Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
File:                     -65NuTksgZMhr1EdxrK1qomYGfo.mft (raw, json)
Hash identifier:          X2ixHpeGcJSC1ki3DYY7E79o1/EcdchvGXJGa4mio0A=
Subject key identifier:   07:69:12:A8:78:71:C7:42:04:3D:D8:3F:B7:69:4B:78:9F:17:45:49
Authority key identifier: FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA
Certificate issuer:       /CN=A91F2D93/serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
Certificate serial:       F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
Manifest number:          F0
Signing time:             Fri 17 Apr 2026 06:07:15 +0000
Manifest this update:     Fri 17 Apr 2026 06:07:14 +0000
Manifest next update:     Fri 24 Apr 2026 06:07:14 +0000
Files and hashes:         1: -65NuTksgZMhr1EdxrK1qomYGfo.crl (hash: LBBysgT34WeCHmSpKU+I5Ro/wMZXg0Q5P1RPnfn6t2Q=)
                          2: 93D86AAED76611EF9C982924C4F9AE02.roa (hash: h/SmLSS017YgGA7zYy4/07yQ0L9fFewbCCdQwU4sBFA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl
                          rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:07:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2D93, serialNumber=FBAE4DB9392C819321AF511DC6B2B5AA899819FA
        Validity
            Not Before: Apr 17 06:07:14 2026 GMT
            Not After : Apr 24 06:07:14 2026 GMT
        Subject: CN=69e1ce13-0cf3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:27:45:e9:40:21:1d:97:9b:ed:5a:62:be:db:
                    c8:2e:d1:e7:89:4e:e5:b3:b6:74:8b:af:77:19:bc:
                    44:cb:22:6c:74:f9:3a:c4:ae:b2:e3:5d:15:e9:39:
                    0e:8f:2d:a1:7e:84:f6:97:0b:f0:d7:f0:61:7e:4b:
                    3e:69:49:c9:14:41:aa:6e:e4:32:2e:8a:cc:2f:f5:
                    f5:e2:9d:4d:7c:d9:26:2c:eb:08:87:ed:1a:f3:49:
                    02:95:a7:58:0a:bc:7e:f4:a5:ec:6d:a7:8b:ae:0a:
                    df:51:4c:b3:9b:12:f8:30:d0:6f:05:aa:71:36:82:
                    5a:c7:b9:f7:c5:8c:c1:bd:00:09:fb:33:41:94:6d:
                    81:e8:09:b6:17:45:10:90:9d:88:cf:e9:85:ca:f0:
                    3c:86:9c:c7:78:4a:4f:ba:2a:58:a8:55:78:8c:35:
                    64:7a:51:2e:7b:a7:05:d7:25:ba:ac:12:02:91:12:
                    3c:7a:dc:05:2f:65:08:e8:df:90:59:fc:06:24:04:
                    1d:c3:e6:97:f1:03:08:97:5d:3b:15:82:d5:80:3b:
                    e5:4a:16:63:47:9b:13:74:32:18:97:f4:9c:39:b5:
                    8f:ea:40:37:2d:a5:21:6f:08:b4:3c:ab:c5:dc:1f:
                    8d:95:5b:ce:62:b9:76:e1:2f:a6:9a:40:0f:13:be:
                    fa:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:69:12:A8:78:71:C7:42:04:3D:D8:3F:B7:69:4B:78:9F:17:45:49
            X509v3 Authority Key Identifier:
                keyid:FB:AE:4D:B9:39:2C:81:93:21:AF:51:1D:C6:B2:B5:AA:89:98:19:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-65NuTksgZMhr1EdxrK1qomYGfo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2D93/818FDB78D44D11EFB1600B28C4F9AE02/-65NuTksgZMhr1EdxrK1qomYGfo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:5b:b3:55:a2:91:08:1b:b1:84:f3:54:69:c7:21:02:fb:b3:
         7b:d4:35:1e:96:52:eb:b9:31:e5:df:ed:76:ca:89:74:62:6f:
         42:94:c2:38:38:5f:9b:02:e9:8a:e3:ab:d1:65:02:48:3e:e6:
         ad:99:75:a9:21:1b:da:07:6b:65:35:5f:4d:37:b8:fe:3b:91:
         f4:9b:a4:7b:2d:a8:96:1e:53:6e:c4:c4:a1:28:1c:66:b8:e0:
         20:2b:94:2c:76:c4:b6:a0:b0:86:cb:51:26:c5:ea:82:43:93:
         96:a4:dd:d4:a7:14:e0:e4:ad:31:9c:e8:8a:8e:13:95:a6:8a:
         55:84:28:56:7e:34:16:2f:7e:17:a7:80:aa:c4:c2:0a:d0:16:
         c1:33:92:90:8f:a9:c6:80:d6:ab:cc:aa:9b:26:53:9c:cc:38:
         99:af:13:fc:5a:8a:84:d2:fc:d7:8b:4e:0a:8b:10:cb:0d:ef:
         5f:10:7e:41:76:dd:3c:8e:a4:ed:b2:4e:cf:ca:08:92:71:70:
         57:b2:df:99:8f:d2:ad:c7:3a:cb:62:c1:a4:90:3c:9c:20:7c:
         e8:50:18:8a:fd:5d:bf:de:aa:27:a3:65:af:cf:15:29:5a:93:
         44:20:0b:a0:89:66:1b:2c:84:d3:62:1d:a5:90:2b:24:be:8d:
         cf:f6:12:ab
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjJEOTMxMTAvBgNVBAUTKEZCQUU0REI5MzkyQzgxOTMyMUFGNTExREM2QjJCNUFB
ODk5ODE5RkEwHhcNMjYwNDE3MDYwNzE0WhcNMjYwNDI0MDYwNzE0WjAYMRYwFAYD
VQQDEw02OWUxY2UxMy0wY2YzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyidF6UAhHZeb7VpivtvILtHniU7ls7Z0i693GbxEyyJsdPk6xK6y410V6TkO
jy2hfoT2lwvw1/Bhfks+aUnJFEGqbuQyLorML/X14p1NfNkmLOsIh+0a80kCladY
Crx+9KXsbaeLrgrfUUyzmxL4MNBvBapxNoJax7n3xYzBvQAJ+zNBlG2B6Am2F0UQ
kJ2Iz+mFyvA8hpzHeEpPuipYqFV4jDVkelEue6cF1yW6rBICkRI8etwFL2UI6N+Q
WfwGJAQdw+aX8QMIl107FYLVgDvlShZjR5sTdDIYl/ScObWP6kA3LaUhbwi0PKvF
3B+NlVvOYrl24S+mmkAPE776bQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFAdpEqh4
ccdCBD3YP7dpS3ifF0VJMB8GA1UdIwQYMBaAFPuuTbk5LIGTIa9RHcaytaqJmBn6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMkQ5My84MThGREI3OEQ0
NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2daTWhyMUVkeHJLMXFvbVlH
Zm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLy02NU51VGtzZ1pNaHIxRWR4cksxcW9tWUdmby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MkQ5My84MThGREI3OEQ0NEQxMUVGQjE2MDBCMjhDNEY5QUUwMi8tNjVOdVRrc2da
TWhyMUVkeHJLMXFvbVlHZm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAXluzVaKRCBuxhPNUacchAvuze9Q1HpZS67kx5d/tdsqJdGJvQpTCODhfmwLp
iuOr0WUCSD7mrZl1qSEb2gdrZTVfTTe4/juR9Jukey2olh5TbsTEoSgcZrjgICuU
LHbEtqCwhstRJsXqgkOTlqTd1KcU4OStMZzoio4TlaaKVYQoVn40Fi9+F6eAqsTC
CtAWwTOSkI+pxoDWq8yqmyZTnMw4ma8T/FqKhNL814tOCosQyw3vXxB+QXbdPI6k
7bJOz8oIknFwV7LfmY/Srcc6y2LBpJA8nCB86FAYiv1dv96qJ6Nlr88VKVqTRCAL
oIlmGyyE02IdpZArJL6Nz/YSqw==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:36 2026 by rpki-client