Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
File:                     T4QeODPgrG_hvu69ABI10VKOzno.mft (raw, json)
Hash identifier:          YGpqONvyuJ0WrHbzL9li0REVyL2IUciuq30eInqOEJQ=
Subject key identifier:   E2:5F:0E:A2:3F:6D:EA:F0:A0:1A:28:D3:98:A2:3C:44:E3:C7:7A:54
Authority key identifier: 4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A
Certificate issuer:       /CN=A913AF6A/serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
Certificate serial:       01AE
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
Manifest number:          01A4
Signing time:             Wed 25 Mar 2026 03:28:19 +0000
Manifest this update:     Wed 25 Mar 2026 03:28:18 +0000
Manifest next update:     Wed 01 Apr 2026 03:28:18 +0000
Files and hashes:         1: T4QeODPgrG_hvu69ABI10VKOzno.crl (hash: Pe2c+QOG39ods7GJYqh5p/m6j3vB1Vb6l/WoUVCIzSQ=)
                          2: 2546725EA92811F0A138DF72C4F9AE02.roa (hash: ccOvd6OCJeS5Mo5TD4UA7bVIYTSRvb313FpwtTK7ruw=)
                          3: D2FF8C06A92711F08CEB6934C4F9AE02.roa (hash: KRsNH66T+IbVfJVXh4HXcfnfG/XP7iz+CZYJM0ybrSQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl
                          rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:28:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 430 (0x1ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913AF6A, serialNumber=4F841E3833E0AC6FE1BEEEBD001235D1528ECE7A
        Validity
            Not Before: Mar 25 03:28:18 2026 GMT
            Not After : Apr  1 03:28:18 2026 GMT
        Subject: CN=69c35653-75c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e7:66:17:15:05:52:f7:77:2b:c2:f5:c8:5c:
                    1e:91:c0:24:5d:f4:83:0e:45:63:9f:9f:3d:54:cb:
                    c5:1f:07:4b:55:93:f0:95:42:8b:57:1b:51:b0:92:
                    7f:6d:1b:f1:57:27:01:b5:f6:78:69:64:de:77:cf:
                    7b:f1:b4:f1:2e:1a:cb:9e:16:95:e0:42:1d:0f:5b:
                    b0:a0:ad:91:32:ab:29:71:e9:ae:c6:e2:69:6b:a4:
                    b9:2a:26:2a:1b:f3:03:8c:b7:c4:8f:d1:fe:61:b4:
                    e3:d2:7f:b8:2d:65:78:b5:85:d7:53:18:01:9b:ad:
                    54:a8:e5:2e:69:2b:10:7a:68:03:16:76:19:81:a2:
                    3d:42:7a:f3:bb:fe:95:83:28:21:ba:67:65:d0:d9:
                    f5:e1:e7:ef:92:9f:4c:a3:97:2b:2a:4f:ed:03:a9:
                    7c:5a:93:94:10:52:57:9a:e8:53:a8:19:e6:36:9e:
                    b6:4c:fb:7c:2e:16:08:42:43:02:ee:9d:7a:c0:8e:
                    68:e3:81:43:2e:9b:1f:f7:1b:be:b5:97:eb:47:fe:
                    4b:a3:7b:c2:0b:c2:9b:4d:2b:2c:a2:b9:07:ce:27:
                    cf:18:c4:7f:d9:39:8f:91:a8:1b:e4:b0:d0:59:11:
                    0c:bb:b8:bc:84:54:d2:ae:c6:bf:ce:1a:e4:27:4f:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:5F:0E:A2:3F:6D:EA:F0:A0:1A:28:D3:98:A2:3C:44:E3:C7:7A:54
            X509v3 Authority Key Identifier:
                keyid:4F:84:1E:38:33:E0:AC:6F:E1:BE:EE:BD:00:12:35:D1:52:8E:CE:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/T4QeODPgrG_hvu69ABI10VKOzno.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913AF6A/837CD346AE4211EEBF64DA69C4F9AE02/T4QeODPgrG_hvu69ABI10VKOzno.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:9a:d6:4d:b2:33:09:81:a8:bd:71:3a:38:c4:d3:65:56:1a:
         6e:d6:d5:cb:2a:7a:6c:2e:04:e9:46:12:f2:94:c6:83:26:5c:
         61:32:e9:b2:4b:df:d1:7f:32:00:22:39:98:0e:67:4f:df:be:
         e9:01:f4:6c:e1:f9:50:c7:e5:b8:08:c9:20:b4:a6:6f:4f:7a:
         46:80:bc:38:a3:a8:88:a3:e2:27:a6:02:9f:ef:b2:e8:00:f7:
         39:a8:54:f6:46:2d:d9:f4:b9:2c:1e:90:01:5d:1e:5f:42:d7:
         59:42:08:8f:e4:7b:9c:8f:61:4b:2a:53:4d:b9:c1:14:7f:9b:
         63:42:40:10:6e:55:b3:26:5d:73:b1:5a:68:6c:fc:2b:d2:6f:
         cb:e3:67:6f:b5:ca:ca:df:b7:fa:58:dd:8c:11:42:73:f0:4c:
         85:58:09:59:0f:d3:0c:e8:37:1a:84:62:50:29:9d:c2:ac:e2:
         54:e5:b4:60:15:06:d1:d3:f7:69:d2:33:e1:ff:2f:e5:78:07:
         e8:f7:87:03:e5:85:df:a7:6e:9a:38:3a:25:cc:e4:e7:55:c8:
         69:20:93:0a:94:bd:43:44:94:69:31:46:30:c5:c3:83:e9:7e:
         5f:91:0f:cb:dc:d9:67:90:82:7f:21:fd:ec:5b:ec:5c:89:d7:
         2a:53:48:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAa4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
M0FGNkExMTAvBgNVBAUTKDRGODQxRTM4MzNFMEFDNkZFMUJFRUVCRDAwMTIzNUQx
NTI4RUNFN0EwHhcNMjYwMzI1MDMyODE4WhcNMjYwNDAxMDMyODE4WjAYMRYwFAYD
VQQDEw02OWMzNTY1My03NWMwMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsudmFxUFUvd3K8L1yFwekcAkXfSDDkVjn589VMvFHwdLVZPwlUKLVxtRsJJ/
bRvxVycBtfZ4aWTed8978bTxLhrLnhaV4EIdD1uwoK2RMqspcemuxuJpa6S5KiYq
G/MDjLfEj9H+YbTj0n+4LWV4tYXXUxgBm61UqOUuaSsQemgDFnYZgaI9Qnrzu/6V
gyghumdl0Nn14efvkp9Mo5crKk/tA6l8WpOUEFJXmuhTqBnmNp62TPt8LhYIQkMC
7p16wI5o44FDLpsf9xu+tZfrR/5Lo3vCC8KbTSssorkHzifPGMR/2TmPkagb5LDQ
WREMu7i8hFTSrsa/zhrkJ0/9EwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFOJfDqI/
berwoBoo05iiPETjx3pUMB8GA1UdIwQYMBaAFE+EHjgz4Kxv4b7uvQASNdFSjs56
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzQUY2QS84MzdDRDM0NkFF
NDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JHX2h2dTY5QUJJMTBWS096
bm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL1Q0UWVPRFBnckdfaHZ1NjlBQkkxMFZLT3puby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
QUY2QS84MzdDRDM0NkFFNDIxMUVFQkY2NERBNjlDNEY5QUUwMi9UNFFlT0RQZ3JH
X2h2dTY5QUJJMTBWS096bm8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAn5rWTbIzCYGovXE6OMTTZVYabtbVyyp6bC4E6UYS8pTGgyZcYTLpskvf0X8y
ACI5mA5nT9++6QH0bOH5UMfluAjJILSmb096RoC8OKOoiKPiJ6YCn++y6AD3OahU
9kYt2fS5LB6QAV0eX0LXWUIIj+R7nI9hSypTTbnBFH+bY0JAEG5VsyZdc7FaaGz8
K9Jvy+Nnb7XKyt+3+ljdjBFCc/BMhVgJWQ/TDOg3GoRiUCmdwqziVOW0YBUG0dP3
adIz4f8v5XgH6PeHA+WF36dumjg6Jczk51XIaSCTCpS9Q0SUaTFGMMXDg+l+X5EP
y9zZZ5CCfyH97FvsXInXKlNICQ==
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:00 2026 by rpki-client