Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
File:                     E0jUaqcLAwOwQCPwSmMFi01pY7c.mft (raw, json)
Hash identifier:          ArFWS25foTjW7hoO+g+BcfCXxIFASHCIT/DTrCYA1rY=
Subject key identifier:   61:EB:8D:28:4F:C5:C5:C2:D0:7C:51:C4:A7:2A:0B:DE:38:35:BB:89
Authority key identifier: 13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7
Certificate issuer:       /CN=A91D30A3/serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
Certificate serial:       19
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
Manifest number:          16
Signing time:             Sun 05 Apr 2026 08:21:50 +0000
Manifest this update:     Sun 05 Apr 2026 08:21:49 +0000
Manifest next update:     Sun 12 Apr 2026 08:21:49 +0000
Files and hashes:         1: E0jUaqcLAwOwQCPwSmMFi01pY7c.crl (hash: 5nFj6gt3HGioCCi1lGOCKhobwtwwBN4CNJJSwpa/suM=)
                          2: 5417C204181311F1BB2D572D153D8C67.roa (hash: H47VU5jKVIkhr4upeiTnHoZK3wbZs9wvqmAqlKqwqns=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl
                          rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:21:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D30A3, serialNumber=1348D46AA70B0303B04023F04A63058B4D6963B7
        Validity
            Not Before: Apr  5 08:21:49 2026 GMT
            Not After : Apr 12 08:21:49 2026 GMT
        Subject: CN=69d21b9e-874c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:83:f2:10:7f:19:41:0d:5d:d7:40:ba:1e:d5:
                    9b:0d:f1:28:64:67:44:92:47:f6:73:9c:9c:78:1e:
                    e8:91:74:28:1e:38:f0:03:ee:83:cb:01:50:d6:1b:
                    67:75:3a:07:93:aa:48:4a:ab:48:f5:74:3a:4f:cb:
                    98:77:2e:ab:f6:2f:fc:cc:a9:4e:f2:b4:35:48:86:
                    6f:b0:e4:df:f2:27:03:5a:8d:ec:0e:d1:12:fc:d5:
                    d8:fe:64:2f:17:97:71:e2:ea:8c:05:a8:6f:e5:18:
                    e8:45:3c:3f:b7:f3:88:fd:81:92:2d:b4:5b:2b:3b:
                    a8:48:e7:9c:a6:c1:ca:eb:09:75:dc:9a:51:8a:7d:
                    2c:a6:d2:76:06:e7:ab:bd:93:41:a5:5e:e9:9d:d7:
                    43:38:0c:03:53:bf:83:4a:33:ed:82:7d:c8:3e:e3:
                    63:3e:1c:2b:67:e5:99:e0:af:3b:ea:58:80:c3:af:
                    1f:77:15:08:e8:a3:60:ff:d8:4a:b3:f2:ef:aa:09:
                    f1:44:bf:ba:cc:45:62:04:2e:f6:f4:92:32:59:41:
                    fd:17:59:31:a8:a1:7e:73:b7:8e:96:56:f9:f3:26:
                    91:fc:16:f1:8d:11:61:4f:22:60:7e:74:d7:ae:0f:
                    20:7e:a8:ad:5a:72:d3:10:da:c4:af:ea:be:59:6e:
                    47:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:EB:8D:28:4F:C5:C5:C2:D0:7C:51:C4:A7:2A:0B:DE:38:35:BB:89
            X509v3 Authority Key Identifier:
                keyid:13:48:D4:6A:A7:0B:03:03:B0:40:23:F0:4A:63:05:8B:4D:69:63:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E0jUaqcLAwOwQCPwSmMFi01pY7c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D30A3/60064BC2180811F199657056113D8C67/E0jUaqcLAwOwQCPwSmMFi01pY7c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:1a:54:5d:44:0f:6d:10:e4:82:66:29:3c:cd:dc:d3:b1:23:
         7b:b6:94:97:3c:4c:31:47:ca:03:ad:0f:02:1b:4d:d1:c8:a4:
         d6:e8:ef:7f:48:0d:56:ee:2a:71:58:a1:ba:87:8a:43:ae:e9:
         c0:ef:ef:26:d9:5e:0b:26:53:e0:5f:55:af:72:18:e6:d1:3c:
         db:bb:6e:2b:a2:98:79:68:c3:f0:33:9c:4a:10:ad:e2:91:a8:
         7c:55:e0:53:c8:0c:1f:a2:74:08:8b:42:35:3b:72:22:31:e5:
         86:3f:bb:d3:e8:95:8a:f3:3c:3b:7e:ac:23:7e:c6:04:b5:99:
         ba:a5:09:25:21:28:59:33:91:bf:1e:dd:84:67:23:c7:76:00:
         8a:7f:3f:17:cb:4c:43:26:ea:5b:85:14:f3:da:87:fb:60:18:
         3a:33:09:af:f0:b8:b7:bd:0e:28:ad:73:d8:87:41:e6:ce:4b:
         ed:4f:06:23:61:5d:1f:76:d6:d4:ed:57:16:2f:a5:08:7a:20:
         0d:8e:ef:5d:59:57:72:5c:ab:cb:c3:3f:18:cc:f9:39:ac:81:
         f7:c1:78:83:06:fc:94:40:81:32:a9:4a:55:47:8a:89:18:bc:
         1a:d5:a1:d7:ae:7e:5f:b6:45:ee:12:3e:78:da:6a:ee:ad:30:
         c2:2e:fd:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:10 2026 by rpki-client