Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
File:                     4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft (raw, json)
Hash identifier:          Ps+4nMzyLB2lyGOwUqYoKZJ+33TgT75OsQkEK/d3XvU=
Subject key identifier:   AC:C4:B2:9B:86:F7:6B:1C:47:E4:34:58:B1:7F:DE:5F:94:DE:88:24
Authority key identifier: E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D
Certificate issuer:       /CN=A91F2B47/serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
Manifest number:          02CC
Signing time:             Fri 17 Apr 2026 01:19:37 +0000
Manifest this update:     Fri 17 Apr 2026 01:19:36 +0000
Manifest next update:     Fri 24 Apr 2026 01:19:36 +0000
Files and hashes:         1: 4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl (hash: 96y4/rJepWZklkhDqx8sT7pPaUsF3UXr6p69fBAseb8=)
                          2: 909F94F070F911EDBA42F056C4F9AE02.roa (hash: ee5kf95O1pSuX6zOaS7RlxiHE9MMTxZvjrB5o5eebL4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl
                          rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:19:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2B47, serialNumber=E11896B00C9486E43EE74802D21969F888EE4E2D
        Validity
            Not Before: Apr 17 01:19:36 2026 GMT
            Not After : Apr 24 01:19:36 2026 GMT
        Subject: CN=69e18aa8-772a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:75:8c:5f:bb:2a:67:b6:97:18:d8:f5:2d:9b:
                    ea:04:32:86:74:8f:7d:47:5c:06:5e:af:4c:48:29:
                    7a:dd:46:36:5c:2e:be:a2:92:46:02:28:c3:f4:9b:
                    97:a9:ae:0e:96:bd:04:3a:e7:72:0f:72:a5:c8:06:
                    f5:c5:50:e4:03:2c:b8:5e:79:3e:99:26:13:7d:c5:
                    58:82:22:1d:8f:ed:ea:db:03:a3:e4:9e:9a:f4:78:
                    d4:65:5f:c1:61:23:98:88:7d:a9:2e:d8:a5:0d:cb:
                    f9:3e:4a:2f:37:77:2b:27:ba:21:03:06:a0:39:50:
                    0e:7d:eb:48:b6:da:f3:ea:b3:cf:94:0e:5d:fa:09:
                    92:5f:5f:19:7d:be:67:44:cc:e8:b1:36:85:9f:e0:
                    f9:4f:fe:3a:a8:b1:39:c4:a3:6b:e6:ee:dc:c9:58:
                    58:df:6e:9f:ca:d7:29:63:e7:8d:0a:1c:6f:74:76:
                    52:13:c1:b9:f0:ab:59:2c:ef:2d:a8:86:29:3b:74:
                    84:eb:d7:a1:26:cc:4f:d4:e0:48:20:51:4d:6b:71:
                    e6:ad:c8:8d:c6:ea:3c:4a:31:4e:59:f3:9e:b8:05:
                    59:3b:b7:0b:07:f4:74:f3:af:cb:dd:8a:d8:db:a9:
                    48:d9:a7:fc:73:dc:4d:5e:a4:07:b5:a4:3d:92:d1:
                    df:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:C4:B2:9B:86:F7:6B:1C:47:E4:34:58:B1:7F:DE:5F:94:DE:88:24
            X509v3 Authority Key Identifier:
                keyid:E1:18:96:B0:0C:94:86:E4:3E:E7:48:02:D2:19:69:F8:88:EE:4E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RiWsAyUhuQ-50gC0hlp-IjuTi0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2B47/F1FE32BA33AF11EDB6107434C4F9AE02/4RiWsAyUhuQ-50gC0hlp-IjuTi0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:1d:55:aa:cb:93:f9:98:3c:af:2b:72:fa:94:a5:d0:15:25:
         71:e3:ae:9d:20:72:ee:67:53:3a:6a:75:18:e4:7c:01:c9:27:
         cf:30:f7:23:b2:90:b8:c9:e1:bc:96:ff:f9:34:c1:56:ce:8f:
         44:ac:42:f8:5e:48:bd:6e:e6:88:e7:a3:dd:67:e6:a0:ba:7b:
         c5:14:17:ec:d6:71:82:8e:24:21:82:af:9d:6e:e5:9d:32:b9:
         ea:a2:df:8f:1e:30:2c:64:1f:2b:24:f5:d9:9b:f4:0f:ef:a9:
         e7:2c:ec:fd:10:bb:81:ab:e9:6b:a8:49:4f:70:c5:36:f9:c4:
         25:61:95:33:5b:38:2c:df:35:c1:03:be:94:07:09:5f:5c:c9:
         8a:a8:77:58:0d:b5:c8:5a:a7:91:48:67:66:34:e6:5c:ef:19:
         aa:8c:b4:5c:8a:b3:94:82:4b:f2:c6:8c:b3:7f:be:bb:ff:e4:
         d7:51:4d:89:60:51:a6:8c:4f:58:13:3f:8c:4a:4f:0a:a1:72:
         39:86:fc:8d:f2:96:6e:74:07:79:84:db:20:58:cd:7a:40:8a:
         df:21:de:98:1e:01:1b:87:d2:3c:00:e3:1f:dc:a7:16:46:6c:
         03:78:9f:fa:c3:ac:f8:cb:c9:38:4c:fa:41:26:0a:a2:f8:7a:
         87:7a:1a:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:17:37 2026 by rpki-client