Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
File:                     9FMh2HhbiJfVqDS5DquRDFWQnYU.mft (raw, json)
Hash identifier:          uXt3nmUTW3GGPiNT1JrG7O7N78PXDkOx7AQsso6slr4=
Subject key identifier:   F6:55:AF:8B:73:45:B2:3D:2E:68:81:F8:26:92:46:DA:CE:53:80:81
Authority key identifier: F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85
Certificate issuer:       /CN=A91DEDFD/serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
Certificate serial:       098C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
Manifest number:          0958
Signing time:             Sun 26 Apr 2026 20:04:47 +0000
Manifest this update:     Sun 26 Apr 2026 20:04:46 +0000
Manifest next update:     Sun 03 May 2026 20:04:46 +0000
Files and hashes:         1: 9FMh2HhbiJfVqDS5DquRDFWQnYU.crl (hash: 4IsFZNhkxHuXFRJGYCYSmKjXu0reR3q8voF3Aq3fA1I=)
                          2: 7AE3D13C62A111ED80F96E47C4F9AE02.roa (hash: XwSVfomRX7G4MnjlJ+PBSsE8vc5xoODsWcCK7AyQxFs=)
                          3: 8F6A0892437611EC9E067020C4F9AE02.roa (hash: i9bKSkMWI4ZPCT+DC1RNfMhYW8yWfNahl2UKJNVceVY=)
                          4: 7E4270063AF011EC9E421056C4F9AE02.roa (hash: OaLKzRWPKKcTGw6rmWCHPUNpoog0PfcR906ei0W6zKM=)
                          5: 1A7632424DA111ECA1180F87C4F9AE02.roa (hash: LcdcDgqYJUtyEP4R5V6Xz+QQ1xcerXDfRjgEZjMW5Sw=)
                          6: F547BE4253EA11F08B05D02EC4F9AE02.roa (hash: ulIWI26V47R53BZSt6uCetTpw45HUPI+vILpTZRiHGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl
                          rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 03 May 2026 20:04:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2444 (0x98c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DEDFD, serialNumber=F45321D8785B8897D5A834B90EAB910C55909D85
        Validity
            Not Before: Apr 26 20:04:46 2026 GMT
            Not After : May  3 20:04:46 2026 GMT
        Subject: CN=69ee6fdf-0df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:80:43:3b:87:dc:09:43:91:51:19:8e:23:56:
                    c7:0a:9f:a0:4e:b5:76:d4:4f:70:86:80:4b:4b:54:
                    64:9e:89:8a:e8:f3:46:92:e7:a9:02:eb:23:9b:e8:
                    89:6d:47:5b:6d:75:00:3f:9d:e4:a0:67:d9:3d:8b:
                    b1:a9:d7:54:d0:ea:08:ce:56:6b:1e:21:32:fc:33:
                    49:1c:be:75:5c:20:64:94:1b:17:f6:fb:ee:6f:d1:
                    fb:94:df:14:3c:5b:7c:e9:95:10:00:d7:0a:fc:09:
                    b9:f8:21:9b:83:2c:be:ec:50:a7:a6:a0:b1:0c:8b:
                    fc:c7:8a:9d:98:54:e2:a2:c3:11:ab:cd:1d:e4:c0:
                    42:13:64:b4:3b:c9:25:70:1e:b4:29:39:f1:fd:3c:
                    4a:34:32:f6:03:64:da:4b:a8:25:3a:4c:b1:c5:23:
                    a8:ac:0c:4c:ba:78:ee:78:6e:ad:fd:7a:ed:f4:30:
                    fe:ba:9f:6a:73:37:c3:e2:74:17:71:ef:ef:bb:f4:
                    59:30:2d:f1:c5:24:a3:6f:21:b8:78:9e:31:99:42:
                    df:10:7b:9a:7b:c6:ea:99:d9:31:43:f6:10:c2:e2:
                    f5:20:cd:8d:ce:d6:42:be:5c:20:4a:44:dd:56:6b:
                    fd:49:76:47:34:d8:e2:90:2a:cd:61:97:e9:c8:28:
                    93:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:55:AF:8B:73:45:B2:3D:2E:68:81:F8:26:92:46:DA:CE:53:80:81
            X509v3 Authority Key Identifier:
                keyid:F4:53:21:D8:78:5B:88:97:D5:A8:34:B9:0E:AB:91:0C:55:90:9D:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9FMh2HhbiJfVqDS5DquRDFWQnYU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DEDFD/54536B3EBC8811EA88EF3D49C4F9AE02/9FMh2HhbiJfVqDS5DquRDFWQnYU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:63:a9:de:67:a2:e5:58:4e:b1:b6:f2:c1:7d:62:b9:63:5c:
         8b:c5:c0:27:f8:13:df:a4:d1:f5:24:7f:4e:9c:d5:39:79:ea:
         01:24:3c:4b:82:fc:0b:d1:18:02:0e:68:9d:3e:50:fa:dd:0d:
         7b:7d:8b:6b:1a:9b:83:5a:94:47:5c:91:a5:ac:c6:89:f9:f6:
         80:b4:ed:74:c6:bb:02:7e:ee:32:c2:db:05:61:0d:66:54:29:
         a3:84:ab:b2:95:fd:91:db:a6:98:96:c4:a1:d4:07:51:32:e3:
         75:ae:4e:d0:2c:b7:a2:5b:e9:83:e5:87:ca:26:9b:3b:f8:6a:
         e8:79:23:e0:48:28:a7:d3:1a:2e:76:52:e5:49:9f:a2:86:d5:
         24:97:9d:be:24:6a:73:8e:49:66:c9:22:be:22:e3:e5:c0:74:
         25:3f:ed:b6:cf:37:62:ea:be:02:f7:b8:73:70:92:d3:ac:e4:
         47:8e:94:ec:98:f8:de:2d:03:06:4d:38:2e:90:5c:32:58:64:
         c2:53:ff:74:6e:6f:c3:91:52:b2:9b:18:dd:ea:1f:dd:32:9d:
         df:2c:db:cb:50:45:04:dd:b2:90:61:7f:48:4c:77:af:39:38:
         3f:3a:77:34:e0:32:d2:2d:b9:2b:e6:1f:4a:bd:ed:75:de:3f:
         d7:c0:be:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 02:05:50 2026 by rpki-client