Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
File:                     1j3oKnWfllf48HOyUSUarme6S6Y.mft (raw, json)
Hash identifier:          a95N5TJwZWZP0P07G7gaA7YXTxiJH28GSvxkWnazzec=
Subject key identifier:   11:1D:2F:80:55:CA:21:68:9B:87:66:A7:B5:6B:75:51:89:DB:59:48
Authority key identifier: D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6
Certificate issuer:       /CN=A91262CA/serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
Certificate serial:       0546
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
Manifest number:          04BB
Signing time:             Wed 29 Apr 2026 00:39:06 +0000
Manifest this update:     Wed 29 Apr 2026 00:39:05 +0000
Manifest next update:     Wed 06 May 2026 00:39:05 +0000
Files and hashes:         1: 1j3oKnWfllf48HOyUSUarme6S6Y.crl (hash: SZAfOEUxHCxHCgGBXlpE9kunBpnPxd4W8HWVTp5nEp0=)
                          2: 9DEFF2FADF3E11EC83CCFE1EC4F9AE02.roa (hash: Wm1/eKkjwSdENyF9XhaIgMMIMyZWJ8FdprbIASCO2bc=)
                          3: B5036DB4694211F08D05BF0AC4F9AE02.roa (hash: 1yc+Fti6INTStmk0z+PF6B3gBIJd9xdIKHjdncMI12M=)
                          4: 05163DEADD8711EC9BF56E5BC4F9AE02.roa (hash: 63cio2MUFm7vWLjvaTxI8FgoeyjASbbb5Aorm9U3n2I=)
                          5: A09F8E52DF3E11EC83CCFE1EC4F9AE02.roa (hash: ojYiriadBdeJ4BH7NXIPyFN9GoN0YxbKy4QT6N+XslQ=)
                          6: 9FEE9516DF3E11EC83CCFE1EC4F9AE02.roa (hash: X9aul/hRgPk68N6AmoCtSGzTWlW5UtIGtVxtQ1hm0tU=)
                          7: A15115E6DF3E11EC83CCFE1EC4F9AE02.roa (hash: hi3WlnCuIsVxYwmdTuFYuyRcQz4FIsMaP/7U8XUNfSM=)
                          8: A1FED136DF3E11EC83CCFE1EC4F9AE02.roa (hash: AOZmmYeLnSI49490eoUMSsnulhK+wQ7Ylskf13YZSuA=)
                          9: 9EB0F9FADF3E11EC83CCFE1EC4F9AE02.roa (hash: zdcdiMbBZ6fnqhqtsh4JjSi3qiy0wngzFd6cDMXw3Q4=)
                          10: 9D13F282DF3E11EC83CCFE1EC4F9AE02.roa (hash: jXGTnw/tsqcAu91xGU6v2HfXtRdayM9lNp5kbKAgr+4=)
                          11: BA39BBAE524E11F099DE067AC4F9AE02.roa (hash: jFHb2Xi2Zj1iFLL1Si72692s8uXbi8VyaCZ+u1E3ggk=)
                          12: 1DFB74B4693511F098DA961FC4F9AE02.roa (hash: yGbuX7djLfgfGdTsOwwr5o9SRyhKavrZbjHv3qaR1NU=)
                          13: 86C8EBA2B12A11EF985A2D32C4F9AE02.roa (hash: 5ei1Pf2BFe+GGZMzUH0jNMbQdUw4QmZ26uLjm4CIyKk=)
                          14: F563D916248D11EF93237035C4F9AE02.roa (hash: hBH+sTV1EiMubSY3WwYm2Uh2qOcd3e+lc/yMbXN25cs=)
                          15: 9F598EEEDF3E11EC83CCFE1EC4F9AE02.roa (hash: mV2Ali2A9Nwpmh5pLmGmrns//aSQ4eK5cx9Smgvt4so=)
                          16: 56EC4CB4927911EFABEC2D46C4F9AE02.roa (hash: Vg+3UEU28kUVBfAjWiElgD4QvPYtjgOIKdHI6i8KBtw=)
                          17: ABE3468CBB5611EE936F4785C4F9AE02.roa (hash: Yhm1YFhiIa7R+q38Dt/6clsm6VHP6vg6ootMhjnocfY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl
                          rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 00:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1350 (0x546)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262CA, serialNumber=D63DE82A759F9657F8F073B251251AAE67BA4BA6
        Validity
            Not Before: Apr 29 00:39:05 2026 GMT
            Not After : May  6 00:39:05 2026 GMT
        Subject: CN=69f1532a-68ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:58:0d:4a:14:93:4e:51:1e:65:1a:fe:60:3c:
                    82:bb:e5:5c:c6:f1:8e:0e:67:7e:a0:11:c5:9a:e0:
                    a8:53:7c:04:a1:63:5a:d2:ab:be:54:70:46:6f:18:
                    34:71:5e:93:ad:5c:63:50:f3:96:97:d9:b4:47:28:
                    d4:31:2a:a9:ed:46:cb:73:e7:3b:be:35:56:80:4e:
                    b2:67:26:f5:0a:99:62:26:15:1d:a2:1e:a9:3a:19:
                    e0:8a:9c:94:50:18:1b:37:f7:fd:27:7d:ff:bf:4f:
                    ce:5c:66:04:73:ad:b1:ce:69:ac:ef:49:63:51:7f:
                    2c:c4:0a:8a:4f:9e:9e:a0:4c:99:16:15:cc:5a:c2:
                    09:c1:d7:2c:ed:9e:51:6b:3a:81:9c:8d:d8:0b:38:
                    f9:17:a2:13:94:49:d6:ef:e0:53:f8:84:32:0d:6e:
                    e3:6a:e5:36:6d:3d:89:e0:c9:9e:64:15:e0:07:61:
                    03:d3:b4:8a:57:0f:c3:66:9d:fa:d1:b7:d1:15:0b:
                    b7:59:e4:a6:a6:bc:ad:63:5c:48:3c:b9:40:89:7d:
                    0c:44:bc:76:78:a7:2e:64:4e:ce:cc:28:5f:f8:c2:
                    09:69:3d:26:9c:1a:b3:b2:f3:96:34:36:a1:cb:82:
                    9d:a2:db:c6:5a:33:64:48:0d:6a:2b:24:66:81:46:
                    e5:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1D:2F:80:55:CA:21:68:9B:87:66:A7:B5:6B:75:51:89:DB:59:48
            X509v3 Authority Key Identifier:
                keyid:D6:3D:E8:2A:75:9F:96:57:F8:F0:73:B2:51:25:1A:AE:67:BA:4B:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1j3oKnWfllf48HOyUSUarme6S6Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262CA/EC1EE6528A5711EC96EBC014C4F9AE02/1j3oKnWfllf48HOyUSUarme6S6Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:37:a0:33:a9:bc:7c:ad:c6:89:e3:38:24:6c:4d:60:8e:26:
         d7:43:63:cb:07:ea:6c:f3:f3:c2:db:8f:be:b7:f4:87:d7:35:
         9b:48:9e:91:65:c2:2c:2f:c8:95:0a:62:2e:ac:7a:41:f2:17:
         eb:c1:cc:c7:3f:ef:e7:2d:78:a0:af:26:22:e4:a7:f5:01:b2:
         ad:37:6e:e5:a8:09:83:17:95:99:36:3a:d6:18:be:78:0a:7d:
         b7:9d:79:55:cb:7e:02:0e:61:8b:48:8f:a9:95:49:2c:ce:19:
         66:60:c2:13:3a:1b:3e:f1:cd:46:11:2b:a5:a9:4b:b8:58:01:
         17:e7:fc:15:c5:57:67:3f:89:a8:1d:e7:79:ae:b5:60:78:6f:
         ec:e7:a1:d0:5b:20:8c:0d:f8:ee:c7:7e:6d:99:49:da:17:d7:
         7c:c5:b6:c3:38:47:0c:4b:a4:8a:32:5f:a0:03:db:81:4b:8b:
         04:39:ae:2e:b3:ea:c7:5a:24:b7:9e:e8:44:02:db:34:75:e8:
         29:3e:3b:0d:06:82:ce:b9:20:bd:2c:72:98:ee:1b:3e:9d:d1:
         e8:0e:79:7d:53:18:58:47:71:33:51:82:60:86:50:6b:ff:06:
         ae:7f:f1:ac:9e:24:eb:ca:68:38:98:58:14:72:f2:43:77:8e:
         80:62:75:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 30 09:11:02 2026 by rpki-client