Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
File:                     A2exVIJlFyUqY-y0w4aTXLe9NA4.mft (raw, json)
Hash identifier:          AWlPhQqRzjF2Tdw+TO2SxZYk/VdAry+QzuFw7MWqYp4=
Subject key identifier:   F4:FB:BF:0C:93:B8:9B:B7:15:96:D7:C8:6B:2C:70:04:0E:EF:3C:01
Authority key identifier: 03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E
Certificate issuer:       /CN=A913CA90/serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
Certificate serial:       04FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
Manifest number:          04F6
Signing time:             Sat 04 Apr 2026 23:29:22 +0000
Manifest this update:     Sat 04 Apr 2026 23:29:22 +0000
Manifest next update:     Sat 11 Apr 2026 23:29:22 +0000
Files and hashes:         1: A2exVIJlFyUqY-y0w4aTXLe9NA4.crl (hash: i9T59Yud8EknGSgF8VwnyzkKVE4dqNBhv3OQbPk8KMk=)
                          2: 683A9D3A52EF11EC83A5744EC4F9AE02.roa (hash: tzCOvyqYt7MFJ8SNbSmhb4aGjE+HioiUqoKryi7LaSA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl
                          rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:29:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1277 (0x4fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913CA90, serialNumber=0367B154826517252A63ECB4C386935CB7BD340E
        Validity
            Not Before: Apr  4 23:29:22 2026 GMT
            Not After : Apr 11 23:29:22 2026 GMT
        Subject: CN=69d19ed2-79d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:be:3a:19:12:f7:81:01:1d:41:cf:d5:1d:66:
                    ef:d0:38:27:b8:ea:ae:e9:32:6a:01:10:6b:36:c1:
                    ab:d2:f5:63:5c:5f:88:49:09:c9:ea:5a:2c:c7:15:
                    ea:42:0e:b4:0e:72:a6:4f:6f:e5:a5:b6:0f:91:0f:
                    70:f2:d9:a5:e6:bc:07:6d:ab:83:95:07:99:23:35:
                    3e:8b:c4:a8:25:cd:0c:d5:af:7d:74:6b:1b:31:9e:
                    cc:2c:27:c9:10:97:38:1f:58:71:3a:ef:26:26:04:
                    b0:1c:4d:ac:67:7f:6b:8a:79:8b:37:17:8a:7f:e1:
                    63:79:ca:fc:3e:8d:64:41:5b:80:6e:0b:52:6c:c1:
                    b3:47:59:f4:23:19:79:f7:d2:b2:91:3e:e0:93:c0:
                    7e:56:ba:21:d5:07:c6:f4:3b:26:f9:f5:b9:b4:c8:
                    b1:24:25:9e:2d:fe:01:ed:d1:c7:7b:b2:6f:9a:5a:
                    8a:7a:2f:1e:0e:33:c5:0b:3b:7e:18:e0:af:ef:40:
                    5f:e9:2c:d9:32:fa:45:0d:33:77:e3:92:79:cd:b4:
                    ce:b6:1d:d6:97:25:9a:a2:9e:b0:6b:56:c5:89:95:
                    5a:dc:d7:1d:06:6e:0f:0e:cd:cf:0e:96:4f:f4:ff:
                    6f:3a:27:ef:8e:3e:07:46:2e:c6:7f:88:55:11:be:
                    c8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:FB:BF:0C:93:B8:9B:B7:15:96:D7:C8:6B:2C:70:04:0E:EF:3C:01
            X509v3 Authority Key Identifier:
                keyid:03:67:B1:54:82:65:17:25:2A:63:EC:B4:C3:86:93:5C:B7:BD:34:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A2exVIJlFyUqY-y0w4aTXLe9NA4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913CA90/25E3BBB452EB11EC8969E744C4F9AE02/A2exVIJlFyUqY-y0w4aTXLe9NA4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:6f:7d:78:6f:8e:f0:e6:a1:70:b8:a5:eb:c7:95:0d:f2:6a:
         86:b8:ae:93:2d:11:73:4e:25:a4:ce:8b:b0:78:22:51:a6:08:
         0e:ff:30:19:25:cd:dd:ec:4f:3f:4a:56:21:0a:62:a7:43:0c:
         1f:ca:e6:36:fe:93:1e:fe:c3:f1:67:66:c8:60:03:82:ff:3a:
         47:a1:5e:14:06:cc:6c:b6:66:6e:00:00:3b:c7:6e:5a:ff:9f:
         f3:16:46:e9:47:d3:df:70:33:5a:4e:9b:47:4b:84:7f:39:06:
         dc:e1:a1:dd:fe:ef:fd:ed:5c:a8:32:b6:79:ca:52:6d:0e:42:
         88:fa:e1:7f:be:bb:66:13:b6:da:09:19:95:d4:80:79:90:e3:
         08:89:67:a0:96:55:26:3e:bf:6f:72:71:5c:9f:77:e9:7a:9d:
         ff:7c:f0:67:bc:17:2f:06:1d:d6:99:83:86:46:a1:dd:ad:31:
         8a:95:50:e9:58:ca:52:40:ec:5c:61:a4:0a:e1:9c:12:49:df:
         9f:32:e4:ad:ec:bc:76:b4:bf:7f:9c:80:b6:44:fb:49:2d:5e:
         77:76:80:43:05:19:9b:99:4c:45:3f:02:50:49:bd:b4:ef:26:
         9c:ad:a3:3f:51:c1:f1:9f:0d:0e:52:a1:02:60:ca:f0:1b:05:
         ba:b8:6e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:48 2026 by rpki-client