Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
File:                     8MOq6RfojmgUGpayJuBGAJqBlIM.mft (raw, json)
Hash identifier:          UI56ETy/HHBqg902oNEx1VsjZ70uCRIMqUXmnYdwXfk=
Subject key identifier:   ED:95:88:83:21:D6:C9:73:46:8C:F1:7C:5D:61:21:B8:38:7F:68:0B
Authority key identifier: F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83
Certificate issuer:       /CN=A91F48F3/serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
Certificate serial:       0209
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
Manifest number:          0204
Signing time:             Fri 17 Apr 2026 02:47:19 +0000
Manifest this update:     Fri 17 Apr 2026 02:47:19 +0000
Manifest next update:     Fri 24 Apr 2026 02:47:19 +0000
Files and hashes:         1: 8MOq6RfojmgUGpayJuBGAJqBlIM.crl (hash: BImurtrfiK+KC9eRLn0PSBXNKXOrHr42PXl/5A3s1go=)
                          2: 0366729A251511EEACA5881FC4F9AE02.roa (hash: 6JYWs3SxDEa6jpD0UwDNymCzd5Uc53y36eSD/5q1wxs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl
                          rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:47:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 521 (0x209)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F48F3, serialNumber=F0C3AAE917E88E68141A96B226E046009A819483
        Validity
            Not Before: Apr 17 02:47:19 2026 GMT
            Not After : Apr 24 02:47:19 2026 GMT
        Subject: CN=69e19f37-f1e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:68:c2:c9:d6:b7:8e:b7:4c:a7:18:7d:6e:0c:
                    1f:c1:58:8d:fc:48:1d:a5:15:0e:8f:18:0e:75:49:
                    ba:b2:96:1e:06:78:d1:28:d9:14:5d:a4:cf:3c:47:
                    90:1a:5f:69:6c:d5:3c:fc:fe:b5:08:25:61:e6:18:
                    1e:99:28:f8:0b:5a:b6:a4:3e:e3:dd:58:fe:9e:61:
                    ee:44:18:df:83:bb:e0:96:e0:f1:95:de:21:26:0c:
                    af:ea:3e:ad:4d:d2:2f:ad:c8:3b:f7:8a:e1:29:5a:
                    fe:db:76:29:15:96:ee:d8:2f:0c:2f:c9:7a:d2:3a:
                    f8:19:28:e8:9c:56:97:fc:78:84:c1:50:f0:e4:0a:
                    a6:c6:fd:19:3a:52:8a:07:4a:4f:94:0e:7e:4a:5a:
                    8d:39:c5:40:26:e4:7d:cf:6b:a5:92:16:02:a4:71:
                    8f:b1:6e:87:03:77:f6:72:dc:44:d9:68:a7:f2:22:
                    f7:30:0f:6f:36:a6:69:c4:8e:36:37:64:32:9b:c6:
                    d7:ed:40:1c:76:69:b5:dc:f4:e8:ab:28:1b:e5:4a:
                    55:02:8b:35:bb:a0:dc:88:3f:7b:82:42:c9:2b:28:
                    a2:1a:86:af:e1:a9:c2:39:a3:25:14:07:3b:f9:7d:
                    7b:84:20:44:04:43:d2:ad:8e:84:7c:5d:b3:3b:30:
                    d6:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:95:88:83:21:D6:C9:73:46:8C:F1:7C:5D:61:21:B8:38:7F:68:0B
            X509v3 Authority Key Identifier:
                keyid:F0:C3:AA:E9:17:E8:8E:68:14:1A:96:B2:26:E0:46:00:9A:81:94:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8MOq6RfojmgUGpayJuBGAJqBlIM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F48F3/B7235E2A251411EEA8DECC1EC4F9AE02/8MOq6RfojmgUGpayJuBGAJqBlIM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:5c:b3:ba:ad:9a:95:bf:ef:6d:03:a1:23:4b:5f:e1:0d:18:
         04:45:29:e0:8a:a1:f9:b5:40:f4:9f:14:96:80:eb:4f:54:a4:
         3b:a7:f9:d4:5c:45:8b:8c:b0:86:51:d8:d2:ea:e3:3e:16:69:
         50:20:96:c8:fa:aa:b6:2e:da:2e:87:09:ed:e1:73:f2:07:6f:
         e7:00:80:8b:17:3e:54:00:fb:05:4c:65:31:13:e7:ce:a7:23:
         18:64:70:3c:85:80:9b:cb:dc:12:39:99:3a:f6:62:29:15:3d:
         d1:14:90:d8:37:ea:89:f4:4c:a3:8e:d2:90:8e:d5:21:6f:62:
         c0:0c:ae:1b:d4:51:ca:fc:5e:18:a8:76:f3:ac:36:79:c3:eb:
         a9:a6:75:b8:22:56:11:fa:c3:fb:af:a9:93:58:a9:8c:72:65:
         38:3b:48:92:09:04:ef:fe:04:7f:ec:3a:dc:3b:08:5b:cc:9a:
         cb:1b:81:48:5c:c0:00:01:5e:a4:c5:06:48:69:cf:e0:ae:72:
         b8:4d:8c:ed:12:99:5a:02:68:9c:5c:7f:8b:77:a8:61:e7:37:
         b3:eb:13:9e:3a:3f:63:18:a6:f6:c6:3d:60:90:0d:ee:c9:d6:
         c3:1f:4f:14:8c:14:d1:19:5d:1f:f4:8f:97:0d:06:da:1d:44:
         82:25:18:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:44:36 2026 by rpki-client