Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
File:                     1cjx3JTTw0gdbGlTaVakpSjV7cM.mft (raw, json)
Hash identifier:          i+zpNtZzUvYfVbQndUzihnQitGHZSpeXqJOK0kvTkog=
Subject key identifier:   46:0F:85:D7:3C:56:4A:42:95:02:CC:5F:5F:CF:32:7D:E5:AD:04:BE
Authority key identifier: D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3
Certificate issuer:       /CN=A918AA4D/serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
Certificate serial:       30F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
Manifest number:          30C1
Signing time:             Sat 04 Apr 2026 15:24:49 +0000
Manifest this update:     Sat 04 Apr 2026 15:24:49 +0000
Manifest next update:     Sat 11 Apr 2026 15:24:49 +0000
Files and hashes:         1: 1cjx3JTTw0gdbGlTaVakpSjV7cM.crl (hash: rGZ2UVqphrlycTNDfcpgcz0p88NH/wFYLItIxT7kt1E=)
                          2: 517E7D1AB0EC11E5A6934B42C4F9AE02.roa (hash: 5DRF3OBPfXV3lU2bu3oUnMJrvoo8XlLJ7cqTsx4GaH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl
                          rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:24:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12532 (0x30f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918AA4D, serialNumber=D5C8F1DC94D3C3481D6C69536956A4A528D5EDC3
        Validity
            Not Before: Apr  4 15:24:49 2026 GMT
            Not After : Apr 11 15:24:49 2026 GMT
        Subject: CN=69d12d41-904a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ab:b1:83:99:42:46:df:f5:37:38:98:35:9c:
                    65:4a:53:1d:27:7f:d1:8d:49:23:50:b7:88:78:57:
                    22:4b:c4:13:f1:d4:05:a4:2c:0c:27:b8:52:b7:e2:
                    f6:99:0e:50:5a:79:8d:50:29:3a:2e:f5:6e:5c:06:
                    34:5f:3c:f2:cb:1d:6a:5a:cd:b4:58:e7:ad:b5:be:
                    35:5e:db:a8:04:ed:a7:ab:0a:27:11:14:8d:26:8d:
                    89:87:34:8e:2a:24:2d:13:38:d3:ef:4a:5b:cd:7c:
                    61:aa:eb:3e:fe:d1:e3:a4:88:f6:46:49:3b:b6:1f:
                    5d:8d:03:f4:d2:5c:dc:cb:14:34:c6:cd:ab:ca:e1:
                    d3:78:8c:4b:ca:30:b8:55:02:98:5f:d6:28:c1:78:
                    26:48:22:1e:f2:a8:90:b8:e0:58:7a:dc:74:76:7a:
                    29:15:05:46:41:69:3a:f7:9e:66:63:fd:81:27:ad:
                    87:6e:de:f7:60:ce:3f:ec:66:c5:45:10:d9:d9:ab:
                    52:ef:3b:4d:22:43:dc:1f:1b:15:f8:4c:8f:8b:06:
                    5a:34:d6:71:24:d5:f3:b3:ed:91:8c:b7:72:9a:be:
                    76:09:c1:38:75:3c:ae:7f:f3:86:29:6c:20:86:dc:
                    9a:23:f8:b6:0d:cf:91:49:10:de:60:47:95:c6:e1:
                    ad:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:0F:85:D7:3C:56:4A:42:95:02:CC:5F:5F:CF:32:7D:E5:AD:04:BE
            X509v3 Authority Key Identifier:
                keyid:D5:C8:F1:DC:94:D3:C3:48:1D:6C:69:53:69:56:A4:A5:28:D5:ED:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1cjx3JTTw0gdbGlTaVakpSjV7cM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918AA4D/6C055824058711E3BFE57CA15911EA32/1cjx3JTTw0gdbGlTaVakpSjV7cM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:26:76:f4:34:98:14:cd:7d:11:41:03:99:0e:91:aa:05:8a:
         41:26:22:35:aa:c4:79:9a:59:f5:5d:00:65:bb:6c:f5:b9:6b:
         7d:0d:30:f1:f7:ba:3e:de:2d:9c:0a:18:4a:86:88:08:5d:d7:
         79:fb:2c:61:20:ff:ca:a3:91:ed:09:93:39:45:5c:b0:29:62:
         ec:cf:41:2d:49:1b:64:e8:f1:13:27:5c:f4:2a:d5:3a:82:3d:
         82:c6:8e:a5:63:b2:8a:db:d5:88:00:4f:43:90:10:1f:cd:da:
         0f:28:34:b1:dd:97:ea:c0:96:ab:bf:89:b6:c7:3c:ea:cf:67:
         82:c9:bc:8d:39:55:75:ab:95:b3:ba:a0:cb:af:61:40:22:7e:
         d7:b8:c6:ea:9f:43:4d:ed:ce:0a:47:15:04:41:bc:42:a3:ab:
         4b:49:7b:61:69:08:8e:a7:9c:32:69:20:7f:7a:93:41:d7:e5:
         64:69:93:b3:6b:0a:51:cd:64:3a:2c:46:bd:95:75:d7:6d:e3:
         45:6c:0c:f7:71:cf:6c:17:9b:ae:ff:4c:3b:a2:e5:ff:b1:32:
         21:86:62:85:73:dd:18:4a:38:d5:84:59:62:04:d7:9f:0a:97:
         55:16:d2:68:53:52:2f:41:43:5a:f2:77:aa:a2:99:b2:98:8d:
         63:a1:d6:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:26 2026 by rpki-client