Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
File:                     4VW4KofSjod2AvmU-P_T50Sq9IA.mft (raw, json)
Hash identifier:          WXtqvMfPASR9bzlTcJhNRP2mrtCNjoh8jFiBjlBIHcY=
Subject key identifier:   8C:5E:EE:7D:CB:84:2A:19:C4:07:4F:42:07:7D:BF:97:94:01:53:15
Authority key identifier: E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80
Certificate issuer:       /CN=A91B625F/serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
Certificate serial:       08EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
Manifest number:          0864
Signing time:             Thu 30 Apr 2026 21:04:43 +0000
Manifest this update:     Thu 30 Apr 2026 21:04:43 +0000
Manifest next update:     Thu 07 May 2026 21:04:43 +0000
Files and hashes:         1: 4VW4KofSjod2AvmU-P_T50Sq9IA.crl (hash: 1/N6kmZZP42pLSFi1rtMTXZIiqhz5+/g/9MwCIb8Xsk=)
                          2: 1BDAA63E12B211EBA631032CC4F9AE02.roa (hash: sYhhaYoxdAzhClysEfyco8DOZT06ACPXGgRoT8fF4sA=)
                          3: 82CA92C4703A11EBB9A2D47AC4F9AE02.roa (hash: nyqS5eXZEzcdM+pwx4cIcrVn+dhu/AnRzLZWpHkKUok=)
                          4: F255E05612DB11EBBE14D853C4F9AE02.roa (hash: vLQDmUgwBRf1LfHES4fcrNN9SFNnqF9R/jcKitT1EiY=)
                          5: BBBC061A122711EB952CAB3FC4F9AE02.roa (hash: C0xBTRlD8HLET0RP6eUIhENntX7keWJnMKK0uyPRa78=)
                          6: 86CD7C2E72B011EB9FC4FE4EC4F9AE02.roa (hash: OMXUb6Lx3/4kaa1T15ov60ZpldaZCJFTzLaLw/ElCUo=)
                          7: C13E824AC49F11EBAC936D7AC4F9AE02.roa (hash: yHJ8vOtxRGFU0cYTCITAbcI8dCzSp/DJjmxjwuQbPrM=)
                          8: 190D1EDC32C411EB98F62F5FC4F9AE02.roa (hash: rjElA2OWEyqb1O0JSaEyfj+lEFs3L7mpqepJIx3ebGA=)
                          9: F5D6628C205011EB9EC2AA46C4F9AE02.roa (hash: GF1Q9WC2AFPyPxrIdnDx0DujlM4kUztE9+LDlhci/E4=)
                          10: 0989F3EE120911EB83107638C4F9AE02.roa (hash: 4Y9nNKAigvhYjcu279sIrumnfKE8nPHZdarr6Cb3oLQ=)
                          11: AD0EFB005DFD11EBAD26AA4BC4F9AE02.roa (hash: C//L8dqksd8wIiYlgl9aF5lle1XW+/2dgZ+Mvuzm+b0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl
                          rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 07 May 2026 21:04:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2287 (0x8ef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B625F, serialNumber=E155B82A87D28E877602F994F8FFD3E744AAF480
        Validity
            Not Before: Apr 30 21:04:43 2026 GMT
            Not After : May  7 21:04:43 2026 GMT
        Subject: CN=69f3c3eb-3eb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:a3:0d:f1:9c:c2:62:2f:2e:71:da:67:07:06:
                    33:3a:02:10:6c:b7:aa:14:88:f1:32:8f:f7:39:e0:
                    38:36:2d:44:b9:2d:a6:1d:c8:c5:fa:20:ec:92:7f:
                    12:d5:08:94:5b:37:33:92:41:2a:d8:f7:4d:5e:e1:
                    c8:0a:cf:5c:4b:35:90:21:45:eb:8c:4b:5f:ac:1c:
                    0e:cb:71:0e:ba:87:40:e7:2a:33:ba:1b:7b:82:38:
                    ac:2f:3c:27:55:40:ce:cd:d3:7f:d6:58:de:3b:4b:
                    13:24:51:4b:3f:68:40:7e:fa:9d:ae:92:84:ee:11:
                    2a:d8:59:cb:f6:52:7c:49:9f:48:d6:7a:3f:eb:13:
                    cd:77:a2:84:6e:d2:1f:36:73:34:8e:1f:60:6e:8f:
                    98:a3:be:21:61:8c:6f:3f:14:db:35:8f:a6:14:ca:
                    6a:6c:d5:91:72:3a:6a:f3:c8:e6:03:fe:90:e1:46:
                    8c:f0:a8:8d:fd:7c:ac:eb:01:68:1c:a0:82:44:09:
                    d7:e8:5b:a2:01:08:2e:d3:9a:4b:dc:d5:bd:02:00:
                    e9:ed:70:c8:fe:73:c7:85:77:24:c3:db:21:f3:57:
                    31:5b:cb:ac:bd:bd:28:02:ff:a0:90:bf:e1:ad:d5:
                    d3:3a:99:45:cc:ff:e9:d7:1a:3a:d7:82:42:9d:f5:
                    79:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:5E:EE:7D:CB:84:2A:19:C4:07:4F:42:07:7D:BF:97:94:01:53:15
            X509v3 Authority Key Identifier:
                keyid:E1:55:B8:2A:87:D2:8E:87:76:02:F9:94:F8:FF:D3:E7:44:AA:F4:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4VW4KofSjod2AvmU-P_T50Sq9IA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B625F/22D91F7211CE11EB8AD05A2BC4F9AE02/4VW4KofSjod2AvmU-P_T50Sq9IA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:9a:2e:b7:5f:47:ef:cb:81:e0:cf:da:09:7c:7f:79:ae:1b:
         f5:95:1d:87:30:65:6f:88:8c:f7:24:6f:f6:25:ca:2c:4f:a4:
         ce:27:f8:27:9d:39:1a:7d:49:ba:2e:7c:7e:45:c4:30:ec:a5:
         eb:c9:69:b8:68:37:bb:83:0a:6c:2d:c2:36:c8:2e:22:5f:a2:
         73:ee:9b:84:9b:94:1b:05:94:e5:3e:22:6d:96:67:2a:f6:44:
         97:fa:3b:46:8c:b1:2b:b9:9c:e8:e7:03:19:7e:3e:c8:54:73:
         22:d1:c2:0d:bc:2a:46:99:8e:a2:a9:d8:8c:80:a9:61:37:0e:
         de:66:cd:75:68:b4:ae:1f:ab:68:43:93:8b:1d:13:66:b3:93:
         39:f5:0f:6b:b6:12:74:19:07:9a:72:89:df:9d:bc:ad:0b:27:
         f0:5e:3e:2d:9e:cd:3e:ac:e2:dc:84:f0:f1:1f:54:4f:26:a5:
         e5:fe:90:67:02:75:1f:f9:ae:22:29:9c:cf:5b:b4:e6:96:04:
         54:4a:d9:90:46:10:4c:c9:4c:03:9b:77:ce:90:f0:30:69:6d:
         17:83:7d:c3:35:37:72:5c:68:42:b4:1e:8e:aa:4b:ae:55:78:
         7c:30:b9:3e:61:77:2c:26:1f:7a:4f:8f:3f:33:52:cd:0a:90:
         9d:61:f6:c4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCO8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjYyNUYxMTAvBgNVBAUTKEUxNTVCODJBODdEMjhFODc3NjAyRjk5NEY4RkZEM0U3
NDRBQUY0ODAwHhcNMjYwNDMwMjEwNDQzWhcNMjYwNTA3MjEwNDQzWjAYMRYwFAYD
VQQDEw02OWYzYzNlYi0zZWIyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA36MN8ZzCYi8ucdpnBwYzOgIQbLeqFIjxMo/3OeA4Ni1EuS2mHcjF+iDskn8S
1QiUWzczkkEq2PdNXuHICs9cSzWQIUXrjEtfrBwOy3EOuodA5yozuht7gjisLzwn
VUDOzdN/1ljeO0sTJFFLP2hAfvqdrpKE7hEq2FnL9lJ8SZ9I1no/6xPNd6KEbtIf
NnM0jh9gbo+Yo74hYYxvPxTbNY+mFMpqbNWRcjpq88jmA/6Q4UaM8KiN/Xys6wFo
HKCCRAnX6FuiAQgu05pL3NW9AgDp7XDI/nPHhXckw9sh81cxW8usvb0oAv+gkL/h
rdXTOplFzP/p1xo614JCnfV50wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFIxe7n3L
hCoZxAdPQgd9v5eUAVMVMB8GA1UdIwQYMBaAFOFVuCqH0o6HdgL5lPj/0+dEqvSA
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCNjI1Ri8yMkQ5MUY3MjEx
Q0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pvZDJBdm1VLVBfVDUwU3E5
SUEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzRWVzRLb2ZTam9kMkF2bVUtUF9UNTBTcTlJQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
NjI1Ri8yMkQ5MUY3MjExQ0UxMUVCOEFEMDVBMkJDNEY5QUUwMi80Vlc0S29mU2pv
ZDJBdm1VLVBfVDUwU3E5SUEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC5out19H78uB4M/aCXx/ea4b9ZUdhzBlb4iM9yRv9iXKLE+kzif4J505Gn1J
ui58fkXEMOyl68lpuGg3u4MKbC3CNsguIl+ic+6bhJuUGwWU5T4ibZZnKvZEl/o7
RoyxK7mc6OcDGX4+yFRzItHCDbwqRpmOoqnYjICpYTcO3mbNdWi0rh+raEOTix0T
ZrOTOfUPa7YSdBkHmnKJ3528rQsn8F4+LZ7NPqzi3ITw8R9UTyal5f6QZwJ1H/mu
Iimcz1u05pYEVErZkEYQTMlMA5t3zpDwMGltF4N9wzU3clxoQrQejqpLrlV4fDC5
PmF3LCYfek+PPzNSzQqQnWH2xA==
-----END CERTIFICATE-----
Generated at Sat May 2 06:44:18 2026 by rpki-client