Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
File:                     a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft (raw, json)
Hash identifier:          jbkOEOYxYsV1xHDTfGwh2bSrIdSXanEEDxRKrKxtfag=
Subject key identifier:   0C:99:A5:B3:BD:23:61:4C:76:CD:1C:6C:36:54:3F:C4:7F:8D:D1:3F
Authority key identifier: 6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70
Certificate issuer:       /CN=A91EAE3D/serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
Certificate serial:       152A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
Manifest number:          1513
Signing time:             Sat 18 Apr 2026 16:45:48 +0000
Manifest this update:     Sat 18 Apr 2026 16:45:48 +0000
Manifest next update:     Sat 25 Apr 2026 16:45:48 +0000
Files and hashes:         1: a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl (hash: GHRsIm+4nWUKYryhV1eSScgGA4K/bH8QIikgyc6f3oA=)
                          2: F693F2689CB811EB97F77E14C4F9AE02.roa (hash: YMv0r7cgJCxpk4HSp8I/SfGyxuRnawMQX2mraCd5KmQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl
                          rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:45:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5418 (0x152a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAE3D, serialNumber=6B567C843E42523E0E5B64F64A0F2AE05517BB70
        Validity
            Not Before: Apr 18 16:45:48 2026 GMT
            Not After : Apr 25 16:45:48 2026 GMT
        Subject: CN=69e3b53c-fc5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:08:c7:35:5b:b5:b9:17:18:85:a9:47:ec:0d:
                    9d:74:ca:2c:4d:f1:22:e4:0b:23:9d:7e:f2:8e:94:
                    6c:65:31:91:62:54:b1:56:3c:eb:c6:40:25:8d:81:
                    ed:6e:17:76:31:44:9c:c9:00:17:d0:36:18:93:fb:
                    fa:1c:e6:66:31:01:67:2f:a3:36:0f:0d:f7:7e:ca:
                    e3:18:34:f6:bb:e6:5f:35:45:2f:c5:62:12:0f:ee:
                    72:af:8a:b8:72:74:94:42:90:09:c2:ac:c0:32:5c:
                    67:40:92:ca:65:b9:0c:d1:88:97:a7:2a:82:d5:e0:
                    a0:3e:eb:e7:fa:3e:ec:49:9f:56:5a:0d:ae:29:89:
                    9d:51:0f:ef:31:c3:3b:09:82:ba:36:49:7c:07:93:
                    63:b1:0b:f2:f5:72:fb:1e:76:03:2b:82:11:4a:5e:
                    5e:9d:5c:04:d4:ee:e7:08:b4:5d:29:66:06:21:a3:
                    18:5b:24:1a:a6:00:5d:01:66:60:c9:42:26:81:7c:
                    c5:cf:9d:54:88:0c:ae:9c:83:72:71:85:b0:02:5a:
                    c3:67:ea:bc:8d:e8:4b:22:9c:fd:76:26:e3:5a:e4:
                    10:06:b0:10:66:2c:4c:21:16:d5:43:8c:fe:f1:af:
                    34:91:6a:a9:4e:7d:14:ff:93:1d:09:45:83:78:77:
                    bc:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:99:A5:B3:BD:23:61:4C:76:CD:1C:6C:36:54:3F:C4:7F:8D:D1:3F
            X509v3 Authority Key Identifier:
                keyid:6B:56:7C:84:3E:42:52:3E:0E:5B:64:F6:4A:0F:2A:E0:55:17:BB:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAE3D/8EF42A4675DE11E8B704A246C4F9AE02/a1Z8hD5CUj4OW2T2Sg8q4FUXu3A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:35:c8:bc:31:bc:a5:5d:64:cd:8a:be:f6:9c:8a:50:38:88:
         d0:a8:b5:e1:ce:7f:ac:84:aa:60:9d:e3:bd:ba:5a:50:c1:46:
         2c:a8:d6:42:49:37:29:9c:24:5c:ea:e6:49:00:d2:95:2e:3c:
         37:76:00:45:5a:11:61:24:1c:e6:dc:13:03:37:f5:be:b1:17:
         cf:86:37:14:b5:5e:18:b1:04:50:3e:40:a1:f6:6f:65:24:bc:
         82:a2:23:7f:55:ff:22:e0:82:0f:a8:12:a0:81:52:25:58:a0:
         67:d1:2f:38:0c:93:1d:54:59:6e:84:7a:b3:1b:a9:be:5e:ee:
         78:93:a7:36:1c:9b:44:92:63:bc:67:4f:01:10:61:a0:fd:25:
         7c:c1:1a:8e:27:47:07:f6:dc:91:b2:bc:f5:8e:e5:54:03:26:
         61:9d:e5:8a:f4:a6:a0:cb:ee:2b:99:41:b7:36:44:68:fc:95:
         29:02:92:6d:13:03:ac:4e:53:e2:e1:4a:d1:62:42:6f:1c:ff:
         b5:eb:df:48:d2:8b:03:34:bd:e2:34:30:52:19:40:b7:96:7f:
         9d:b8:22:11:dd:cf:d8:2c:30:90:08:37:73:e3:b9:60:6b:21:
         ff:0d:5b:6d:57:7c:91:26:d2:53:45:f7:14:a3:0d:ed:e6:60:
         50:26:fb:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:56:44 2026 by rpki-client