Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
File:                     1BN478zNyo5lN-lfJ6o7NTdYCvM.mft (raw, json)
Hash identifier:          o8tBDraIGffzZYOvM9MKxsMcs2s5AsliJ7lJ+OrGdRA=
Subject key identifier:   4F:97:CF:C4:23:47:18:02:FC:FB:16:28:F1:35:A8:15:8C:58:FD:EA
Authority key identifier: D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3
Certificate issuer:       /CN=A91F2E76/serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
Certificate serial:       0839
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
Manifest number:          0832
Signing time:             Sat 18 Apr 2026 20:49:38 +0000
Manifest this update:     Sat 18 Apr 2026 20:49:37 +0000
Manifest next update:     Sat 25 Apr 2026 20:49:37 +0000
Files and hashes:         1: 1BN478zNyo5lN-lfJ6o7NTdYCvM.crl (hash: n5bhV/7IZpDcGsQN6otrC1ZeBXy0k1XKtNQBOfN/ORo=)
                          2: 86AE60140D7A11EB9D346C48C4F9AE02.roa (hash: FEj+Wpf3i+UBiIyj1ILdZqVb7eAIBliHFCY3mKXHGkw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl
                          rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 20:49:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2105 (0x839)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2E76, serialNumber=D41378EFCCCDCA8E6537E95F27AA3B3537580AF3
        Validity
            Not Before: Apr 18 20:49:37 2026 GMT
            Not After : Apr 25 20:49:37 2026 GMT
        Subject: CN=69e3ee61-f1a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:96:a7:7a:ce:b3:3b:ea:f2:58:1c:7c:29:96:
                    c8:27:02:6b:d8:88:e7:cb:33:83:08:ae:87:a4:a3:
                    2a:78:9c:a4:c3:6b:49:34:f7:30:df:f5:71:fa:30:
                    56:a4:d9:5f:ae:ec:b5:bf:6d:54:24:7a:8e:7e:64:
                    fe:ad:49:6b:b0:10:d6:a7:5b:93:d9:33:60:28:ff:
                    b1:4a:62:ef:02:22:b2:71:89:11:1c:ed:6a:1c:21:
                    f7:02:79:90:e5:72:aa:22:48:a7:b7:01:3b:d5:7c:
                    9a:27:55:12:18:76:f6:67:49:29:6f:9c:07:71:18:
                    b1:01:98:17:46:26:34:24:ac:eb:a7:47:77:0b:f3:
                    2d:be:a8:35:f1:f4:5b:7b:6e:c3:31:c4:82:9c:2b:
                    4d:30:83:49:24:77:2f:a0:5e:d5:7d:88:8d:e4:5e:
                    a7:ec:71:98:e0:f0:5b:00:19:9c:83:e5:03:34:23:
                    d2:12:df:67:d0:92:82:be:58:9d:e1:c1:3a:ad:cb:
                    45:2e:1f:1f:89:94:f8:9e:d7:17:31:89:a0:11:04:
                    53:db:74:5b:db:9a:92:a1:2e:75:cc:bc:42:e6:27:
                    9c:64:de:ec:ee:ac:60:f4:f7:c4:6c:75:2d:76:ed:
                    9c:df:fc:e6:76:08:17:16:9b:01:56:e6:d2:de:64:
                    ed:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:97:CF:C4:23:47:18:02:FC:FB:16:28:F1:35:A8:15:8C:58:FD:EA
            X509v3 Authority Key Identifier:
                keyid:D4:13:78:EF:CC:CD:CA:8E:65:37:E9:5F:27:AA:3B:35:37:58:0A:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1BN478zNyo5lN-lfJ6o7NTdYCvM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2E76/8F3C9E6A0D7711EBBBAE3440C4F9AE02/1BN478zNyo5lN-lfJ6o7NTdYCvM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:de:37:fa:c3:4c:ec:5c:25:77:b2:6c:e0:95:cf:7f:16:85:
         bf:b2:22:fe:30:d6:79:75:ef:a0:9f:7b:15:5d:03:64:d6:2b:
         aa:cf:6f:6a:06:50:17:2d:fe:a9:e3:fd:0c:1d:cc:a8:0c:4d:
         bf:4c:8b:dd:8e:95:78:68:f4:db:c2:05:68:8f:72:0d:f0:ae:
         f3:b7:05:45:91:ac:a5:5e:c8:49:ae:f0:1e:b7:f3:21:af:ca:
         86:ce:82:68:44:fe:29:4e:ab:7d:04:ec:77:e1:3f:15:73:7a:
         b5:61:8b:76:1f:91:e0:2b:f1:b3:51:35:43:b3:26:06:f0:8f:
         64:99:1f:49:11:2f:3f:ca:8a:07:b0:67:49:2c:61:51:10:b2:
         0a:bf:9c:02:e9:ec:bc:a7:6d:11:f3:46:d4:64:c0:78:92:a8:
         6a:91:6e:da:0c:2f:21:df:56:dc:93:9a:2a:b9:2c:f6:a3:7d:
         32:30:cb:37:ed:78:41:4a:65:19:91:5a:45:f2:ad:9f:c1:af:
         50:f7:3d:06:4a:4e:89:28:97:39:12:c9:2b:5f:62:1d:1a:c1:
         17:c5:89:bf:47:15:04:93:c0:9a:5e:76:93:04:e3:78:35:cf:
         55:d6:53:c4:4b:cf:29:66:8c:59:ef:45:94:4b:5e:84:27:a2:
         86:5a:44:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:59:17 2026 by rpki-client