Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          52oMjvqMVSK8mqeg/zErFg6B9yFuaOWy5Dz6NePF8M0=
Subject key identifier:   98:B9:5D:41:5D:4F:63:ED:FD:D0:B4:0D:BD:8F:E9:18:B8:44:81:14
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       19BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          19AC
Signing time:             Sat 04 Apr 2026 16:17:51 +0000
Manifest this update:     Sat 04 Apr 2026 16:17:50 +0000
Manifest next update:     Sat 11 Apr 2026 16:17:50 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: PVffWQxLrw5+KdrDfK2/6XAyF46b0ndIpPlkjPSWyzU=)
                          2: 09C0DFCE202011F098619934C4F9AE02.roa (hash: wOYzNzzIS0paJhEaL4lnWRrHmB69EScSsL5hsvt2zxE=)
                          3: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: f0Q1Azb+EY8V4HrdxVOXBmjzrSvFe4VSQb8ZAnHoPpo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 16:17:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6586 (0x19ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Apr  4 16:17:50 2026 GMT
            Not After : Apr 11 16:17:50 2026 GMT
        Subject: CN=69d139af-8546
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:49:4b:bc:d5:29:d4:86:2a:e1:d1:6c:fc:ec:
                    d3:d7:80:f9:19:65:fa:9a:2b:b0:d3:5b:83:10:a9:
                    cd:14:9c:a2:d5:a2:19:fa:af:5e:3b:0c:27:56:39:
                    22:31:bc:63:40:4e:e9:2f:04:06:0a:84:33:89:04:
                    5c:29:10:a9:de:85:7a:f6:5b:c6:fd:44:35:95:02:
                    c0:76:60:89:a5:ac:d9:5e:b8:8c:5b:f3:c5:11:28:
                    90:3f:82:ed:f4:fa:87:81:4a:a2:25:6e:a0:39:fd:
                    e5:c3:dc:19:f6:50:d8:88:67:62:c9:a8:bd:f9:02:
                    08:46:e1:ec:26:77:49:0d:49:e1:48:70:a1:1f:ad:
                    95:e4:f4:57:9c:cf:e1:b2:aa:07:b9:7c:83:06:d0:
                    b0:72:95:44:a3:ea:39:45:76:50:42:5f:5f:a4:cd:
                    21:c2:b4:e8:48:5d:5e:90:e8:4a:9b:64:9d:9c:ba:
                    59:a1:b4:dc:6c:d4:58:a6:04:ba:76:63:a8:3a:7c:
                    78:77:af:6a:6b:3f:39:2e:fd:fa:3b:1e:e5:b9:5c:
                    51:c9:45:6d:c4:35:25:99:0f:90:a4:20:2a:75:03:
                    e2:68:b4:78:27:88:00:2a:81:b6:1d:dc:1f:94:cb:
                    df:9c:b1:63:b7:7b:69:fb:b6:d4:87:8c:6c:83:ac:
                    c4:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B9:5D:41:5D:4F:63:ED:FD:D0:B4:0D:BD:8F:E9:18:B8:44:81:14
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ca:f9:05:2b:e7:0c:c7:85:4c:97:66:a9:d9:3a:f2:62:f6:ad:
         9c:df:7c:e3:df:fa:fb:2c:7c:57:96:d2:c1:bc:d5:23:7a:fb:
         32:b5:6d:92:74:29:0c:a7:79:16:cb:c2:a3:b0:62:3d:93:ec:
         cf:19:23:67:24:47:a8:6b:7c:91:ee:81:a7:76:b7:64:70:04:
         86:b1:15:2a:de:63:c7:eb:c1:b4:96:17:ee:68:ec:bb:12:e5:
         61:08:95:49:f1:94:32:ae:0e:81:66:5f:9a:45:b6:2b:77:8c:
         de:58:31:46:b1:95:60:fa:74:54:03:38:e2:75:4d:a7:97:f4:
         7a:9f:1d:15:a1:ca:67:7c:7b:3f:99:7f:87:3f:90:ba:31:ed:
         dc:51:18:fb:25:5c:aa:79:19:f8:ed:a4:46:02:98:27:b8:dd:
         8a:01:f2:74:4d:8d:45:c8:54:8c:71:71:a1:70:f3:ec:32:c6:
         24:00:05:e6:60:70:dc:1d:a2:18:1e:1a:61:3a:35:d9:dd:89:
         cb:f3:db:88:e9:39:ee:27:91:04:37:d3:92:c8:21:fe:7c:42:
         58:44:e5:7d:a1:e5:49:91:a1:72:be:b2:6b:02:64:e7:4b:27:
         55:ef:0a:88:bb:22:0d:d2:b6:b7:6c:6f:66:6e:d6:7e:78:b4:
         8c:5c:3a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:41:07 2026 by rpki-client