Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
File:                     o5TKy9vYxM31SvFn4m1WJKUk4u4.mft (raw, json)
Hash identifier:          Bu4uEXcWb6yyHZH7XRhFEaBIGXOsVWSOOggJGEcTCYw=
Subject key identifier:   5E:15:7A:3F:18:CA:A6:75:CB:74:8D:10:40:73:5D:F3:24:43:33:C0
Authority key identifier: A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE
Certificate issuer:       /CN=A918D7A4/serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
Certificate serial:       0166
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
Manifest number:          0161
Signing time:             Sun 05 Apr 2026 04:21:44 +0000
Manifest this update:     Sun 05 Apr 2026 04:21:44 +0000
Manifest next update:     Sun 12 Apr 2026 04:21:44 +0000
Files and hashes:         1: o5TKy9vYxM31SvFn4m1WJKUk4u4.crl (hash: XmkSgjZfQVXgO4LOmOotXuCPjqmQ41vfE6nd+6xalvo=)
                          2: 8D61B05219AE11EFB41EAC2CC4F9AE02.roa (hash: i6NbV2TnA8xM/XbIbDntVKoMV7cehYHQufnFaA0FyJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl
                          rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:21:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D7A4, serialNumber=A394CACBDBD8C4CDF54AF167E26D5624A524E2EE
        Validity
            Not Before: Apr  5 04:21:44 2026 GMT
            Not After : Apr 12 04:21:44 2026 GMT
        Subject: CN=69d1e358-9afe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:e3:dd:02:ec:39:02:00:30:dd:13:60:66:
                    95:3b:b4:a9:56:cd:a8:18:ee:74:5e:e9:00:6a:ac:
                    f8:37:ad:f6:3d:48:e6:88:6b:16:4f:97:63:5e:5b:
                    ac:09:f5:a2:da:d1:27:60:2e:06:b6:94:6b:0b:35:
                    68:d5:01:79:1c:95:c5:bc:c6:8a:3e:5c:17:3b:5a:
                    4b:e2:9e:e7:76:b1:b0:54:0b:12:5b:a0:a2:b7:c3:
                    37:28:be:04:b3:81:c0:95:79:be:9c:d2:ca:be:bd:
                    4e:1b:36:ca:05:a0:76:ff:d0:14:b2:57:e2:d1:f5:
                    21:b4:84:02:aa:d7:a4:b5:a6:4a:71:91:3f:25:20:
                    4e:d9:49:68:c9:0d:8e:0a:26:e9:29:63:97:d0:ab:
                    fd:a2:56:6e:ea:de:c0:95:47:df:20:9d:fc:33:65:
                    39:99:02:75:a3:87:8a:78:09:8c:9c:20:14:46:4b:
                    5b:dc:3d:e7:20:ba:23:f0:b0:e2:6f:76:6d:d5:16:
                    30:14:b7:97:5c:cc:e3:9f:d9:65:44:bc:40:b9:36:
                    e0:f0:7a:c4:8d:e9:f8:14:d7:fd:b1:a7:9e:5d:95:
                    d6:3d:d7:78:df:2d:59:9b:c7:79:28:2c:1f:55:ab:
                    59:4d:c1:2f:48:0e:fd:b4:e3:2d:ba:4e:12:95:e2:
                    c8:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:15:7A:3F:18:CA:A6:75:CB:74:8D:10:40:73:5D:F3:24:43:33:C0
            X509v3 Authority Key Identifier:
                keyid:A3:94:CA:CB:DB:D8:C4:CD:F5:4A:F1:67:E2:6D:56:24:A5:24:E2:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/o5TKy9vYxM31SvFn4m1WJKUk4u4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D7A4/63ED4010198611EF89087E30C4F9AE02/o5TKy9vYxM31SvFn4m1WJKUk4u4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7a:f1:1a:14:40:50:38:6b:7c:9a:eb:44:69:75:18:6b:32:
         88:a0:a8:3a:6e:c0:29:96:34:a6:2f:1b:6c:86:b4:1b:70:52:
         f9:64:e6:77:a5:a7:b4:cf:d4:42:a8:a6:8a:52:00:14:8a:aa:
         f9:03:97:ee:62:17:43:36:bb:98:16:ef:0e:cf:1f:74:97:93:
         63:92:08:ab:1b:b5:59:7e:19:4b:bd:f4:1d:ba:4c:ba:29:7c:
         6d:fe:48:9a:40:89:dc:28:31:75:6e:9c:f7:ee:1f:94:4f:16:
         29:a1:bf:6e:2f:60:86:21:6a:7c:43:ec:a5:88:51:f9:0c:18:
         a4:72:18:33:d3:69:2f:a6:0d:37:38:70:55:bb:0e:9a:a8:59:
         54:0a:dc:12:56:48:f1:cb:12:92:91:f0:39:4a:67:85:6e:52:
         4f:e7:f6:5a:0f:7f:d6:cb:81:28:bc:84:cd:57:16:c7:d5:ae:
         ed:46:0c:52:39:f3:13:01:bc:1b:e0:1b:80:cd:c6:ff:6f:41:
         a2:4e:99:b7:68:74:54:7b:59:b8:d8:07:e8:86:1a:67:98:a1:
         e6:d5:ad:69:f0:8c:27:95:c2:22:d2:29:c3:ad:ba:52:3e:84:
         6c:c2:17:58:fe:64:00:71:d0:e1:04:2c:87:dd:c0:4d:49:90:
         27:e7:da:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:04 2026 by rpki-client