Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
File:                     5viFuMHmNK45nsq4FzoD245MEpQ.mft (raw, json)
Hash identifier:          fvj5sg8DpwIMyT4UpNqWV0RleRjExSAAuVoZPw4WqC8=
Subject key identifier:   EE:FE:6A:BA:53:D1:03:EB:50:4E:2F:1D:2E:7E:9A:80:FA:AE:46:7E
Authority key identifier: E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94
Certificate issuer:       /CN=A914C4D7/serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
Certificate serial:       0E7C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
Manifest number:          0E70
Signing time:             Sat 04 Apr 2026 17:38:17 +0000
Manifest this update:     Sat 04 Apr 2026 17:38:16 +0000
Manifest next update:     Sat 11 Apr 2026 17:38:16 +0000
Files and hashes:         1: 5viFuMHmNK45nsq4FzoD245MEpQ.crl (hash: ebbWku9tp6KbD152cC5IXGTnEVKHnxFLdqzDpVimjws=)
                          2: 1801797EB79211E986129837C4F9AE02.roa (hash: sTQEqI0Zd1ILFJY7IEMF9VrRKsGVR4RFEF9uTNFfGBo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl
                          rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:38:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3708 (0xe7c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914C4D7, serialNumber=E6F885B8C1E634AE399ECAB8173A03DB8E4C1294
        Validity
            Not Before: Apr  4 17:38:16 2026 GMT
            Not After : Apr 11 17:38:16 2026 GMT
        Subject: CN=69d14c89-70de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:50:52:cf:c8:ce:a0:73:8f:0c:24:fe:bd:b6:
                    d3:e9:0b:41:41:97:11:de:2a:7d:f2:85:51:e6:1c:
                    b7:cf:f8:96:a6:01:55:89:3c:43:c3:99:dd:73:8d:
                    0f:be:e9:8f:56:d8:e6:0a:37:fd:66:81:99:a5:6c:
                    4f:c2:fe:10:ca:43:94:ab:43:7d:72:46:22:44:c3:
                    92:33:68:0b:36:ae:da:53:33:36:c7:85:ab:20:ce:
                    51:47:9b:66:4e:8e:8b:be:9e:e8:72:96:dc:7f:76:
                    7e:a7:4b:a8:fe:85:15:77:08:8e:75:e4:54:8d:4d:
                    68:6d:6f:0a:53:aa:a8:f3:1b:55:31:fd:45:95:7f:
                    8d:e5:6a:d6:aa:30:65:47:58:e9:ce:81:01:9d:27:
                    36:f5:05:12:10:19:46:49:94:81:e4:5f:0d:3d:14:
                    b6:be:c9:c4:66:be:8a:0c:65:5e:ee:45:f3:46:55:
                    6b:17:69:7a:90:05:97:78:91:08:3e:da:67:d8:0f:
                    e1:7a:f3:e0:4f:b6:3d:59:ea:4f:3b:64:ba:4d:6f:
                    ee:09:19:93:20:61:9f:a0:49:a9:0e:02:20:5f:31:
                    c3:b8:82:9d:d4:b8:28:97:ab:32:47:ab:25:e9:e6:
                    b9:39:ee:c0:58:17:82:a6:42:32:8b:5d:a9:db:6b:
                    1d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:FE:6A:BA:53:D1:03:EB:50:4E:2F:1D:2E:7E:9A:80:FA:AE:46:7E
            X509v3 Authority Key Identifier:
                keyid:E6:F8:85:B8:C1:E6:34:AE:39:9E:CA:B8:17:3A:03:DB:8E:4C:12:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5viFuMHmNK45nsq4FzoD245MEpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914C4D7/99D9153AB79011E9BEE8DD34C4F9AE02/5viFuMHmNK45nsq4FzoD245MEpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:7a:cd:7f:0f:b4:0e:20:75:7d:4f:19:ee:07:1c:97:dc:4e:
         d5:35:41:ad:cb:a0:83:45:70:57:38:8c:0b:6f:bf:fd:4c:ab:
         da:8e:3b:4b:a6:9d:f3:04:2f:bc:0a:69:3c:31:73:1f:4d:4c:
         80:79:89:32:d1:1c:73:2d:2c:c6:57:a0:f2:81:43:c8:ce:e8:
         5d:7d:43:e2:aa:d8:c2:03:2c:6c:ba:9f:71:0f:26:2f:85:fc:
         b1:02:6b:b1:56:9b:b5:8a:7e:7c:fa:17:9f:50:40:79:be:ee:
         e5:9d:c4:8a:65:67:9c:fd:f6:c9:11:e7:97:9c:ea:7e:b4:c3:
         08:56:60:46:2b:e0:56:18:59:de:fe:3c:88:39:36:6d:b9:80:
         a5:2b:c1:22:27:8d:5b:4e:45:46:49:a1:9c:3c:28:bc:af:45:
         cc:e1:94:a0:3e:8c:cb:fb:65:a3:68:b9:0c:bb:4d:a7:93:af:
         04:96:37:bf:f1:06:f8:ac:a6:f8:5b:e3:93:b2:3a:e8:63:42:
         3f:5a:53:85:36:a2:46:b9:7a:4c:80:1c:b9:41:05:11:64:aa:
         6b:3c:c3:94:7a:e3:11:1d:a5:80:88:ed:95:77:7e:88:3d:7e:
         bb:00:88:e4:fd:55:d9:1c:2e:a1:f1:64:ff:85:b8:bf:09:f8:
         83:65:41:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDnwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NEM0RDcxMTAvBgNVBAUTKEU2Rjg4NUI4QzFFNjM0QUUzOTlFQ0FCODE3M0EwM0RC
OEU0QzEyOTQwHhcNMjYwNDA0MTczODE2WhcNMjYwNDExMTczODE2WjAYMRYwFAYD
VQQDEw02OWQxNGM4OS03MGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwFBSz8jOoHOPDCT+vbbT6QtBQZcR3ip98oVR5hy3z/iWpgFViTxDw5ndc40P
vumPVtjmCjf9ZoGZpWxPwv4QykOUq0N9ckYiRMOSM2gLNq7aUzM2x4WrIM5RR5tm
To6Lvp7ocpbcf3Z+p0uo/oUVdwiOdeRUjU1obW8KU6qo8xtVMf1FlX+N5WrWqjBl
R1jpzoEBnSc29QUSEBlGSZSB5F8NPRS2vsnEZr6KDGVe7kXzRlVrF2l6kAWXeJEI
Ptpn2A/hevPgT7Y9WepPO2S6TW/uCRmTIGGfoEmpDgIgXzHDuIKd1Lgol6syR6sl
6ea5Oe7AWBeCpkIyi12p22sd8wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFO7+arpT
0QPrUE4vHS5+moD6rkZ+MB8GA1UdIwQYMBaAFOb4hbjB5jSuOZ7KuBc6A9uOTBKU
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0QzRENy85OUQ5MTUzQUI3
OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5LNDVuc3E0RnpvRDI0NU1F
cFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzV2aUZ1TUhtTks0NW5zcTRGem9EMjQ1TUVwUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
QzRENy85OUQ5MTUzQUI3OTAxMUU5QkVFOEREMzRDNEY5QUUwMi81dmlGdU1IbU5L
NDVuc3E0RnpvRDI0NU1FcFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAX3rNfw+0DiB1fU8Z7gccl9xO1TVBrcugg0VwVziMC2+//Uyr2o47S6ad8wQv
vAppPDFzH01MgHmJMtEccy0sxleg8oFDyM7oXX1D4qrYwgMsbLqfcQ8mL4X8sQJr
sVabtYp+fPoXn1BAeb7u5Z3EimVnnP32yRHnl5zqfrTDCFZgRivgVhhZ3v48iDk2
bbmApSvBIieNW05FRkmhnDwovK9FzOGUoD6My/tlo2i5DLtNp5OvBJY3v/EG+Kym
+Fvjk7I66GNCP1pThTaiRrl6TIAcuUEFEWSqazzDlHrjER2lgIjtlXd+iD1+uwCI
5P1V2RwuofFk/4W4vwn4g2VBgA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 13:56:18 2026 by rpki-client