Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
File:                     4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft (raw, json)
Hash identifier:          cb81rqwrbcGK8evhAQDkAIQqTbZvXJ3mEFv+k2z1w7w=
Subject key identifier:   D2:3F:1C:0A:1B:63:78:52:D9:C3:BF:2D:55:13:E9:3D:9F:9F:BA:EC
Authority key identifier: E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30
Certificate issuer:       /CN=A917F0AF/serialNumber=E114378DA934861469F495D97598E0F00289C330
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
Manifest number:          FD
Signing time:             Sat 09 May 2026 06:07:29 +0000
Manifest this update:     Sat 09 May 2026 06:07:28 +0000
Manifest next update:     Sat 16 May 2026 06:07:28 +0000
Files and hashes:         1: 4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl (hash: ghXv4fM7z0K7y05nZF6/hRcMvFhXu8hFYIMNG0ExEPs=)
                          2: 27E5184CCC6211EFA20BEE1BC4F9AE02.roa (hash: x4m5M8TdUipL7o6slEBASzNPQRc6mguoljJR97i4R5w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl
                          rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 16 May 2026 06:07:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F0AF, serialNumber=E114378DA934861469F495D97598E0F00289C330
        Validity
            Not Before: May  9 06:07:28 2026 GMT
            Not After : May 16 06:07:28 2026 GMT
        Subject: CN=69fecf21-be11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fb:ab:dc:a8:46:21:5c:44:60:d5:4a:4f:5f:
                    82:7a:0a:ac:71:3b:f9:73:12:dd:9b:d4:78:77:b2:
                    1f:8f:b3:84:14:09:ce:6c:bf:80:57:ea:c3:ae:fb:
                    f0:51:b3:9c:ca:a3:87:ad:7c:ca:63:48:94:f2:39:
                    62:6b:24:1f:29:2c:f1:42:99:69:ea:15:d3:bb:93:
                    c8:a6:d7:16:e3:44:9d:c3:34:fd:4a:6f:8d:06:9c:
                    8b:fb:27:68:5d:01:01:6b:57:33:3c:81:3c:31:99:
                    f6:f7:e8:0f:3b:d8:52:1f:2b:46:cd:98:92:b6:70:
                    46:dc:b0:b2:fb:5a:41:1e:7e:5f:10:b4:77:50:11:
                    90:09:34:da:be:e7:9d:7f:48:a6:50:42:89:49:df:
                    7d:b8:e8:a3:37:33:c9:09:63:d4:90:3e:9d:77:59:
                    a6:bf:13:38:55:ea:31:3e:93:a1:5c:32:04:f8:a3:
                    56:e3:5a:e9:88:02:f8:8e:ab:cb:92:ae:6b:30:8b:
                    cb:de:3e:2f:13:0e:2f:ec:65:a5:77:ef:e5:a4:93:
                    a2:2c:7a:44:0f:1c:09:c4:3e:3f:db:a4:c2:32:28:
                    24:22:37:f0:90:96:8a:9f:bf:4f:4d:73:ed:58:1b:
                    52:d8:a9:f2:4c:cf:ad:a6:89:ac:ab:ed:f4:f0:94:
                    b2:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:3F:1C:0A:1B:63:78:52:D9:C3:BF:2D:55:13:E9:3D:9F:9F:BA:EC
            X509v3 Authority Key Identifier:
                keyid:E1:14:37:8D:A9:34:86:14:69:F4:95:D9:75:98:E0:F0:02:89:C3:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RQ3jak0hhRp9JXZdZjg8AKJwzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F0AF/2D7A7E0ECC4F11EFA89A8F14C4F9AE02/4RQ3jak0hhRp9JXZdZjg8AKJwzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:0b:0b:8b:2e:3d:1f:1b:61:15:29:10:6c:11:9d:8e:1f:cc:
         09:8b:5a:87:9a:d5:70:24:9d:19:5e:c3:bb:c6:5a:d3:0d:27:
         c2:e8:dc:57:14:53:d8:4e:aa:44:2b:dd:cb:b5:98:07:96:eb:
         62:b4:7d:9e:cb:a2:c4:c0:d2:3c:76:c6:52:56:63:cd:2d:8b:
         b4:16:54:29:ff:03:c2:f9:24:43:4d:c5:41:19:d5:dc:0e:46:
         cf:68:c0:8c:c8:ac:c5:b7:6c:0a:88:96:d9:13:81:ef:5e:55:
         d4:2b:5b:1b:05:1a:60:21:92:e5:e7:01:38:81:b3:66:6e:a4:
         c7:d4:f8:21:97:75:46:ff:51:4b:a3:fa:34:98:99:66:7d:70:
         ea:4f:9b:ed:9b:22:58:38:5c:08:92:bc:0c:4a:65:09:65:5c:
         85:38:f3:67:a0:9f:0c:d2:f3:67:c6:cd:ac:6c:fe:71:ff:c0:
         8d:34:90:74:b7:d8:e1:6b:33:22:40:23:d3:83:a4:6e:58:15:
         0f:a1:a5:b3:09:a9:db:5d:46:83:2e:24:f1:f2:2d:23:69:4a:
         a8:f0:11:ce:76:03:da:98:73:bb:0b:0f:23:b3:72:c8:3b:5f:
         90:2f:46:38:0d:31:7f:af:50:c8:37:23:eb:23:a6:6e:d4:bc:
         22:cf:2d:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 10 04:26:05 2026 by rpki-client