Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
File:                     5muokllQFHlLtkUdFCgchAAgYgM.mft (raw, json)
Hash identifier:          Vod2UJ/4ZbmoRriQ+3IAUmVuedfsjCaiqOuBkd4zzJ4=
Subject key identifier:   13:C2:63:1C:F2:23:10:98:4A:F0:68:F1:63:FA:4E:FF:65:56:4D:25
Authority key identifier: E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03
Certificate issuer:       /CN=A9140BA4/serialNumber=E66BA892595014794BB6451D14281C8400206203
Certificate serial:       1513
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
Manifest number:          150E
Signing time:             Sat 04 Apr 2026 16:43:44 +0000
Manifest this update:     Sat 04 Apr 2026 16:43:43 +0000
Manifest next update:     Sat 11 Apr 2026 16:43:43 +0000
Files and hashes:         1: 5muokllQFHlLtkUdFCgchAAgYgM.crl (hash: dYe5YeGYFF56xdo2DlaMQDgE8NPapMGVajwWjsoeqwY=)
                          2: 3FF298D41AFF11EFB20C2648C4F9AE02.roa (hash: WJKNo0fYbhAjCt5a3KR93LYcm+nLeCFwQ8ga/woExmY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl
                          rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:43:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5395 (0x1513)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9140BA4, serialNumber=E66BA892595014794BB6451D14281C8400206203
        Validity
            Not Before: Apr  4 16:43:43 2026 GMT
            Not After : Apr 11 16:43:43 2026 GMT
        Subject: CN=69d13fbf-11f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:89:02:e8:8f:72:8c:bd:fb:c7:10:6f:1e:db:
                    6d:39:e3:8b:e5:57:5c:5c:0d:08:41:9d:0b:f1:db:
                    4a:c5:00:16:8a:c7:88:c1:5e:31:0b:81:85:fa:59:
                    ad:c4:b1:95:69:ab:99:6d:ad:d6:17:a7:50:25:23:
                    e7:0f:e3:02:5f:10:32:6f:30:91:3b:f4:fc:99:cf:
                    65:7e:8f:98:26:ab:86:90:2c:af:4b:39:e2:61:a6:
                    4d:dc:61:e0:de:0c:53:1e:5b:a8:50:6a:82:28:8b:
                    e4:db:5c:ac:55:6c:ab:fc:a7:c6:64:71:75:65:35:
                    67:b3:39:f6:60:57:a2:64:d5:6c:09:c4:2e:77:84:
                    d6:4c:f5:20:9b:20:24:9a:e8:ed:9a:da:34:13:40:
                    a0:0f:b1:6f:03:b0:d8:69:73:4a:03:d9:08:f1:36:
                    96:ab:c0:79:5e:37:d0:75:29:52:ea:3f:94:f2:0c:
                    1d:b7:f5:ce:b7:99:12:8a:1a:5d:bf:3f:07:86:e2:
                    e9:f0:aa:6b:e0:9b:fe:d8:7d:59:ba:d9:d3:ec:65:
                    c3:47:a1:4d:8c:ca:09:5d:b0:f9:c8:b8:6b:8a:24:
                    15:40:92:d8:39:8d:17:52:0b:e0:c5:e7:56:6a:61:
                    ce:e1:f4:e5:28:b4:c0:a3:c9:31:75:23:f6:40:a0:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:C2:63:1C:F2:23:10:98:4A:F0:68:F1:63:FA:4E:FF:65:56:4D:25
            X509v3 Authority Key Identifier:
                keyid:E6:6B:A8:92:59:50:14:79:4B:B6:45:1D:14:28:1C:84:00:20:62:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5muokllQFHlLtkUdFCgchAAgYgM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9140BA4/47E9268668ED11E890E39549C4F9AE02/5muokllQFHlLtkUdFCgchAAgYgM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:77:30:ac:db:a2:d2:3f:36:90:ef:53:40:16:ca:da:44:f1:
         dd:80:79:af:24:16:80:f4:ee:e1:b2:fe:8a:86:72:0c:c9:41:
         a3:23:c7:d7:80:86:f9:f1:55:32:eb:44:3f:4c:e0:a6:67:8b:
         50:50:e5:49:b5:c6:19:df:c6:11:22:fd:81:85:f9:c1:bb:22:
         81:44:7c:74:1f:2b:6c:96:78:82:f1:b1:9b:3a:61:43:10:7c:
         47:f5:89:a7:5a:5e:1c:dd:26:a2:0d:5e:a4:06:e9:71:99:4a:
         eb:9f:4b:d3:b9:43:4a:89:3b:be:ab:ef:bd:ca:24:28:dc:bb:
         2d:05:86:be:6b:e6:c1:70:1e:48:6d:1a:e8:f3:fd:1e:dd:4b:
         73:1c:2b:97:51:2e:90:ac:51:c9:bf:32:fc:70:be:a4:65:85:
         12:e2:1f:b0:1b:d0:0b:e6:ac:c9:30:26:cc:45:6b:dc:d8:f3:
         25:19:8f:81:a7:cd:a1:e7:cb:64:7a:62:4a:af:da:b5:c2:4c:
         0b:c7:b6:ba:6b:72:7d:95:cc:b6:b8:e3:da:88:8a:f9:93:b9:
         33:c0:5b:ae:25:33:09:05:39:6a:5e:9a:b0:7d:35:94:41:e7:
         5c:aa:ae:85:a4:e0:80:5c:bf:4c:cd:42:0d:59:97:7a:41:08:
         d8:69:a4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:03 2026 by rpki-client