Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
File:                     feYHxGFdegH73UqGrVRZQBp1mSE.mft (raw, json)
Hash identifier:          WSRkJ0bHtwctiLJhPQOSwb385FEsy/lbj8SeK/dUj8Y=
Subject key identifier:   95:26:1E:1F:48:A9:51:F0:6C:BD:23:08:05:62:3E:D3:0F:98:94:5F
Authority key identifier: 7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21
Certificate issuer:       /CN=A912442A/serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
Certificate serial:       01A4
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
Manifest number:          0190
Signing time:             Tue 21 Apr 2026 00:44:13 +0000
Manifest this update:     Tue 21 Apr 2026 00:44:13 +0000
Manifest next update:     Tue 28 Apr 2026 00:44:13 +0000
Files and hashes:         1: feYHxGFdegH73UqGrVRZQBp1mSE.crl (hash: 3rF2exDXpTiFQ2U3Vv0GRgEz0xnsbRNYdeG0Q/TpSgM=)
                          2: B374CCF4764F11EFA343104DC4F9AE02.roa (hash: 2z+iQiOun9JI4f1KdKp9Mav00oLerc8hIDbuecZ9Avw=)
                          3: DF1CE5761E4811EF83D08212C4F9AE02.roa (hash: 9ZQJr8Gl5XR1HqKf3vTUBCTUhwF96wb5DS0J+eswdL0=)
                          4: 681098C2CDA911EF89DEEE2CC4F9AE02.roa (hash: 10jgAa/oO9QvVhmXa5ryYi3X/Q5r2nOHe8sXNKlu0sI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl
                          rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 00:44:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 420 (0x1a4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912442A, serialNumber=7DE607C4615D7A01FBDD4A86AD5459401A759921
        Validity
            Not Before: Apr 21 00:44:13 2026 GMT
            Not After : Apr 28 00:44:13 2026 GMT
        Subject: CN=69e6c85d-dd2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:bb:27:7d:69:51:4c:b7:84:69:a5:a0:05:aa:
                    4e:f8:84:da:98:d5:e4:c9:04:c9:a2:b1:17:67:f2:
                    1f:57:8a:43:57:a3:10:a7:18:71:fa:ff:02:c9:db:
                    70:9f:c3:2f:15:7c:2b:20:d5:0e:67:57:45:6b:b5:
                    32:97:ea:d6:a6:d7:fa:1b:82:f0:44:fb:44:74:9e:
                    73:63:27:92:75:6d:75:b7:94:b1:5c:ef:f0:05:e2:
                    75:09:a3:69:23:a3:6e:03:8f:71:74:21:30:60:1f:
                    c4:54:5e:25:b0:15:70:5e:0d:32:e8:e2:a0:e6:d5:
                    59:52:2c:95:4c:d1:14:05:e1:f6:44:e4:53:16:ce:
                    5d:d2:74:26:95:ff:c4:59:15:45:f2:c5:2f:69:e7:
                    76:25:f2:7d:cf:6d:f5:82:c9:03:31:94:09:2a:73:
                    cc:3a:c9:93:83:23:20:af:f0:f1:98:da:76:78:bc:
                    c0:1a:23:d9:6d:09:68:94:fe:5d:71:02:08:b3:31:
                    b0:36:7d:2f:74:d1:cd:f8:33:61:64:4c:e5:b8:ef:
                    17:09:92:0c:56:17:d0:3e:27:3b:63:5d:7f:02:a5:
                    d3:41:02:20:67:43:08:1e:b2:5c:01:12:17:a7:3d:
                    00:62:18:d4:0b:33:18:14:66:13:ef:a6:42:ba:92:
                    06:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:26:1E:1F:48:A9:51:F0:6C:BD:23:08:05:62:3E:D3:0F:98:94:5F
            X509v3 Authority Key Identifier:
                keyid:7D:E6:07:C4:61:5D:7A:01:FB:DD:4A:86:AD:54:59:40:1A:75:99:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/feYHxGFdegH73UqGrVRZQBp1mSE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912442A/E7C4F9DEF62511EE8DAD8E35C4F9AE02/feYHxGFdegH73UqGrVRZQBp1mSE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:53:b6:fe:2b:45:5a:90:48:03:a8:45:25:07:e4:12:c9:03:
         1f:e9:f5:31:e5:64:69:bf:fd:c9:b9:bd:fb:be:f9:19:7d:12:
         53:34:2b:9b:53:c6:c2:9a:a9:5b:08:d4:69:13:cc:81:79:8a:
         78:b4:ab:66:0c:6f:fa:07:7a:76:99:29:76:fa:63:2a:04:05:
         41:b0:7b:63:c8:58:d3:e5:6d:65:20:c9:f1:9f:52:95:b7:f4:
         57:79:d3:1c:24:46:a3:0b:4d:eb:bf:18:04:d0:bf:6c:29:71:
         3a:65:ea:c2:9d:b0:d5:56:e7:3c:e4:56:7f:4e:12:16:c9:bb:
         cc:d3:59:6a:76:9b:4c:40:ec:0e:e2:f5:2c:cf:cb:b4:3b:ad:
         fc:60:41:3f:74:ae:c2:c3:71:17:ef:73:d5:2b:04:5c:a9:91:
         74:82:e2:25:5c:42:58:ea:b5:72:90:c8:ab:1e:d4:d4:16:c7:
         40:8d:84:05:21:ab:67:ac:62:d1:f1:40:67:42:2e:c0:eb:98:
         f1:b9:ac:b0:b1:85:b6:32:7c:14:9b:02:3c:85:d6:0f:7b:af:
         31:bb:37:04:0e:e8:bd:73:d8:09:47:27:c7:29:c9:e9:0d:48:
         3d:9e:78:8f:13:3b:01:fe:8e:16:1b:61:de:9e:1e:9b:bd:80:
         16:f5:0e:65
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAaQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjQ0MkExMTAvBgNVBAUTKDdERTYwN0M0NjE1RDdBMDFGQkRENEE4NkFENTQ1OTQw
MUE3NTk5MjEwHhcNMjYwNDIxMDA0NDEzWhcNMjYwNDI4MDA0NDEzWjAYMRYwFAYD
VQQDEw02OWU2Yzg1ZC1kZDJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxbsnfWlRTLeEaaWgBapO+ITamNXkyQTJorEXZ/IfV4pDV6MQpxhx+v8Cydtw
n8MvFXwrINUOZ1dFa7Uyl+rWptf6G4LwRPtEdJ5zYyeSdW11t5SxXO/wBeJ1CaNp
I6NuA49xdCEwYB/EVF4lsBVwXg0y6OKg5tVZUiyVTNEUBeH2RORTFs5d0nQmlf/E
WRVF8sUvaed2JfJ9z231gskDMZQJKnPMOsmTgyMgr/DxmNp2eLzAGiPZbQlolP5d
cQIIszGwNn0vdNHN+DNhZEzluO8XCZIMVhfQPic7Y11/AqXTQQIgZ0MIHrJcARIX
pz0AYhjUCzMYFGYT76ZCupIGiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJUmHh9I
qVHwbL0jCAViPtMPmJRfMB8GA1UdIwQYMBaAFH3mB8RhXXoB+91Khq1UWUAadZkh
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNDQyQS9FN0M0RjlERUY2
MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVnSDczVXFHclZSWlFCcDFt
U0UuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyL2ZlWUh4R0ZkZWdINzNVcUdyVlJaUUJwMW1TRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NDQyQS9FN0M0RjlERUY2MjUxMUVFOERBRDhFMzVDNEY5QUUwMi9mZVlIeEdGZGVn
SDczVXFHclZSWlFCcDFtU0UubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAqlO2/itFWpBIA6hFJQfkEskDH+n1MeVkab/9ybm9+775GX0SUzQrm1PGwpqp
WwjUaRPMgXmKeLSrZgxv+gd6dpkpdvpjKgQFQbB7Y8hY0+VtZSDJ8Z9Slbf0V3nT
HCRGowtN678YBNC/bClxOmXqwp2w1VbnPORWf04SFsm7zNNZanabTEDsDuL1LM/L
tDut/GBBP3SuwsNxF+9z1SsEXKmRdILiJVxCWOq1cpDIqx7U1BbHQI2EBSGrZ6xi
0fFAZ0IuwOuY8bmssLGFtjJ8FJsCPIXWD3uvMbs3BA7ovXPYCUcnxynJ6Q1IPZ54
jxM7Af6OFhth3p4em72AFvUOZQ==
-----END CERTIFICATE-----
Generated at Tue Apr 21 22:53:17 2026 by rpki-client