Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
File:                     Th_fBBxL3f1RF0jkuYPctGJbmoA.mft (raw, json)
Hash identifier:          28KcMc3iyClu6Ozc0SPvTtpWU7evNVp4W/5bLM/UY6E=
Subject key identifier:   80:E0:E6:C3:D6:80:BE:16:81:CE:7E:AD:E0:96:47:F6:1E:95:74:CF
Authority key identifier: 4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80
Certificate issuer:       /CN=A91827F2/serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
Certificate serial:       0292
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
Manifest number:          028B
Signing time:             Sun 05 Apr 2026 01:21:24 +0000
Manifest this update:     Sun 05 Apr 2026 01:21:24 +0000
Manifest next update:     Sun 12 Apr 2026 01:21:24 +0000
Files and hashes:         1: Th_fBBxL3f1RF0jkuYPctGJbmoA.crl (hash: W8xLIaxjdV57M4KV1Jn4AEN/3GyMXCRhp/0sqLhxGBs=)
                          2: 3CCE23342EF211EE8BE1AB1DC4F9AE02.roa (hash: oSOPa5PXvIuggnUAWdjwD208QEjv6p1RYpA0Azk+9ms=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl
                          rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:21:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 658 (0x292)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91827F2, serialNumber=4E1FDF041C4BDDFD511748E4B983DCB4625B9A80
        Validity
            Not Before: Apr  5 01:21:24 2026 GMT
            Not After : Apr 12 01:21:24 2026 GMT
        Subject: CN=69d1b914-8ea4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ab:0d:85:9b:ab:fd:53:14:80:08:f0:09:06:
                    b1:d1:2a:55:90:5a:de:14:9f:ea:da:5a:60:87:01:
                    c5:1c:ee:e4:2d:1b:5f:af:ef:1c:9a:5d:28:f0:fe:
                    f3:ff:fd:53:85:8b:98:56:87:88:fd:70:8d:ba:a6:
                    a5:62:db:a9:dd:39:a7:26:8c:46:ea:cf:c0:88:f7:
                    52:fe:ef:66:8e:48:2a:ed:34:98:88:5e:2c:02:10:
                    25:95:2c:fd:66:93:6f:16:51:e3:70:94:6b:7d:c3:
                    84:f8:fb:30:d7:b0:b0:13:42:47:62:b9:33:e8:20:
                    8a:b0:5a:70:52:55:26:84:7f:60:6f:49:a3:ee:f3:
                    8c:19:3a:cf:c9:f7:19:da:15:a3:56:3d:7f:3d:26:
                    c1:64:5f:fd:ee:c0:8f:19:b6:2f:94:a5:13:bd:c2:
                    57:f2:fd:50:f9:ce:36:6f:c0:d7:12:55:cf:f9:b1:
                    bb:7e:7e:e3:c9:cb:74:62:6b:a1:4f:ed:34:ed:f6:
                    2f:3e:84:81:0f:5e:9c:d3:cb:7f:a9:05:ab:81:fd:
                    3c:ab:ce:91:4f:68:7b:e9:10:1c:e6:34:9a:24:09:
                    b6:31:ac:58:bf:ee:89:bb:43:f7:1a:2a:b9:e4:98:
                    da:d2:e5:78:80:d6:a6:02:a2:82:47:0a:ed:29:67:
                    da:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:E0:E6:C3:D6:80:BE:16:81:CE:7E:AD:E0:96:47:F6:1E:95:74:CF
            X509v3 Authority Key Identifier:
                keyid:4E:1F:DF:04:1C:4B:DD:FD:51:17:48:E4:B9:83:DC:B4:62:5B:9A:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Th_fBBxL3f1RF0jkuYPctGJbmoA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91827F2/67EC6438539A11ED8FE3F71FC4F9AE02/Th_fBBxL3f1RF0jkuYPctGJbmoA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:02:e6:3b:31:be:65:35:54:eb:fe:b2:9c:ca:70:b8:6a:90:
         e3:6f:cf:51:1b:c1:98:98:aa:e6:88:9f:6a:ac:93:da:b8:dd:
         ee:c3:10:65:c6:e8:51:9d:bc:5b:6d:58:9e:2f:de:9f:7a:31:
         4d:7e:82:63:2e:df:68:fd:ef:bc:b4:04:cb:03:42:e8:3b:41:
         ec:d5:c2:51:4c:5c:da:21:b3:3f:25:e2:b5:9c:85:1e:17:61:
         67:80:d5:f4:36:f4:ca:1a:b9:6d:8a:fd:cc:9b:64:2f:db:63:
         20:5d:f8:68:e9:ab:06:5b:cc:49:5a:ab:43:d2:e9:28:cd:d4:
         bb:51:26:f2:d0:08:84:48:13:5b:7c:28:3a:18:42:16:91:f6:
         88:13:1d:06:b4:23:a0:7b:c8:db:0a:ce:fe:17:c3:6b:78:35:
         21:56:7d:76:4c:2b:80:2e:cd:e3:bc:38:60:c9:cd:76:b4:39:
         7c:84:33:b2:84:16:c0:95:6d:b8:6f:0a:08:01:29:a3:a3:82:
         dc:a6:41:e9:5f:b7:dd:2a:c1:c8:cc:b1:f8:b6:0c:59:69:4f:
         cf:98:4a:03:2b:36:2f:c6:d0:0d:e4:41:d6:74:86:aa:29:79:
         d4:8d:75:72:37:bf:d5:77:2d:d8:4f:72:96:07:d2:cf:0e:29:
         c2:93:d7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:47:17 2026 by rpki-client