:11:9C:84:33:19:09:26:CF:6F:68:3A:35
Authority key identifier: A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39
Certificate issuer:       /CN=A91E1B48/serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
Manifest number:          0117
Signing time:             Fri 17 Apr 2026 05:34:35 +0000
Manifest this update:     Fri 17 Apr 2026 05:34:34 +0000
Manifest next update:     Fri 24 Apr 2026 05:34:34 +0000
Files and hashes:         1: pOaGeeZ7phon9Pib0JKu5cH3ITk.crl (hash: BsLbhSEmS76kW+RpSXc9K8xJxgkqzaRa9qbUVS0WhbQ=)
                          2: FB03B42C927411EF870E655AC4F9AE02.roa (hash: IoNbkBQReyDzJViXMom8CAS5Le63oVygKwA1bc/GSEM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl
                          rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:07:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1B48, serialNumber=A4E68679E67BA61A27F4F89BD092AEE5C1F72139
        Validity
            Not Before: Apr 17 05:34:34 2026 GMT
            Not After : Apr 24 05:34:34 2026 GMT
        Subject: CN=69e1c66b-3a61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:64:06:bc:ed:50:61:cf:27:15:36:42:e8:be:
                    07:09:d7:25:39:74:95:ad:90:b1:30:4b:71:84:e3:
                    44:dc:bc:2e:fa:61:ad:54:ca:ab:71:b6:71:eb:4a:
                    29:25:b1:01:4d:f7:ce:4d:0a:6e:33:92:d9:9d:8b:
                    ac:06:a2:59:66:9a:ed:e6:3c:a8:91:73:20:83:3e:
                    ab:ea:38:ff:bc:40:ee:89:d3:0a:34:51:2f:b8:5e:
                    e7:fe:f4:b2:2f:48:68:8a:41:c2:f3:a2:8a:c1:15:
                    e8:4e:c1:54:53:a2:14:45:ec:60:58:77:0b:97:fb:
                    ae:f6:f9:06:c5:c8:22:98:c9:eb:8f:99:c4:2c:a1:
                    98:c8:3a:9d:83:13:55:ee:bc:1e:db:3e:ba:94:39:
                    37:ef:86:90:57:4d:2c:44:ad:84:76:2b:73:c7:9f:
                    6d:eb:01:d0:5a:d5:cd:f9:05:03:a9:84:3b:a5:94:
                    79:bd:ab:50:5a:cd:b6:89:2a:22:39:a7:19:91:a9:
                    bf:ec:4e:d4:5c:f6:ff:81:70:5f:4e:5b:88:95:f1:
                    96:9c:d3:93:29:6c:e8:0d:a8:ad:9e:eb:fd:5d:b9:
                    c5:d1:74:37:7a:6f:4b:4e:40:17:98:a1:0a:af:52:
                    b3:bc:1f:2e:81:48:79:4a:f0:eb:67:2e:8e:39:ad:
                    3f:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:0F:D2:69:36:15:7C:53:11:9C:84:33:19:09:26:CF:6F:68:3A:35
            X509v3 Authority Key Identifier:
                keyid:A4:E6:86:79:E6:7B:A6:1A:27:F4:F8:9B:D0:92:AE:E5:C1:F7:21:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pOaGeeZ7phon9Pib0JKu5cH3ITk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1B48/66F57644927411EFBF864A3DC4F9AE02/pOaGeeZ7phon9Pib0JKu5cH3ITk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:73:94:98:23:28:68:6a:d7:a3:bd:b9:fd:f2:6e:f5:44:1a:
         ca:31:10:2a:5b:b7:2e:79:2d:8a:4c:e5:df:d0:a3:16:75:d6:
         53:34:f5:c0:34:5e:c4:22:5b:a2:60:6f:0f:8f:fc:86:d1:f0:
         16:9a:9c:27:d3:56:6e:50:55:b7:c4:9b:77:99:f2:c5:df:04:
         29:00:1a:2f:3b:05:ad:c7:ee:83:8f:7d:c7:03:49:dc:06:2c:
         31:93:e5:de:c4:fd:81:e9:05:9e:c7:2f:5e:fa:38:76:bd:fa:
         3f:9d:fc:95:ae:f2:7e:18:14:f1:ac:c5:0f:9a:cc:c9:ac:07:
         ef:13:c7:bf:a1:35:97:d4:64:ce:46:2a:38:29:7d:e8:20:91:
         03:44:d0:2a:4b:37:86:cd:77:e7:47:0e:cf:b0:62:da:f2:f3:
         31:99:96:c3:57:d0:3f:68:30:b7:1f:25:ff:f6:3f:ac:dc:fe:
         b4:82:a7:f0:be:22:b5:81:33:1a:07:6e:8a:77:9d:5e:18:5f:
         35:62:93:f3:e0:d8:ce:f4:49:01:0a:5e:7c:90:7e:15:0b:5c:
         99:b3:c1:91:59:9f:a8:f9:26:64:5d:ea:2a:be:46:53:e6:fb:
         a8:db:85:84:ce:f5:6a:e7:fe:b9:c5:08:6e:62:0f:64:86:99:
         e1:1b:0a:79
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAR8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTFCNDgxMTAvBgNVBAUTKEE0RTY4Njc5RTY3QkE2MUEyN0Y0Rjg5QkQwOTJBRUU1
QzFGNzIxMzkwHhcNMjYwNDE3MDUzNDM0WhcNMjYwNDI0MDUzNDM0WjAYMRYwFAYD
VQQDEw02OWUxYzY2Yi0zYTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsGQGvO1QYc8nFTZC6L4HCdclOXSVrZCxMEtxhONE3Lwu+mGtVMqrcbZx60op
JbEBTffOTQpuM5LZnYusBqJZZprt5jyokXMggz6r6jj/vEDuidMKNFEvuF7n/vSy
L0hoikHC86KKwRXoTsFUU6IURexgWHcLl/uu9vkGxcgimMnrj5nELKGYyDqdgxNV
7rwe2z66lDk374aQV00sRK2Editzx59t6wHQWtXN+QUDqYQ7pZR5vatQWs22iSoi
OacZkam/7E7UXPb/gXBfTluIlfGWnNOTKWzoDaitnuv9XbnF0XQ3em9LTkAXmKEK
r1KzvB8ugUh5SvDrZy6OOa0/FQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFE8P0mk2
FXxTEZyEMxkJJs9vaDo1MB8GA1UdIwQYMBaAFKTmhnnme6YaJ/T4m9CSruXB9yE5
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMUI0OC82NkY1NzY0NDky
NzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bob245UGliMEpLdTVjSDNJ
VGsuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3BPYUdlZVo3cGhvbjlQaWIwSkt1NWNIM0lUay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MUI0OC82NkY1NzY0NDkyNzQxMUVGQkY4NjRBM0RDNEY5QUUwMi9wT2FHZWVaN3Bo
b245UGliMEpLdTVjSDNJVGsubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAFXOUmCMoaGrXo725/fJu9UQayjEQKlu3Lnktikzl39CjFnXWUzT1wDRexCJb
omBvD4/8htHwFpqcJ9NWblBVt8Sbd5nyxd8EKQAaLzsFrcfug499xwNJ3AYsMZPl
3sT9gekFnscvXvo4dr36P538la7yfhgU8azFD5rMyawH7xPHv6E1l9RkzkYqOCl9
6CCRA0TQKks3hs1350cOz7Bi2vLzMZmWw1fQP2gwtx8l//Y/rNz+tIKn8L4itYEz
GgduinedXhhfNWKT8+DYzvRJAQpefJB+FQtcmbPBkVmfqPkmZF3qKr5GU+b7qNuF
hM71auf+ucUIbmIPZIaZ4RsKeQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 07:49:20 2026 by rpki-client