Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
File:                     SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft (raw, json)
Hash identifier:          2rRxP7y626wDCE/B76nGepOfjvA/dHsoqgnK+rKTidY=
Subject key identifier:   A1:DD:D4:0B:79:02:99:3F:72:5E:09:12:38:98:F6:D3:4B:4A:D2:33
Authority key identifier: 4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F
Certificate issuer:       /CN=A91E01A9/serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
Certificate serial:       2070
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
Manifest number:          2061
Signing time:             Sat 04 Apr 2026 15:53:04 +0000
Manifest this update:     Sat 04 Apr 2026 15:53:04 +0000
Manifest next update:     Sat 11 Apr 2026 15:53:04 +0000
Files and hashes:         1: SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl (hash: QaM9SB0t/eD4ykOkvjRexNPL8RceDTm5yIKRZ+an+/Q=)
                          2: A212A64854F611E79DF7E643C4F9AE02.roa (hash: vjWgPjyP1dqeWvKxkKTcsD2vuPHSp4MP/FzZfYjUz8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl
                          rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:53:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8304 (0x2070)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01A9, serialNumber=4A575F2BF3312462F856461AE9DDD0A3844ABD2F
        Validity
            Not Before: Apr  4 15:53:04 2026 GMT
            Not After : Apr 11 15:53:04 2026 GMT
        Subject: CN=69d133e0-e11b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:50:78:f3:00:fe:1b:60:cf:7c:86:6f:56:
                    18:cf:cd:42:4d:94:ea:ea:22:a4:86:60:7f:e2:dc:
                    02:4e:ea:cd:59:bd:54:f6:27:2d:67:b5:fb:cc:80:
                    db:5d:db:1f:97:55:1b:59:15:3f:ff:d9:78:49:7b:
                    ed:fd:aa:6b:94:7a:2b:7b:76:43:c6:51:f4:95:0b:
                    f7:70:6b:88:5a:e0:57:e1:2f:7c:c1:3a:fc:60:34:
                    da:7f:44:d0:88:0a:a0:f2:20:d7:ca:97:33:0f:7c:
                    61:60:b5:45:17:27:67:f2:44:9c:2b:cc:7d:87:6c:
                    15:9c:95:4a:49:d3:6a:7c:0a:02:e7:62:7b:37:cc:
                    69:b6:b1:48:4e:24:a3:dd:94:12:2b:f8:c2:c7:71:
                    a5:9d:93:4d:d4:c1:eb:56:97:90:1f:52:f5:c0:f4:
                    0d:60:00:2c:c8:ed:61:26:71:9f:7e:7c:ac:73:c9:
                    13:07:1b:01:79:eb:1c:af:b9:8f:94:07:50:4e:58:
                    f0:94:86:19:bb:c4:25:8f:5f:ac:e1:d7:df:a5:50:
                    47:f4:db:6c:4f:e4:f9:10:b8:fc:7a:ab:1f:39:93:
                    72:ca:1d:bc:31:af:e3:a7:a2:55:2d:ae:52:45:58:
                    d7:b8:3a:0d:57:11:59:91:d4:ea:56:a1:c6:26:f8:
                    8a:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:DD:D4:0B:79:02:99:3F:72:5E:09:12:38:98:F6:D3:4B:4A:D2:33
            X509v3 Authority Key Identifier:
                keyid:4A:57:5F:2B:F3:31:24:62:F8:56:46:1A:E9:DD:D0:A3:84:4A:BD:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SldfK_MxJGL4VkYa6d3Qo4RKvS8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01A9/83C31108335C11E6A8000F4DC4F9AE02/SldfK_MxJGL4VkYa6d3Qo4RKvS8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:b3:93:8b:1b:58:2a:7f:b4:82:f9:d8:f4:ca:81:00:53:12:
         40:00:97:19:44:dd:da:ce:61:49:75:cc:ba:c4:5d:88:a3:4b:
         98:d6:b7:7f:92:06:3b:24:7a:c2:f2:25:3b:57:a7:b3:4a:5c:
         59:21:00:f7:fd:15:93:0a:d0:a3:56:b2:22:2c:59:05:5f:7c:
         d6:45:b8:ca:56:87:b2:99:d5:85:1c:82:3f:cb:c5:c8:b3:0f:
         53:52:3a:2b:81:b5:42:88:92:98:64:e1:5d:1d:d1:c6:d7:e8:
         f3:f5:91:ea:52:ea:26:f5:31:68:16:e7:fb:28:5d:8a:b2:2f:
         c4:bd:a4:90:4a:e1:99:38:91:b5:02:db:4f:83:e7:d7:cf:2d:
         ff:e3:ad:3c:82:3a:8a:37:f9:b1:96:88:41:21:5c:fc:aa:1d:
         77:fe:8c:24:3d:c6:6f:63:e9:5d:22:b7:f4:8d:ce:96:79:7d:
         24:64:39:b3:b0:3e:46:c3:bc:34:87:05:4f:a9:a9:65:ab:dd:
         a9:36:f8:6b:f3:ce:69:4e:b3:ae:b1:6f:7b:3b:3b:a4:b9:82:
         01:1c:7d:a2:83:c9:b9:6d:79:ab:78:85:36:ab:21:f0:dc:1a:
         70:14:87:93:61:8d:98:67:06:35:12:05:2f:41:c5:f3:9b:95:
         3c:7d:56:24
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICIHAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQTkxMTAvBgNVBAUTKDRBNTc1RjJCRjMzMTI0NjJGODU2NDYxQUU5REREMEEz
ODQ0QUJEMkYwHhcNMjYwNDA0MTU1MzA0WhcNMjYwNDExMTU1MzA0WjAYMRYwFAYD
VQQDEw02OWQxMzNlMC1lMTFiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAv6JQePMA/htgz3yGb1YYz81CTZTq6iKkhmB/4twCTurNWb1U9ictZ7X7zIDb
Xdsfl1UbWRU//9l4SXvt/aprlHore3ZDxlH0lQv3cGuIWuBX4S98wTr8YDTaf0TQ
iAqg8iDXypczD3xhYLVFFydn8kScK8x9h2wVnJVKSdNqfAoC52J7N8xptrFITiSj
3ZQSK/jCx3GlnZNN1MHrVpeQH1L1wPQNYAAsyO1hJnGffnysc8kTBxsBeescr7mP
lAdQTljwlIYZu8Qlj1+s4dffpVBH9NtsT+T5ELj8eqsfOZNyyh28Ma/jp6JVLa5S
RVjXuDoNVxFZkdTqVqHGJviKCQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKHd1At5
Apk/cl4JEjiY9tNLStIzMB8GA1UdIwQYMBaAFEpXXyvzMSRi+FZGGund0KOESr0v
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBOS84M0MzMTEwODMz
NUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpHTDRWa1lhNmQzUW80Ukt2
UzguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1NsZGZLX014SkdMNFZrWWE2ZDNRbzRSS3ZTOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFBOS84M0MzMTEwODMzNUMxMUU2QTgwMDBGNERDNEY5QUUwMi9TbGRmS19NeEpH
TDRWa1lhNmQzUW80Ukt2UzgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhrOTixtYKn+0gvnY9MqBAFMSQACXGUTd2s5hSXXMusRdiKNLmNa3f5IGOyR6
wvIlO1ens0pcWSEA9/0VkwrQo1ayIixZBV981kW4ylaHspnVhRyCP8vFyLMPU1I6
K4G1QoiSmGThXR3Rxtfo8/WR6lLqJvUxaBbn+yhdirIvxL2kkErhmTiRtQLbT4Pn
188t/+OtPII6ijf5sZaIQSFc/Kodd/6MJD3Gb2PpXSK39I3Olnl9JGQ5s7A+RsO8
NIcFT6mpZavdqTb4a/POaU6zrrFvezs7pLmCARx9ooPJuW15q3iFNqsh8NwacBSH
k2GNmGcGNRIFL0HF85uVPH1WJA==
-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:37 2026 by rpki-client