Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
File:                     4NVEW4CxgX9i88ZKqMj21-E64QM.mft (raw, json)
Hash identifier:          f5oZQddcQgVIe2QovGasQqWBBbfifXxZX5fxk65CIpw=
Subject key identifier:   0D:40:8B:7C:BD:FF:A7:52:05:33:5B:43:00:A3:87:BD:19:35:E7:A7
Authority key identifier: E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03
Certificate issuer:       /CN=A918E469/serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
Certificate serial:       025C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
Manifest number:          0252
Signing time:             Sun 05 Apr 2026 01:51:19 +0000
Manifest this update:     Sun 05 Apr 2026 01:51:19 +0000
Manifest next update:     Sun 12 Apr 2026 01:51:19 +0000
Files and hashes:         1: 4NVEW4CxgX9i88ZKqMj21-E64QM.crl (hash: 8ORit1663T6DxQUbLjGoOTg4fAAin7d9BoyxSydqAUc=)
                          2: D3CE9058A5AD11ED95DBC66FC4F9AE02.roa (hash: 1d10xZbJawZOgiRoLspusD2wd9i5IKQYkPksSCGbosM=)
                          3: A4D24AE4C8A811F0B2500664C4F9AE02.roa (hash: 5KyYdKKzKKNZJ5o3lIKnEvZm4/+01rm3shU8ePI1af8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl
                          rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:51:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 604 (0x25c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918E469, serialNumber=E0D5445B80B1817F62F3C64AA8C8F6D7E13AE103
        Validity
            Not Before: Apr  5 01:51:19 2026 GMT
            Not After : Apr 12 01:51:19 2026 GMT
        Subject: CN=69d1c017-4aed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:5b:fd:6a:a2:c4:f2:43:ef:6e:0a:5b:6d:
                    10:9f:a6:62:d0:f6:63:19:e5:da:6c:e6:0f:8a:26:
                    af:79:b2:18:e0:dc:fb:66:da:a5:3d:22:e8:03:62:
                    94:4f:8f:11:86:c5:d4:2f:5e:68:c4:b6:48:96:27:
                    de:8d:f6:e7:8c:22:06:0d:e4:dc:b1:4a:75:71:0b:
                    2e:86:f0:aa:60:7e:51:48:64:87:78:f4:e4:c5:23:
                    01:9c:e7:85:8d:36:9a:0b:3b:6e:41:66:1d:2c:02:
                    99:ce:91:86:7c:a2:f1:c0:c2:25:63:82:16:1f:38:
                    94:84:71:39:c7:d0:d1:91:5c:12:27:0c:3f:57:79:
                    6a:e7:dd:97:a0:16:64:e1:a8:b6:9a:df:d0:b9:b7:
                    27:94:a4:0b:dc:6b:f3:8f:95:35:fe:ac:18:b6:b2:
                    3e:ba:31:14:b8:91:b8:0d:78:e0:cf:22:f1:32:e6:
                    eb:23:6c:75:bd:4d:8f:ea:b8:44:9e:07:21:e1:d6:
                    70:bf:e1:ba:be:b8:bd:c6:e3:ae:21:bd:7c:9d:21:
                    65:a8:82:13:24:1b:42:a1:ac:80:28:57:54:d1:8c:
                    14:3d:d4:b2:3e:07:98:1d:24:db:1e:94:fe:32:1d:
                    4f:fb:d0:15:ad:8f:93:d3:90:96:e7:51:57:f4:ad:
                    85:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:40:8B:7C:BD:FF:A7:52:05:33:5B:43:00:A3:87:BD:19:35:E7:A7
            X509v3 Authority Key Identifier:
                keyid:E0:D5:44:5B:80:B1:81:7F:62:F3:C6:4A:A8:C8:F6:D7:E1:3A:E1:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4NVEW4CxgX9i88ZKqMj21-E64QM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918E469/EFA563C8A5A911ED8FE30553C4F9AE02/4NVEW4CxgX9i88ZKqMj21-E64QM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:12:0a:99:ae:5a:46:36:c3:29:1f:e1:7d:33:7b:cc:ab:
         1e:8f:fc:df:16:71:42:a4:9d:d3:4c:2e:72:9e:ed:4e:6a:62:
         03:89:56:e3:cd:32:55:91:88:e2:15:a2:6c:62:95:9c:67:68:
         54:63:aa:60:0e:c3:38:91:8e:7e:f8:c3:18:b5:ed:c7:ee:a4:
         09:9f:35:1c:70:77:9b:75:c8:4f:4a:ae:21:44:6d:51:34:c6:
         ab:2f:2e:60:d6:22:11:da:f1:f9:bd:9d:da:3f:5f:58:83:bd:
         7c:dc:81:53:93:ad:dd:fd:5f:89:10:8d:1c:ff:64:1d:4a:21:
         c2:2a:18:54:f2:da:91:68:02:cc:01:c0:fc:f5:70:41:20:9b:
         19:b3:9b:75:dd:52:3a:1c:84:cf:c9:89:a9:4d:7a:93:45:fd:
         89:95:ed:b5:a3:1c:07:f0:73:22:2a:a3:05:c3:d9:91:ef:95:
         2a:63:7d:39:5d:8e:cd:27:0c:1d:4f:4f:47:2d:bf:35:ca:b4:
         f9:a6:d0:08:c5:f3:44:99:72:a7:06:10:d2:72:be:57:b5:bc:
         f8:36:7b:75:8d:21:d5:44:4f:02:8d:68:7e:f8:c3:ab:f0:8a:
         db:71:04:c2:d2:7b:bb:e1:08:56:c2:c1:63:50:34:8a:78:e5:
         a5:95:5d:b3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAlwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEU0NjkxMTAvBgNVBAUTKEUwRDU0NDVCODBCMTgxN0Y2MkYzQzY0QUE4QzhGNkQ3
RTEzQUUxMDMwHhcNMjYwNDA1MDE1MTE5WhcNMjYwNDEyMDE1MTE5WjAYMRYwFAYD
VQQDEw02OWQxYzAxNy00YWVkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwBVb/WqixPJD724KW20Qn6Zi0PZjGeXabOYPiiavebIY4Nz7ZtqlPSLoA2KU
T48RhsXUL15oxLZIlifejfbnjCIGDeTcsUp1cQsuhvCqYH5RSGSHePTkxSMBnOeF
jTaaCztuQWYdLAKZzpGGfKLxwMIlY4IWHziUhHE5x9DRkVwSJww/V3lq592XoBZk
4ai2mt/QubcnlKQL3Gvzj5U1/qwYtrI+ujEUuJG4DXjgzyLxMubrI2x1vU2P6rhE
ngch4dZwv+G6vri9xuOuIb18nSFlqIITJBtCoayAKFdU0YwUPdSyPgeYHSTbHpT+
Mh1P+9AVrY+T05CW51FX9K2FjQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA1Ai3y9
/6dSBTNbQwCjh70ZNeenMB8GA1UdIwQYMBaAFODVRFuAsYF/YvPGSqjI9tfhOuED
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RTQ2OS9FRkE1NjNDOEE1
QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdYOWk4OFpLcU1qMjEtRTY0
UU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzROVkVXNEN4Z1g5aTg4WktxTWoyMS1FNjRRTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RTQ2OS9FRkE1NjNDOEE1QTkxMUVEOEZFMzA1NTNDNEY5QUUwMi80TlZFVzRDeGdY
OWk4OFpLcU1qMjEtRTY0UU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEACcISCpmuWkY2wykf4X0ze8yrHo/83xZxQqSd00wucp7tTmpiA4lW480yVZGI
4hWibGKVnGdoVGOqYA7DOJGOfvjDGLXtx+6kCZ81HHB3m3XIT0quIURtUTTGqy8u
YNYiEdrx+b2d2j9fWIO9fNyBU5Ot3f1fiRCNHP9kHUohwioYVPLakWgCzAHA/PVw
QSCbGbObdd1SOhyEz8mJqU16k0X9iZXttaMcB/BzIiqjBcPZke+VKmN9OV2OzScM
HU9PRy2/Ncq0+abQCMXzRJlypwYQ0nK+V7W8+DZ7dY0h1URPAo1ofvjDq/CK23EE
wtJ7u+EIVsLBY1A0injlpZVdsw==
-----END CERTIFICATE-----
Generated at Sun Apr 5 20:01:25 2026 by rpki-client