Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
File:                     -tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft (raw, json)
Hash identifier:          ad1LCkayz+lSZRGnzN2a6yRwRWsu3gQMU45bNanEKK4=
Subject key identifier:   A8:7A:17:F5:AF:A7:AF:FA:AA:B9:86:00:69:CE:B8:20:39:89:92:AC
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Certificate issuer:       /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
Manifest number:          1D
Signing time:             Tue 21 Apr 2026 08:41:10 +0000
Manifest this update:     Tue 21 Apr 2026 08:41:10 +0000
Manifest next update:     Tue 28 Apr 2026 08:41:10 +0000
Files and hashes:         1: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl (hash: w2g5yrbHsej7YiX+xKQTiC/K1jrrdYt75VHN1gMoctY=)
                          2: CE992CA0138D11F198EDAC703A3D8C67.roa (hash: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 28 Apr 2026 08:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
        Validity
            Not Before: Apr 21 08:41:10 2026 GMT
            Not After : Apr 28 08:41:10 2026 GMT
        Subject: CN=69e73826-fb96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:97:b9:8e:de:25:7e:c8:3d:b6:18:fa:6f:8e:
                    5f:31:ce:36:b8:ca:91:8c:1c:bd:91:1f:61:45:b4:
                    a2:36:3a:3f:a2:e1:a5:64:6b:4c:af:7e:a5:5c:40:
                    7e:b0:f0:bc:7e:2f:02:74:40:12:76:b5:9a:8a:22:
                    6a:c6:f8:70:72:d4:2c:97:ff:5a:42:7f:46:0b:ed:
                    31:a0:79:77:37:54:82:b4:42:89:ef:c1:84:5f:2f:
                    76:3c:02:90:24:8d:e1:5e:9e:12:3f:04:c4:2e:b5:
                    af:cb:44:16:7d:09:a2:f0:7e:c1:8c:a2:e8:a0:a2:
                    bd:f6:37:a5:08:9c:c9:6c:61:ad:a5:7d:e8:1b:ec:
                    d1:de:c0:c9:e9:5c:d4:a7:3c:ac:db:34:49:15:f8:
                    c6:b8:5f:1c:2f:39:4f:c9:03:58:56:73:83:03:2e:
                    a5:e7:2e:0a:0a:30:6a:85:45:37:a0:12:10:0f:f1:
                    aa:1d:ff:32:fc:b9:df:bc:f8:99:26:27:05:8c:58:
                    ee:a7:af:e0:ec:f5:3a:20:4b:d7:46:60:56:13:c6:
                    b3:6e:89:00:ca:fe:a3:fa:74:d6:bd:82:bd:3a:49:
                    cf:15:f6:c3:8a:26:b9:70:81:d1:ef:47:c8:6a:26:
                    bf:dd:d5:15:01:a8:b9:73:7d:61:3c:39:95:1d:a4:
                    13:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:7A:17:F5:AF:A7:AF:FA:AA:B9:86:00:69:CE:B8:20:39:89:92:AC
            X509v3 Authority Key Identifier:
                keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:41:35:88:90:2a:b5:4a:31:4f:09:4d:9b:73:0a:6c:58:e8:
         94:55:c6:64:53:1d:7f:73:d4:c4:25:c5:86:e3:d2:f0:f1:6c:
         34:71:7b:38:3f:90:3d:65:8f:0c:75:66:4f:f0:08:34:bb:e8:
         83:ac:e0:c9:14:7e:64:c4:ec:14:8b:11:46:35:a6:77:ba:44:
         87:b3:dd:7a:c1:37:8a:de:09:90:f2:e5:ea:c1:00:45:0b:c9:
         d2:77:bd:67:08:5f:4e:ac:89:69:4f:ce:ed:ec:74:aa:f0:03:
         f2:81:d7:9e:14:d8:d0:89:c5:8d:ec:0c:e8:10:fd:64:8f:30:
         b5:14:54:26:fc:6e:e6:77:64:cb:f3:77:b7:a7:8d:43:02:f0:
         09:08:31:6f:30:0a:f7:2e:10:11:0e:06:80:e1:b8:e5:df:cf:
         10:dc:bd:a9:dc:35:43:e9:13:62:6b:a9:a6:2b:69:c6:e2:99:
         2b:1b:38:d7:87:2d:9d:fb:4c:cf:69:d5:1d:f7:c3:80:4e:b7:
         49:28:a5:02:cd:d3:0b:61:a6:24:57:6d:21:5e:84:d3:da:46:
         7b:16:49:8a:a9:86:2e:d3:bd:a5:45:b0:6f:fe:61:23:56:fb:
         38:42:f6:f5:f6:f0:72:25:84:aa:f8:73:46:8c:06:a7:64:85:
         d9:12:b6:e7
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBHjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
RTA2MTExMC8GA1UEBRMoRkFENDI5OUNCMjA1QUEzREREQzQ5MEE4NjAyNUJBNUM2
QzFFRTBFOTAeFw0yNjA0MjEwODQxMTBaFw0yNjA0MjgwODQxMTBaMBgxFjAUBgNV
BAMTDTY5ZTczODI2LWZiOTYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC2l7mO3iV+yD22GPpvjl8xzja4ypGMHL2RH2FFtKI2Oj+i4aVka0yvfqVcQH6w
8Lx+LwJ0QBJ2tZqKImrG+HBy1CyX/1pCf0YL7TGgeXc3VIK0QonvwYRfL3Y8ApAk
jeFenhI/BMQuta/LRBZ9CaLwfsGMouigor32N6UInMlsYa2lfegb7NHewMnpXNSn
PKzbNEkV+Ma4XxwvOU/JA1hWc4MDLqXnLgoKMGqFRTegEhAP8aod/zL8ud+8+Jkm
JwWMWO6nr+Ds9TogS9dGYFYTxrNuiQDK/qP6dNa9gr06Sc8V9sOKJrlwgdHvR8hq
Jr/d1RUBqLlzfWE8OZUdpBOLAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUqHoX9a+n
r/qquYYAac64IDmJkqwwHwYDVR0jBBgwFoAU+tQpnLIFqj3dxJCoYCW6XGwe4Okw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVFMDYxLzkzNEU1OTgyMTM4
QzExRjFBQTQxNzYzMzNBM0Q4QzY3Ly10UXBuTElGcWozZHhKQ29ZQ1c2WEd3ZTRP
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLXRRcG5MSUZxajNkeEpDb1lDVzZYR3dlNE9rLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTVF
MDYxLzkzNEU1OTgyMTM4QzExRjFBQTQxNzYzMzNBM0Q4QzY3Ly10UXBuTElGcWoz
ZHhKQ29ZQ1c2WEd3ZTRPay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCcQTWIkCq1SjFPCU2bcwpsWOiUVcZkUx1/c9TEJcWG49Lw8Ww0cXs4P5A9ZY8M
dWZP8Ag0u+iDrODJFH5kxOwUixFGNaZ3ukSHs916wTeK3gmQ8uXqwQBFC8nSd71n
CF9OrIlpT87t7HSq8APygdeeFNjQicWN7AzoEP1kjzC1FFQm/G7md2TL83e3p41D
AvAJCDFvMAr3LhARDgaA4bjl388Q3L2p3DVD6RNia6mmK2nG4pkrGzjXhy2d+0zP
adUd98OATrdJKKUCzdMLYaYkV20hXoTT2kZ7FkmKqYYu072lRbBv/mEjVvs4Qvb1
9vByJYSq+HNGjAanZIXZErbn
-----END CERTIFICATE-----
Generated at Wed Apr 22 07:08:03 2026 by rpki-client