Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
File:                     p0l4jLT0H9heesJjyHW36vLA540.mft (raw, json)
Hash identifier:          auf6KdH9DN92oiuzINxculPrMLhqiIz0KNweIRiqEI8=
Subject key identifier:   EF:DF:D7:81:B0:9A:4F:B9:4B:85:D1:54:C4:2F:6A:53:27:75:D9:41
Authority key identifier: A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D
Certificate issuer:       /CN=A911C20D/serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
Certificate serial:       0183
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
Manifest number:          0177
Signing time:             Sun 05 Apr 2026 04:14:18 +0000
Manifest this update:     Sun 05 Apr 2026 04:14:17 +0000
Manifest next update:     Sun 12 Apr 2026 04:14:17 +0000
Files and hashes:         1: p0l4jLT0H9heesJjyHW36vLA540.crl (hash: U7x4Z7Tgx2u+zFD1tBwj/6AJMjYf1pzaJL98CSkg5vI=)
                          2: 4BA3FAC8B53311EFACDFC575C4F9AE02.roa (hash: YSVC2OmaPeg+hkfiwDhK7p7s6vbq47iwF4vLH9/oI98=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl
                          rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:14:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 387 (0x183)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C20D, serialNumber=A749788CB4F41FD85E7AC263C875B7EAF2C0E78D
        Validity
            Not Before: Apr  5 04:14:17 2026 GMT
            Not After : Apr 12 04:14:17 2026 GMT
        Subject: CN=69d1e19a-ca80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:90:fa:7f:62:5c:99:a5:b0:18:71:92:b3:58:
                    a2:5d:15:2d:42:7f:5c:ea:ab:81:ba:9b:2d:b4:c0:
                    f6:51:2c:a0:1f:ab:09:77:82:6f:4a:cf:9a:f4:55:
                    60:77:3e:40:7e:46:05:8d:9a:85:c1:6b:29:65:d9:
                    f0:fa:e2:57:ac:64:99:35:1a:d5:a1:8f:0d:52:98:
                    ff:43:75:de:d5:b1:ab:44:01:4f:0b:2e:eb:e6:f3:
                    ec:b2:ee:c1:e9:31:8f:be:a0:2f:a0:b3:61:e4:c6:
                    a3:7c:77:23:50:26:b3:f7:f5:24:a8:22:17:50:82:
                    c6:6e:e1:aa:dc:f4:c0:a0:00:77:b1:61:03:37:69:
                    6e:a6:c1:cb:01:6c:a8:de:fd:ac:59:a7:69:08:0e:
                    ec:ec:67:ef:bd:7c:84:14:43:7f:29:37:6c:63:f1:
                    a9:d4:b4:c1:ad:34:f1:22:ae:e5:8a:c8:4f:29:7b:
                    1a:ee:66:07:27:e9:7c:81:5f:36:55:75:2f:b1:6a:
                    ec:bc:ca:93:99:1c:f5:bf:7e:db:e0:f7:74:6c:6b:
                    2b:1a:16:6a:a0:81:ea:c1:6e:b7:4b:78:f7:8d:bd:
                    80:13:24:b1:ee:c9:f6:8e:56:a1:bc:53:41:c3:10:
                    fe:22:9a:92:da:d9:56:ad:2d:fa:9c:fc:fe:e4:e5:
                    e5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DF:D7:81:B0:9A:4F:B9:4B:85:D1:54:C4:2F:6A:53:27:75:D9:41
            X509v3 Authority Key Identifier:
                keyid:A7:49:78:8C:B4:F4:1F:D8:5E:7A:C2:63:C8:75:B7:EA:F2:C0:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p0l4jLT0H9heesJjyHW36vLA540.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C20D/8868A11E03A111EF8926C02AC4F9AE02/p0l4jLT0H9heesJjyHW36vLA540.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:db:b4:ed:8a:e8:61:76:0d:8f:9a:f1:f7:99:37:01:dd:07:
         37:57:11:38:48:1a:e2:80:76:77:1c:6a:36:d4:be:21:f9:a2:
         d2:3b:ad:d0:4b:9a:df:32:6d:0a:c0:4e:e5:13:8b:be:ca:8b:
         93:23:00:70:f8:b3:50:a2:bb:5f:05:46:dc:14:37:4b:92:73:
         64:39:65:46:45:47:14:aa:22:97:f0:5d:08:3c:3f:28:87:da:
         0b:35:cd:2c:65:b2:22:c3:c5:ca:94:92:eb:20:1b:df:bf:ee:
         cb:5f:98:a7:b2:77:84:a1:b0:0d:33:39:b1:96:28:3e:2a:89:
         9d:b9:33:52:7e:59:47:65:78:30:49:9b:48:0a:8f:59:4e:c9:
         cc:93:33:4b:87:ca:9d:dd:1d:ed:3f:df:3b:93:48:be:ee:3e:
         e1:22:60:16:f7:9d:d3:af:92:8a:9d:d2:a4:d4:b6:ff:ba:a5:
         0e:c6:02:db:b9:83:a5:f8:7b:69:5a:42:49:63:8e:44:4e:52:
         fd:70:a1:45:13:bf:1c:16:83:00:96:7d:67:b7:f4:6e:7e:c2:
         26:89:60:7f:9b:fa:e0:70:61:4e:53:44:9b:53:be:54:7c:ab:
         67:45:65:cd:6b:43:d6:84:af:99:b8:6f:bc:01:2f:80:22:dc:
         f2:92:df:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:49 2026 by rpki-client