Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
File:                     cp4vnB2HwhRzUHjP0hxjjgcVe10.mft (raw, json)
Hash identifier:          fWILESRknSoCLsP9NIo16k1rRkMzGV+R40WVJnA8nrE=
Subject key identifier:   7F:F2:BB:2D:45:3C:C5:EA:5B:F1:EB:50:C6:D7:9D:C1:ED:9F:EC:F8
Authority key identifier: 72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D
Certificate issuer:       /CN=A916807A/serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
Certificate serial:       036A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
Manifest number:          02F3
Signing time:             Mon 27 Apr 2026 01:25:20 +0000
Manifest this update:     Mon 27 Apr 2026 01:25:19 +0000
Manifest next update:     Mon 04 May 2026 01:25:19 +0000
Files and hashes:         1: cp4vnB2HwhRzUHjP0hxjjgcVe10.crl (hash: JxepYf9a6KHR/ajKqPQG9Hoze4VpKdeMOI8v2/Dmwdg=)
                          2: 359EA23662B311F081881A48C4F9AE02.roa (hash: lqL+GVJ/YnIw0JoUQ+DA7LgXc2Kr/qA7gY59dqXk+eA=)
                          3: 056F9FEA36D311F091108A4EC4F9AE02.roa (hash: OyJt2s3qPZnoO34lc+1xKuSSrj0jZolC/kQHql+HGrY=)
                          4: E7BB6878778511F0A4E72535C4F9AE02.roa (hash: ZS69q+KLB0wxQSpzELQNwnOrdQL0A5TtkzgU+YFIMPc=)
                          5: 82FE8E1C90B511F0B55D6F53C4F9AE02.roa (hash: jniVoFO7asjIWO6HqjPSEhXjJIJMpsAC3AM61zDyHDg=)
                          6: E76A810A381511F1ABE15B0C98833773.roa (hash: o2/3WY/X8q2n8a29ZI+8ohjXtfNwONgobpYeiQVr1FE=)
                          7: B7A4FD5EDD9A11F0956A19D3406F56BC.roa (hash: C/nBDRskLxKkB8+VbDj3vPdaP7ntU8FpquVD1dwHslg=)
                          8: 42EEA7CE184D11F182F41629283D8C67.roa (hash: TVrPLmIBli4Y5DGPh5WbtZCgPebXr/yJxB3rRfwNFHI=)
                          9: E8672B1C381511F1ABE15B0C98833773.roa (hash: anai9qYPZOFiCk3SsK0WZEhRCz/0EmZXl4ZZ1i9lDIg=)
                          10: CD8401DE725011F0A3F05A4DC4F9AE02.roa (hash: pORpsNJ98G1sLBSGTNwGRFcCTTGxkjeaJpZ9poV5mz8=)
                          11: 05E0CD8A56D311F0B46F9787C4F9AE02.roa (hash: ZL7HtMcMaee/+U2RFcFAEBNXOBbDZe6QSqp6AaUWyjA=)
                          12: 43DD36C8184D11F182F41629283D8C67.roa (hash: W2jdh0dCsYZH6chwW5mjxA9lnLxFZ0B7ULAznfGNxoM=)
                          13: 2E2847223DB311EE9375493EC4F9AE02.roa (hash: ThNEZ/wZ14mYXLet8Z4TArJCtuPb8L+Y4/Se6rgtJdc=)
                          14: 648D8466B8A011F09DCB7C5BC4F9AE02.roa (hash: h4q9+s6LKkIzk4CyJWXnprv1pvkZF4sAJykGIi6Qgw0=)
                          15: 40257FE64D0E11F082837352C4F9AE02.roa (hash: 3xwrhLhWrv4Rc8fICKcBZccULTitMeKwRM4KNepaPck=)
                          16: 0634745A36D311F091108A4EC4F9AE02.roa (hash: uaiAXHFgkoPRxU2DoLpe3SDOvNdXy/Ij5A7mMKtf32g=)
                          17: 853DCAEA341111F0A5CD2B20C4F9AE02.roa (hash: RMVp8Qup/NU120gAEj7lgUVqAC4aVcpU8zUbzT1yzig=)
                          18: EE5D27BEA80611F09091490CC4F9AE02.roa (hash: fhpQuv0y4UT5DryZGfmgAQDcckv6IFWk6lv7Kpt2qsY=)
                          19: 974EDB46ED1311F09DD269343F6F56BC.roa (hash: 4FLqEnPv3X7T2rrveBupNuONIo7TL+K8xQl8KOAUwrc=)
                          20: 0711ABAE36D311F091108A4EC4F9AE02.roa (hash: L5jvQRnxxxHdy5lodGkjPlaB/lJvpEFIVFuxxQ3ZhTI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl
                          rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 01:25:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 874 (0x36a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916807A, serialNumber=729E2F9C1D87C214735078CFD21C638E07157B5D
        Validity
            Not Before: Apr 27 01:25:19 2026 GMT
            Not After : May  4 01:25:19 2026 GMT
        Subject: CN=69eebaff-45ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d8:f0:9e:56:45:25:d3:74:1e:2c:09:54:2b:
                    2c:e4:71:fa:5b:bc:9a:3c:c1:1b:74:61:ce:33:bc:
                    57:27:45:69:fc:46:4e:c0:d9:21:53:b4:4b:b2:7b:
                    ed:58:25:cb:49:e8:db:ac:e2:e9:23:d7:0a:ab:26:
                    b4:84:29:3c:33:f6:54:11:fc:65:23:a9:a2:ea:34:
                    e3:34:91:b2:31:dd:77:64:eb:d0:af:26:8b:96:be:
                    51:54:e8:f7:0a:ce:ad:75:5a:84:0e:de:8b:ab:ba:
                    75:97:ed:c2:88:8a:06:d5:db:96:07:bf:e6:da:ec:
                    14:f8:72:ee:b6:5c:9d:59:43:ce:0d:d9:27:52:d7:
                    de:1c:27:2f:9c:03:d1:86:d2:00:4d:1a:52:d3:14:
                    79:0d:6b:e7:67:f9:77:ec:a0:a9:20:ec:6a:4e:da:
                    26:8d:3c:3d:05:bb:80:ee:5f:da:b8:d1:35:ad:46:
                    23:3c:c8:5c:ff:79:f4:9d:c2:c6:1a:f8:28:1a:14:
                    61:df:7c:ca:32:dd:dd:a1:c5:38:39:57:c9:78:e4:
                    c6:8e:bf:ce:7c:13:24:8a:8c:ee:14:66:b0:5c:98:
                    67:a1:65:72:4d:7d:68:c6:04:f2:d5:5d:a9:57:24:
                    f4:61:d4:45:0f:0b:c7:16:a6:d9:88:1c:9c:ff:c7:
                    03:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F2:BB:2D:45:3C:C5:EA:5B:F1:EB:50:C6:D7:9D:C1:ED:9F:EC:F8
            X509v3 Authority Key Identifier:
                keyid:72:9E:2F:9C:1D:87:C2:14:73:50:78:CF:D2:1C:63:8E:07:15:7B:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cp4vnB2HwhRzUHjP0hxjjgcVe10.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916807A/0263AB483E8811EDA61A9B2AC4F9AE02/cp4vnB2HwhRzUHjP0hxjjgcVe10.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:85:42:c6:6a:8e:b4:a3:e9:49:64:b8:95:27:da:f7:30:85:
         52:5d:1d:15:6d:48:82:d4:79:d9:50:1c:41:a6:9e:1b:b4:e3:
         2b:4d:94:45:c6:25:ba:bc:86:db:37:b1:df:7f:ac:2f:05:02:
         dc:27:20:f3:13:94:51:83:14:65:73:c0:fb:05:35:29:c8:04:
         29:b4:62:5f:3a:b7:03:ae:09:6b:99:be:5c:06:91:3c:16:af:
         80:05:29:33:2c:50:7f:15:dc:b5:71:bf:6c:82:85:50:43:54:
         3b:69:70:a7:1d:f5:e6:d9:c3:e6:8a:a6:53:f8:6d:81:0d:d6:
         33:56:25:ce:20:4b:a3:c3:be:f8:21:93:f5:95:18:b6:41:5f:
         b1:df:74:5d:0b:24:58:f5:13:04:dd:2d:38:ab:79:25:91:4b:
         7e:4c:14:1a:b5:91:16:2e:11:c5:51:64:66:99:b5:66:4b:4e:
         da:10:cc:92:84:55:d3:93:0a:26:20:c8:4d:74:5c:8d:84:82:
         5b:ba:da:14:77:a7:d0:57:d4:bc:ae:91:66:17:e1:c9:fe:85:
         61:9c:7c:b4:33:57:f9:b9:cd:65:47:ac:c9:07:35:c5:c3:0b:
         6b:33:31:88:89:91:d6:e6:0c:30:c6:8f:08:72:bb:9e:3c:aa:
         08:be:12:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 07:18:13 2026 by rpki-client