Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
File:                     a4ZCQd8BLyOSegHA44bgeqtJxSI.mft (raw, json)
Hash identifier:          fMkUgi6mvHhMRapWVvW64idV/eDnifbqS88NcMgoef8=
Subject key identifier:   11:55:B8:7B:19:92:94:A2:9D:24:69:EB:7D:7E:1F:71:0A:02:04:67
Authority key identifier: 6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22
Certificate issuer:       /CN=A91FAD6F/serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
Certificate serial:       1BFA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
Manifest number:          1BEA
Signing time:             Sat 18 Apr 2026 16:09:32 +0000
Manifest this update:     Sat 18 Apr 2026 16:09:32 +0000
Manifest next update:     Sat 25 Apr 2026 16:09:32 +0000
Files and hashes:         1: a4ZCQd8BLyOSegHA44bgeqtJxSI.crl (hash: QjTjG74eV8HaSIwUOFgIHLnP5wlaMcC9DLzV4tN7RHc=)
                          2: 26834412EFF211E9B74F3A6AC4F9AE02.roa (hash: tA26iTcckJCEwCBsZnY5TWqIbPvv1VTq/Rbk2qWWvAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl
                          rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 16:09:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7162 (0x1bfa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FAD6F, serialNumber=6B864241DF012F23927A01C0E386E07AAB49C522
        Validity
            Not Before: Apr 18 16:09:32 2026 GMT
            Not After : Apr 25 16:09:32 2026 GMT
        Subject: CN=69e3acbc-df92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:a8:0d:16:e8:9d:32:15:23:0c:50:24:97:ef:
                    b3:4b:a9:06:ea:f4:d8:57:f0:43:a9:cf:b2:b8:e5:
                    54:a7:a2:dd:c7:8d:8f:fa:60:2f:2c:05:b5:56:24:
                    dc:04:c8:9f:c1:2d:43:cb:97:5a:1a:33:a2:39:4e:
                    9f:a8:1b:aa:3d:f2:ac:70:ab:25:18:71:6e:9d:66:
                    6f:ba:22:28:29:3d:4c:c0:d3:22:c1:d7:67:ae:c8:
                    c7:db:2e:3d:89:8a:37:4c:a2:fc:05:e5:68:5a:42:
                    0a:92:71:d7:cb:f1:57:86:b0:74:96:26:ee:f9:21:
                    ff:7d:45:3c:49:89:5e:b7:af:47:c6:8c:e6:5b:fb:
                    a2:11:e7:42:db:2e:d8:e5:d9:d1:9a:1f:73:3b:01:
                    f2:98:28:00:0e:39:60:bc:d0:1f:76:13:f3:61:80:
                    5f:53:f6:6f:d6:9b:0a:20:fa:0c:d0:c8:4f:b8:f0:
                    96:dc:b7:4b:23:7a:26:50:f7:db:15:ed:61:47:85:
                    4e:54:05:98:66:ed:d1:9c:59:81:91:81:30:6f:1e:
                    34:0b:d2:3d:92:d1:0f:ee:b6:b1:3d:9c:d4:5e:89:
                    f6:b4:fa:66:26:ed:e5:15:98:60:75:f8:7b:9a:30:
                    d6:cd:07:24:04:6f:95:a1:b8:b4:45:2a:98:c1:18:
                    25:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:55:B8:7B:19:92:94:A2:9D:24:69:EB:7D:7E:1F:71:0A:02:04:67
            X509v3 Authority Key Identifier:
                keyid:6B:86:42:41:DF:01:2F:23:92:7A:01:C0:E3:86:E0:7A:AB:49:C5:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a4ZCQd8BLyOSegHA44bgeqtJxSI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FAD6F/46C94094144B11E788A2795EC4F9AE02/a4ZCQd8BLyOSegHA44bgeqtJxSI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         12:fa:92:1b:73:fc:95:b6:ed:99:53:0d:4e:fa:f2:b4:3d:c0:
         13:ec:d3:db:88:99:dd:a1:17:aa:bf:da:55:a5:64:76:e0:ab:
         c3:8f:3c:20:06:ca:05:47:a1:82:90:54:87:8d:6d:cf:f3:ed:
         9c:f3:3e:39:2e:2d:55:9b:a5:98:6d:97:c7:67:8d:87:b2:cf:
         54:4d:1e:cb:27:10:be:d7:44:96:85:96:ad:18:2b:8c:e1:a5:
         d4:92:0f:5e:0d:17:30:1e:dc:dd:52:fd:e0:ec:cd:39:6c:8f:
         fe:86:cf:81:0b:61:5b:91:90:5b:fe:0f:b7:c4:2f:5c:53:54:
         1f:4b:c2:4a:55:c9:f8:93:83:b5:e1:c0:c5:6b:07:8c:7e:ad:
         99:26:b0:66:c0:32:63:20:c0:89:ba:7a:b4:d4:a9:14:45:8a:
         d2:3a:68:68:95:3d:54:ee:f8:fd:00:63:c9:b6:38:5b:f1:96:
         18:db:bf:a5:1e:75:d1:21:bf:8c:67:4a:1a:da:eb:9b:8d:18:
         fb:d1:b6:3a:ac:46:a7:cc:84:d1:88:7b:1e:d8:0f:61:dd:b9:
         c1:9f:1a:e2:8d:81:fb:e0:21:4d:4c:9a:5d:59:89:73:88:eb:
         23:c0:ed:7b:43:a4:80:8b:3d:f5:4c:05:cf:f8:a6:04:d5:21:
         6b:32:a3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:36:19 2026 by rpki-client