Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
File:                     iU_hE5i2ea6xsRixveZz4Yz26TQ.mft (raw, json)
Hash identifier:          e+29GWLHiD6ePHogCCm3cNYOewsUdE7I4f4SvtCjAKo=
Subject key identifier:   64:DA:ED:51:2F:43:2C:53:04:82:64:51:C2:43:32:BE:6A:0D:71:F3
Authority key identifier: 89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34
Certificate issuer:       /CN=A919C47E/serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
Certificate serial:       142E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
Manifest number:          13F2
Signing time:             Wed 29 Apr 2026 00:19:03 +0000
Manifest this update:     Wed 29 Apr 2026 00:19:02 +0000
Manifest next update:     Wed 06 May 2026 00:19:02 +0000
Files and hashes:         1: iU_hE5i2ea6xsRixveZz4Yz26TQ.crl (hash: kPnJG2mlq2C0xNU4Wx0Zv+Z6b3bfyUq7JkABPdtXzvM=)
                          2: B2E4A482E4D611EDB15EDE36C4F9AE02.roa (hash: VFVTymwrp8V+E6BLs3C4Cm25rAuqTUZ0SRrvUpgChQk=)
                          3: AF14F7EC516411F08E03714FC4F9AE02.roa (hash: 388AG09rRUDKvKhyNmxbF15VLGsqHkKaZsreBoM4fr8=)
                          4: 1AE4CD843AF511F0B702C741C4F9AE02.roa (hash: WY85OZSDqgP3JecVrbLGH7yASGCrRmcqJRott+5khbE=)
                          5: 02BFF64EE6A811EFB5943878C4F9AE02.roa (hash: Ip5tGE+xBmZzGbuYsKhlox7o+yVLz36sUIXrRO8cJe8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl
                          rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 06 May 2026 00:19:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5166 (0x142e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919C47E, serialNumber=894FE11398B679AEB1B118B1BDE673E18CF6E934
        Validity
            Not Before: Apr 29 00:19:02 2026 GMT
            Not After : May  6 00:19:02 2026 GMT
        Subject: CN=69f14e77-4566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:eb:69:a3:e9:4f:96:04:7c:b1:17:8c:e4:6a:
                    28:38:ad:16:0a:30:de:ed:e1:10:00:3d:d0:33:24:
                    a2:30:ee:67:41:56:5c:95:01:00:c2:a8:7a:fc:65:
                    30:15:6c:d9:93:8b:a0:59:3a:e9:c5:c6:94:86:f0:
                    5e:26:1d:98:54:a5:e7:16:00:5a:f2:84:b6:44:f5:
                    25:ce:29:3f:ae:fa:45:5c:b0:54:ed:4c:eb:d6:4f:
                    03:2c:4c:1e:f5:86:d8:33:f6:f2:22:3f:12:de:d1:
                    eb:fa:d4:95:f7:22:d6:2d:06:99:e0:18:17:cd:94:
                    2b:85:94:28:ef:40:b5:57:88:02:92:9e:bb:be:25:
                    34:87:bb:5f:e8:48:fc:e2:ec:62:a6:fe:3a:ab:93:
                    b5:4e:06:6d:2b:69:6d:88:bd:06:7e:74:ba:93:b5:
                    9c:e9:ef:7a:1e:1b:94:ad:90:af:9d:f3:7c:d3:bf:
                    44:1a:de:d7:4e:0a:cf:5e:4f:a9:0a:95:15:22:6a:
                    e7:f6:28:7e:ca:d4:e1:09:4b:ae:e9:62:ac:b1:64:
                    43:50:5b:d4:a0:5e:9d:a1:fa:de:ab:8f:c0:5f:78:
                    f0:2f:be:1d:ed:5b:17:12:84:9a:1f:95:dc:ae:14:
                    7b:06:9e:7e:83:5a:ef:a4:58:9c:a8:30:75:e9:61:
                    0f:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DA:ED:51:2F:43:2C:53:04:82:64:51:C2:43:32:BE:6A:0D:71:F3
            X509v3 Authority Key Identifier:
                keyid:89:4F:E1:13:98:B6:79:AE:B1:B1:18:B1:BD:E6:73:E1:8C:F6:E9:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iU_hE5i2ea6xsRixveZz4Yz26TQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919C47E/BCEDF442B0BF11E886392237C4F9AE02/iU_hE5i2ea6xsRixveZz4Yz26TQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:46:57:ea:75:ca:b7:ba:be:16:bc:a3:ab:54:49:a1:97:ad:
         9c:3d:5c:68:ca:5a:4b:8d:a0:2e:e7:e1:00:28:ed:d7:ca:b9:
         24:98:d3:ec:52:0c:cc:c4:e6:a9:ed:20:e7:d7:dc:0d:f1:d7:
         66:f3:81:89:8d:73:2b:b6:2d:56:55:47:79:90:72:64:01:1d:
         0c:a1:20:02:fa:83:e3:73:d5:67:c9:cb:74:2c:68:97:6b:41:
         12:e3:06:f2:7d:30:a0:27:36:31:34:e7:f6:8a:3e:0d:4f:be:
         5f:fd:bf:30:7c:25:6e:ee:2a:af:32:6b:43:42:3f:e1:29:58:
         5f:b9:6a:0a:78:b7:4b:55:cd:1d:62:b0:2a:8f:3b:84:48:8a:
         cb:9c:d2:9b:8f:43:46:1d:5f:f6:b4:9b:60:5a:55:0d:0f:26:
         d9:5d:87:db:25:91:5d:7c:ea:a1:08:c9:0c:bc:de:79:68:46:
         a0:7c:64:6b:8e:8f:53:5e:76:ec:d5:1b:5d:73:fa:61:6b:99:
         cf:83:38:88:61:1b:78:3e:33:99:6d:da:d2:28:40:19:08:33:
         ab:f9:0b:4d:ea:d2:65:a9:3a:98:3c:2a:28:2c:ac:ff:4a:40:
         4d:81:6b:ae:17:05:7c:c7:d4:80:1d:84:53:0b:53:9e:93:78:
         3c:d7:4c:4f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFC4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUM0N0UxMTAvBgNVBAUTKDg5NEZFMTEzOThCNjc5QUVCMUIxMThCMUJERTY3M0Ux
OENGNkU5MzQwHhcNMjYwNDI5MDAxOTAyWhcNMjYwNTA2MDAxOTAyWjAYMRYwFAYD
VQQDEw02OWYxNGU3Ny00NTY2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA9etpo+lPlgR8sReM5GooOK0WCjDe7eEQAD3QMySiMO5nQVZclQEAwqh6/GUw
FWzZk4ugWTrpxcaUhvBeJh2YVKXnFgBa8oS2RPUlzik/rvpFXLBU7Uzr1k8DLEwe
9YbYM/byIj8S3tHr+tSV9yLWLQaZ4BgXzZQrhZQo70C1V4gCkp67viU0h7tf6Ej8
4uxipv46q5O1TgZtK2ltiL0GfnS6k7Wc6e96HhuUrZCvnfN8079EGt7XTgrPXk+p
CpUVImrn9ih+ytThCUuu6WKssWRDUFvUoF6dofreq4/AX3jwL74d7VsXEoSaH5Xc
rhR7Bp5+g1rvpFicqDB16WEP6wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGTa7VEv
QyxTBIJkUcJDMr5qDXHzMB8GA1UdIwQYMBaAFIlP4ROYtnmusbEYsb3mc+GM9uk0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5QzQ3RS9CQ0VERjQ0MkIw
QkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVhNnhzUml4dmVaejRZejI2
VFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2lVX2hFNWkyZWE2eHNSaXh2ZVp6NFl6MjZUUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
QzQ3RS9CQ0VERjQ0MkIwQkYxMUU4ODYzOTIyMzdDNEY5QUUwMi9pVV9oRTVpMmVh
NnhzUml4dmVaejRZejI2VFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJkZX6nXKt7q+Fryjq1RJoZetnD1caMpaS42gLufhACjt18q5JJjT7FIMzMTm
qe0g59fcDfHXZvOBiY1zK7YtVlVHeZByZAEdDKEgAvqD43PVZ8nLdCxol2tBEuMG
8n0woCc2MTTn9oo+DU++X/2/MHwlbu4qrzJrQ0I/4SlYX7lqCni3S1XNHWKwKo87
hEiKy5zSm49DRh1f9rSbYFpVDQ8m2V2H2yWRXXzqoQjJDLzeeWhGoHxka46PU152
7NUbXXP6YWuZz4M4iGEbeD4zmW3a0ihAGQgzq/kLTerSZak6mDwqKCys/0pATYFr
rhcFfMfUgB2EUwtTnpN4PNdMTw==
-----END CERTIFICATE-----
Generated at Wed Apr 29 16:59:32 2026 by rpki-client