Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
File:                     epirabcrqsZmDlTdHG2KBi4s0v4.mft (raw, json)
Hash identifier:          Wd+rgGcAhx+CAPtTv8Za5YbrYF11VYvb0teZ6Vnziks=
Subject key identifier:   58:11:20:B4:BA:DB:58:9B:1A:8C:AA:78:A3:5E:C6:84:12:C3:E9:94
Authority key identifier: 7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE
Certificate issuer:       /CN=A91E6038/serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
Certificate serial:       041B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
Manifest number:          0411
Signing time:             Fri 17 Apr 2026 00:19:12 +0000
Manifest this update:     Fri 17 Apr 2026 00:19:12 +0000
Manifest next update:     Fri 24 Apr 2026 00:19:12 +0000
Files and hashes:         1: epirabcrqsZmDlTdHG2KBi4s0v4.crl (hash: ltb/c2BIqOsHFdKRNQRCzCl8P9S3OAiaefmtPSy3UCw=)
                          2: C7C714A2B19D11F0AB4AC87EC4F9AE02.roa (hash: D6VPmXFDc+G5ZgUvGAmbcPnFMvgmVskOcccS3cS1IpY=)
                          3: BA6115F6B19D11F08DA2A57EC4F9AE02.roa (hash: Utidw5eD+Ey8KmLxBNEaERSjjHpRl3N3GM7Q067OeCo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl
                          rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:19:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1051 (0x41b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6038, serialNumber=7A98AB69B72BAAC6660E54DD1C6D8A062E2CD2FE
        Validity
            Not Before: Apr 17 00:19:12 2026 GMT
            Not After : Apr 24 00:19:12 2026 GMT
        Subject: CN=69e17c80-63d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:20:0b:a8:0b:ce:37:c3:f9:92:38:0b:51:ed:
                    99:2e:5e:d2:2e:56:2f:b3:dc:ca:04:77:a9:a6:cd:
                    fc:c5:76:b6:e5:30:c5:95:fe:ea:6b:1b:0a:97:27:
                    13:5b:fd:71:ac:87:3b:fc:99:d4:d1:94:ad:87:39:
                    71:d2:cc:fa:77:fb:85:ff:58:4c:71:fd:1b:02:30:
                    fe:89:2f:22:bb:10:f2:22:e3:ca:54:72:2f:8e:35:
                    24:af:df:db:4d:13:4b:89:7d:02:ef:69:4a:19:4b:
                    5a:27:8e:c7:26:49:ec:c6:13:c6:83:cf:a6:86:3e:
                    ee:41:30:07:4a:23:47:ad:5b:20:2e:04:be:0d:36:
                    78:31:0f:8e:dd:b1:3f:27:d7:bc:a2:ca:b9:85:4e:
                    93:34:4d:64:d4:96:c5:97:e8:66:b0:9c:ce:38:34:
                    8d:15:df:2d:44:f6:dd:b3:a9:e7:71:c0:ed:e6:d7:
                    42:96:7c:41:3d:f9:2f:04:90:a0:29:fb:24:bd:d6:
                    bb:8e:d2:65:2f:cf:a8:d9:f9:73:42:a5:19:ae:46:
                    eb:fe:b6:21:42:88:8b:d0:cb:ed:ea:28:36:89:db:
                    78:bf:fe:a1:69:1b:09:b0:66:bb:de:dc:13:c7:b0:
                    52:1b:f2:d3:76:bd:76:1b:fb:dd:b7:4f:9a:6e:33:
                    e0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:11:20:B4:BA:DB:58:9B:1A:8C:AA:78:A3:5E:C6:84:12:C3:E9:94
            X509v3 Authority Key Identifier:
                keyid:7A:98:AB:69:B7:2B:AA:C6:66:0E:54:DD:1C:6D:8A:06:2E:2C:D2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/epirabcrqsZmDlTdHG2KBi4s0v4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6038/91E0C852AFFC11ECB0C3885DC4F9AE02/epirabcrqsZmDlTdHG2KBi4s0v4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:42:db:41:7a:1c:41:b7:27:dd:32:88:ec:e5:20:fd:58:ef:
         53:8c:cf:36:34:04:3a:d6:ce:e7:90:a9:80:ef:cf:85:5e:99:
         b6:1d:94:ea:96:37:33:e4:af:96:df:5e:60:4c:3a:39:58:8f:
         5c:b8:92:59:97:93:38:0b:ea:9a:a6:cf:d3:a5:db:30:3d:4e:
         1f:11:fc:a4:13:c6:24:0f:39:4f:88:fc:fa:67:7c:eb:37:d6:
         f6:1f:76:7a:51:17:ad:dc:7d:4e:3b:76:41:f2:49:f1:eb:02:
         7d:9a:4d:de:af:ef:f5:29:3b:74:23:63:36:4c:4c:53:b0:b5:
         53:7f:d1:85:9d:cb:25:00:60:d2:7c:51:5d:8e:cd:49:69:98:
         57:b1:81:3a:08:f7:7a:96:51:51:4e:be:47:22:9b:ca:fa:91:
         2a:67:27:a5:77:b9:75:c1:3d:57:2e:87:be:71:70:d4:bb:4b:
         98:cb:8e:42:84:33:2a:fb:03:c8:49:7a:11:c6:f8:f7:36:fc:
         a9:45:9e:3b:d3:19:16:a5:c8:b6:cf:f2:2c:ca:9b:76:3d:6c:
         0a:8f:8d:43:a1:8f:da:3e:b3:c9:08:88:9f:d8:f3:f8:40:12:
         ac:10:9f:06:c1:0c:ef:a4:fa:a2:0f:0d:f3:b0:3c:c5:a7:17:
         6a:55:69:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:06:49 2026 by rpki-client