Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
File:                     4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft (raw, json)
Hash identifier:          WelyBD83uxwNKApy1zlZrQmkhyT8pbk8UQrWcksBh+U=
Subject key identifier:   C1:C0:5E:17:F6:8D:84:E8:89:0B:BF:B4:7F:A9:FE:C5:FA:AA:A6:F9
Authority key identifier: E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E
Certificate issuer:       /CN=A9118799/serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E
Certificate serial:       19ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
Manifest number:          19DB
Signing time:             Tue 12 May 2026 16:22:48 +0000
Manifest this update:     Tue 12 May 2026 16:22:47 +0000
Manifest next update:     Tue 19 May 2026 16:22:47 +0000
Files and hashes:         1: 4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl (hash: WZWENc6/UKrgGtKvcSyQiGLVK3wurhWLeSIg3LS+LcM=)
                          2: 99AB821E859C11E7A1FEC80AC4F9AE02.roa (hash: zT1WvW8KfErCCGr8dQr6mISjAiGw8RTqnvePhZgSly8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl
                          rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:22:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6637 (0x19ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118799, serialNumber=E0CAAD17C068D8602BCCEB467B455510BC52390E
        Validity
            Not Before: May 12 16:22:47 2026 GMT
            Not After : May 19 16:22:47 2026 GMT
        Subject: CN=6a0353d8-c8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:59:dd:84:c5:94:d4:bc:6c:33:fe:06:69:a4:
                    bc:7b:89:9f:8e:01:82:97:28:fe:bd:d9:f2:62:6d:
                    01:44:71:8e:2a:45:6b:4a:18:97:08:dd:02:8f:3f:
                    28:4d:18:05:0f:48:d8:7c:37:db:54:09:57:72:1d:
                    2a:84:80:9a:c3:d6:17:c8:4a:2c:f6:b8:82:90:4f:
                    02:52:e4:b2:95:2f:56:0b:70:45:5a:3f:62:0d:ca:
                    a0:a5:23:cb:7a:fe:03:8d:9d:68:9d:c1:90:eb:cc:
                    e1:53:b7:59:33:69:25:35:47:2c:0a:13:f0:76:a8:
                    bd:42:36:b7:cf:e3:2f:ca:d2:be:45:74:75:3a:ae:
                    50:1f:4b:92:7c:bc:af:49:bb:11:26:c0:93:a1:c6:
                    22:7e:eb:27:70:4b:05:87:d0:b3:74:51:2c:92:8d:
                    4c:44:21:b0:ba:23:50:e8:f2:51:29:a1:f6:1c:34:
                    47:f2:0f:f4:7c:c0:8a:9b:e3:43:d1:bd:80:52:e5:
                    11:9f:a2:c2:c3:a2:12:c8:4d:5a:65:b4:68:83:fc:
                    b6:8c:e0:bd:30:fc:e2:af:e2:72:11:4c:23:46:fe:
                    da:72:df:49:84:e1:7e:db:5c:ed:97:05:ee:0d:44:
                    4b:5e:81:7d:91:4d:d4:fe:0c:d3:6c:dc:29:bb:ee:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:C0:5E:17:F6:8D:84:E8:89:0B:BF:B4:7F:A9:FE:C5:FA:AA:A6:F9
            X509v3 Authority Key Identifier:
                keyid:E0:CA:AD:17:C0:68:D8:60:2B:CC:EB:46:7B:45:55:10:BC:52:39:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4MqtF8Bo2GArzOtGe0VVELxSOQ4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118799/3287BFA27EC711E7883E2E58C4F9AE02/4MqtF8Bo2GArzOtGe0VVELxSOQ4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:85:16:fa:69:73:2d:1a:5f:c9:67:7d:6f:ba:6c:bf:6d:dc:
         f0:10:9f:4b:e1:45:d2:58:b9:1a:e2:0b:10:93:fa:88:d9:58:
         f7:0b:f2:1d:20:10:6e:c9:f4:e2:1e:66:94:0b:88:32:ea:29:
         26:57:0b:bb:a6:86:2e:92:c9:6d:c3:29:f6:13:ed:10:3d:45:
         31:04:b3:5e:56:e5:73:4a:6a:43:14:02:a0:7c:e7:22:1a:36:
         5c:7e:b0:26:76:82:10:7c:3b:18:5a:c0:ab:0d:7e:d1:34:cf:
         62:74:f4:4f:b4:74:b9:9b:ca:11:85:2d:17:d7:23:bc:da:4f:
         41:84:02:11:2f:52:11:8f:3f:c7:4b:8a:2a:48:f5:f6:24:e3:
         68:89:2c:aa:6f:5d:e4:c6:ef:c6:5d:22:d5:08:25:94:46:c8:
         d2:98:3e:5d:b3:e6:73:bf:6f:cb:eb:a9:ab:0e:b5:51:71:48:
         98:06:66:dd:da:4c:55:7b:d4:96:95:6b:39:6b:e0:27:b9:2b:
         ea:c8:77:d7:18:16:dd:84:dd:18:3f:48:ef:0b:1b:82:75:f3:
         d4:4c:fc:45:90:d1:92:34:f0:11:72:8d:b8:00:7b:ac:fd:1f:
         99:55:2f:7a:2a:96:ec:36:62:ce:18:77:e8:ad:1a:c2:ee:85:
         b7:4c:33:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:07:25 2026 by rpki-client