Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
File:                     AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft (raw, json)
Hash identifier:          IdgYvHYfGRfYbvallzPsEMDfufRNF1dqYdvy9zAaBVM=
Subject key identifier:   27:4A:77:16:48:D6:1C:A1:E8:58:50:FB:0D:A1:47:FA:D2:93:EA:4F
Authority key identifier: 03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78
Certificate issuer:       /CN=A91E6EFE/serialNumber=033B311D758F04340A23FB081675951C250E8078
Certificate serial:       0282
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
Manifest number:          027D
Signing time:             Fri 17 Apr 2026 01:39:55 +0000
Manifest this update:     Fri 17 Apr 2026 01:39:54 +0000
Manifest next update:     Fri 24 Apr 2026 01:39:54 +0000
Files and hashes:         1: AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl (hash: zszEXfr8YqEy409stu7EyG/AInodVUaNWmwgaUeVdaw=)
                          2: 250320C4761511EDA05B8A63C4F9AE02.roa (hash: fg88o765nCwItF2Hc4hiKhK6MdJibWRYf4SuZ9yJYVU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl
                          rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:39:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 642 (0x282)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6EFE, serialNumber=033B311D758F04340A23FB081675951C250E8078
        Validity
            Not Before: Apr 17 01:39:54 2026 GMT
            Not After : Apr 24 01:39:54 2026 GMT
        Subject: CN=69e18f6b-b496
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:bd:49:21:5c:4e:83:ad:c3:17:eb:21:07:6b:
                    42:41:ba:70:b1:b0:b0:5d:4e:cf:b5:26:dc:97:7a:
                    e0:a3:dd:25:9c:eb:c5:62:fe:c6:f6:05:2c:5e:e4:
                    f1:77:44:ce:22:91:28:b0:94:40:66:65:eb:ea:e7:
                    00:ec:f3:cd:15:ae:fb:5e:32:4d:58:af:94:84:e3:
                    de:ae:49:0b:39:b2:28:c0:c9:93:70:b8:16:c4:31:
                    c7:25:0f:62:14:3a:f5:02:13:67:4e:7d:7f:93:e1:
                    a3:ca:b9:dc:2d:cc:00:80:e8:57:54:b0:5f:d7:a5:
                    89:db:07:fd:99:f5:19:c0:4d:29:31:a5:5f:8b:56:
                    81:38:ec:54:8e:f9:41:98:12:4e:67:36:3b:cc:5c:
                    8b:c8:b1:7d:8d:6e:21:f7:30:4d:e6:be:3a:d8:73:
                    e2:92:7a:da:b6:1a:e2:21:7c:74:1f:4b:e3:39:9b:
                    17:37:b5:d1:9e:e2:1a:91:f7:1a:2e:4d:e8:71:7f:
                    96:1e:71:a5:c6:48:9b:a1:61:93:67:6c:56:6d:91:
                    23:b5:33:86:a4:95:a2:84:38:1e:b7:4d:84:1b:c8:
                    11:76:c3:a9:61:4b:c2:00:2b:22:2f:2d:af:a1:5d:
                    30:a2:b6:1c:dc:38:4c:f6:97:ef:1c:3e:b0:4c:bf:
                    9c:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:4A:77:16:48:D6:1C:A1:E8:58:50:FB:0D:A1:47:FA:D2:93:EA:4F
            X509v3 Authority Key Identifier:
                keyid:03:3B:31:1D:75:8F:04:34:0A:23:FB:08:16:75:95:1C:25:0E:80:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/AzsxHXWPBDQKI_sIFnWVHCUOgHg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6EFE/DA4A43C26CA111EDB44E765BC4F9AE02/AzsxHXWPBDQKI_sIFnWVHCUOgHg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         02:d9:35:b0:59:ef:ae:9e:7f:da:c0:e9:e4:99:cb:b7:90:5d:
         9a:11:a1:6b:ea:cb:51:e0:cb:f3:83:fa:36:0a:ea:ea:bb:3a:
         a9:97:c9:95:45:f2:51:87:12:18:1f:ff:ce:ed:13:bb:f4:dd:
         f2:e4:c6:d7:ba:9a:3b:c1:bb:4c:40:82:f9:62:73:72:81:7e:
         75:c1:ad:a4:c2:ca:8c:90:2d:3f:88:d8:14:a7:4a:a4:75:87:
         58:38:61:c4:6a:3e:5c:df:ec:0d:12:d4:e8:d6:e8:89:d2:7c:
         05:c0:b3:81:67:b0:fd:1f:80:97:8e:27:82:ee:be:72:d0:e6:
         e2:f0:cd:fc:c7:30:da:ab:6d:30:5e:69:b4:f0:a5:b4:96:2a:
         60:30:27:28:6e:06:f4:91:ee:3b:1c:4e:18:bb:4f:31:58:b2:
         b4:46:2a:81:bc:b8:e7:a8:3c:9f:39:c6:1b:b2:7f:86:6d:10:
         8e:33:2c:a6:e1:2f:48:3f:6c:92:c4:fb:ef:96:e6:2f:7a:d3:
         e4:f2:e3:f4:2a:2a:b1:0e:3e:98:65:e6:41:95:41:b6:75:86:
         a3:13:3c:e5:9b:5c:a2:33:8b:a5:54:77:c4:81:6d:20:f6:ff:
         80:21:54:64:c7:00:13:92:5c:e6:2a:45:59:79:eb:01:92:80:
         4e:3a:73:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:17 2026 by rpki-client