Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
File:                     aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft (raw, json)
Hash identifier:          L4SzVUXHfSJAZlQlXW9iiIYybSVHGl2XmM19+EujDds=
Subject key identifier:   81:D5:92:71:42:21:B5:85:58:0B:E4:92:67:E4:95:69:F0:8C:C1:37
Authority key identifier: 68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7
Certificate issuer:       /CN=A9199197/serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
Certificate serial:       095D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
Manifest number:          08F7
Signing time:             Tue 28 Apr 2026 20:56:43 +0000
Manifest this update:     Tue 28 Apr 2026 20:56:43 +0000
Manifest next update:     Tue 05 May 2026 20:56:43 +0000
Files and hashes:         1: aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl (hash: CxNi8F0GlNJanlvFBerS7HvXXui146b6etXj8MhR4d8=)
                          2: 14C388C2114311F0B3944E67C4F9AE02.roa (hash: Uo8Q/y2S0AomO+yycZEREAugFGcv/hV1i0jWeHXdlLc=)
                          3: 18F343922A5711EBB59D6526C4F9AE02.roa (hash: MfBYIfef5q6axAJciYZD+YSWEevAKozoCGz/YdfVQD8=)
                          4: 70F51BEE4B0D11EF94975151C4F9AE02.roa (hash: HSoL53wcuF162+Jp6uFyYtOESNj0gd6QJK8BOXEE1V0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl
                          rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 05 May 2026 20:56:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2397 (0x95d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9199197, serialNumber=6835DDFB8438D24BB6C5979316E54891066090A7
        Validity
            Not Before: Apr 28 20:56:43 2026 GMT
            Not After : May  5 20:56:43 2026 GMT
        Subject: CN=69f11f0b-ef2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cb:bc:69:aa:d4:33:ca:15:27:e2:bc:e8:1e:
                    ff:b5:da:06:35:ed:e7:67:ab:0c:40:85:fb:17:79:
                    fb:d4:80:19:cc:e3:b1:11:57:56:7c:b3:66:84:78:
                    8d:12:1f:ba:0b:46:a2:e3:52:4d:ec:a9:bc:27:00:
                    8a:b6:85:7e:bf:e2:51:8b:23:a7:a1:47:6a:4a:e0:
                    15:a8:7a:a3:22:73:3a:87:0d:07:f0:a1:1e:e5:6b:
                    3e:3f:26:a0:0b:76:0c:77:9e:06:22:07:98:06:bd:
                    16:62:87:0d:1d:e4:1e:7a:e8:98:d1:20:03:0b:8c:
                    3c:2b:60:1c:59:a2:50:43:49:8f:b0:ec:53:6f:cf:
                    f5:f6:8a:94:91:e9:54:54:ba:12:cc:f1:1f:bc:d2:
                    4a:ee:18:08:a0:47:e7:75:46:0e:c5:09:8f:e6:4a:
                    97:0d:38:99:01:90:2b:00:2a:49:a4:11:e3:ad:c8:
                    e1:f9:c6:e1:f3:ac:ab:7b:9a:3a:6b:e6:69:a7:5d:
                    47:7f:a4:83:a9:bc:a6:0d:f0:a0:09:18:1d:af:d9:
                    66:22:a9:cb:a8:56:5d:80:cf:1a:77:d5:c7:bc:38:
                    19:1a:fa:87:03:01:8f:01:d2:ad:2b:b2:b7:e3:d2:
                    27:48:07:42:4c:6b:66:5f:d6:21:af:82:31:f9:de:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D5:92:71:42:21:B5:85:58:0B:E4:92:67:E4:95:69:F0:8C:C1:37
            X509v3 Authority Key Identifier:
                keyid:68:35:DD:FB:84:38:D2:4B:B6:C5:97:93:16:E5:48:91:06:60:90:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aDXd-4Q40ku2xZeTFuVIkQZgkKc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9199197/84B2EC98F27D11EA9456EE60C4F9AE02/aDXd-4Q40ku2xZeTFuVIkQZgkKc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:10:37:4d:6d:ad:47:ad:fb:f7:4e:11:d2:37:e4:0b:15:eb:
         ee:0c:07:9d:f0:fa:0f:b3:78:6b:5c:a5:7d:28:44:14:31:74:
         eb:30:30:8e:97:8d:12:d8:35:07:66:e4:58:66:b4:e4:9f:3b:
         d8:23:3c:14:95:1b:2b:9c:97:87:b6:15:3d:5d:ad:32:4d:9c:
         69:b7:3c:85:da:6b:2f:47:51:eb:05:a1:91:5f:3d:90:5c:33:
         32:aa:e5:9c:6b:5c:60:a4:15:2f:5a:0c:f6:83:d3:6a:78:7c:
         53:b1:7e:99:77:5f:5f:bf:2a:ce:ab:92:de:57:55:03:d3:90:
         a1:5d:a8:9f:c3:14:06:78:24:d1:e8:52:fe:68:41:93:25:16:
         7f:10:61:4f:4c:51:b2:11:56:0d:3e:de:29:6f:a9:94:d6:f7:
         47:d3:a4:9d:e1:c7:73:87:27:dc:f5:00:d4:cb:92:2d:4b:81:
         0f:8a:46:9a:c8:76:f0:5c:a7:02:75:46:ed:41:24:2b:96:22:
         bb:6a:c5:15:82:50:a0:b3:16:78:11:88:3b:81:2b:e1:85:28:
         c7:2d:79:ac:0d:d4:d2:9e:2d:65:c7:02:13:ba:db:2b:15:6d:
         50:62:45:d0:a8:d2:a7:b9:ce:8a:4a:b2:f7:82:6d:fb:b5:e1:
         b7:50:b1:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 00:00:43 2026 by rpki-client