Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
File:                     fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft (raw, json)
Hash identifier:          vZHsuYGotaY6LfVRHoLIYutq3zl3lsHjhln3/vkeS9s=
Subject key identifier:   C4:EA:FF:73:F1:4A:E4:66:8F:CC:AC:7B:E9:EE:6C:87:E9:70:FF:40
Authority key identifier: 7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B
Certificate issuer:       /CN=A9152A4E/serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
Certificate serial:       06E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
Manifest number:          06D8
Signing time:             Sat 04 Apr 2026 22:01:16 +0000
Manifest this update:     Sat 04 Apr 2026 22:01:15 +0000
Manifest next update:     Sat 11 Apr 2026 22:01:15 +0000
Files and hashes:         1: fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl (hash: sXGwu2vpiCS/wG9fERvonwD6nJAbEF7ZexbeKC7hOgg=)
                          2: AB791BEE7BC711F0B0A56A74C4F9AE02.roa (hash: QaYEG2WSdhaWEdoGVElFyYGDrqVJROikfBh2ov/24oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl
                          rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1760 (0x6e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152A4E, serialNumber=7D73EF115B02C5E01023847A91B0B0F078B5F02B
        Validity
            Not Before: Apr  4 22:01:15 2026 GMT
            Not After : Apr 11 22:01:15 2026 GMT
        Subject: CN=69d18a2b-17d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:94:ea:98:39:a6:11:ad:23:40:3e:e3:ec:bf:
                    4d:ee:5d:74:7e:4f:0a:8d:93:ee:d1:83:4b:7f:d6:
                    f4:cc:40:c8:e4:e5:7d:e2:90:1c:61:ca:d0:eb:04:
                    e3:cd:30:04:71:b3:9b:91:b2:ed:ad:34:cf:b5:f1:
                    2a:0e:19:61:e4:d0:22:86:63:e9:b2:21:7c:f6:ba:
                    9a:b1:18:a0:c0:0c:3a:23:ed:f8:d9:21:6c:96:85:
                    22:05:85:f7:e0:ec:74:93:dd:09:2e:12:24:43:1d:
                    2f:a7:f8:7f:d6:70:32:9a:0e:e1:ad:a2:18:4e:95:
                    d7:52:c5:42:4f:81:87:13:59:93:2b:c1:24:b3:f6:
                    be:ab:46:4f:73:79:a5:f2:68:e6:5b:bf:87:25:99:
                    7a:e5:d5:d3:98:f3:a5:4b:eb:d3:8d:13:79:e0:d3:
                    66:c0:c2:0c:fb:13:ed:7e:7f:69:66:e1:03:39:e6:
                    aa:e8:bb:b5:28:43:5e:d8:8b:de:54:56:3d:92:ea:
                    05:65:1f:4e:c9:88:d3:96:ea:72:2e:f9:7e:14:1e:
                    d5:2a:21:71:dd:a0:67:2a:46:5b:2b:db:38:4f:a8:
                    3d:81:6f:cf:9f:37:0c:76:93:06:f3:b5:b9:ee:e4:
                    25:f0:50:e1:49:4c:31:1d:cb:ab:00:13:e1:03:26:
                    ae:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EA:FF:73:F1:4A:E4:66:8F:CC:AC:7B:E9:EE:6C:87:E9:70:FF:40
            X509v3 Authority Key Identifier:
                keyid:7D:73:EF:11:5B:02:C5:E0:10:23:84:7A:91:B0:B0:F0:78:B5:F0:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152A4E/E3E0846495BB11EB949FE535C4F9AE02/fXPvEVsCxeAQI4R6kbCw8Hi18Cs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:f1:29:b8:d6:dd:a2:d9:70:14:44:8b:25:e7:22:a8:cc:65:
         ca:0d:e2:24:0d:58:7a:ce:2b:ec:27:cd:6d:12:dd:ab:33:ce:
         c4:55:ed:4b:c7:07:11:a6:36:a7:ad:5b:f4:fd:bd:62:5e:ba:
         ce:ec:28:e5:14:b4:04:7c:c7:03:83:9c:4a:33:55:9b:bb:dd:
         a2:5e:20:d8:9a:f6:31:98:34:41:5c:05:e1:df:60:e6:eb:e5:
         08:89:72:70:2c:1a:fe:8b:1b:5e:44:b2:80:75:fb:0f:30:f5:
         45:47:c3:df:a5:b9:a4:1e:f1:12:b1:19:48:1c:5c:b5:70:40:
         a6:ac:ff:25:a6:ca:ad:d1:bf:9e:9e:13:8d:97:87:e8:60:1e:
         7d:98:85:3b:c6:11:56:3a:b1:35:69:7a:a9:20:69:eb:99:a3:
         53:e4:81:e1:2e:71:1b:00:7d:96:60:ba:e3:1e:a5:ef:c3:62:
         56:6e:3f:60:fd:74:6a:b8:ed:ee:44:03:b6:05:5b:6d:dd:c6:
         f2:b2:7e:66:d6:6f:f0:4f:76:f0:e2:39:0a:11:85:89:fc:fd:
         1e:77:5b:7d:6c:ff:00:60:e7:1a:72:32:28:c7:cb:5c:04:b9:
         f0:13:03:86:66:f3:4d:b2:7c:bc:95:5a:3b:63:ea:56:6a:04:
         06:33:10:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:06 2026 by rpki-client