Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
File:                     4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft (raw, json)
Hash identifier:          ZAvOHeaSEeP62n9H9o1M1NTG5blPLz8/IUuUpZBrCgU=
Subject key identifier:   24:62:43:B7:B8:1A:5C:F3:BC:76:10:6D:50:AB:D7:82:86:00:39:76
Authority key identifier: E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62
Certificate issuer:       /CN=A917F854/serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
Manifest number:          0124
Signing time:             Wed 25 Mar 2026 04:59:51 +0000
Manifest this update:     Wed 25 Mar 2026 04:59:51 +0000
Manifest next update:     Wed 01 Apr 2026 04:59:51 +0000
Files and hashes:         1: 4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl (hash: /T5HW/H2f35nXFUZsHSpYyhUsRhoRe7DmBSSCLBwilE=)
                          2: 3C74C0E0799D11EF9547461CC4F9AE02.roa (hash: 2lh0VekensC1iCGtapEG4/oWVTugB2CUNEuEgGTMM4E=)
                          3: 3CE9A810799D11EF9547461CC4F9AE02.roa (hash: jyhxOeVpH0OFLETq5nPbqtVCOCG8G/oOvurrxR+iOB4=)
                          4: DA21D1C8DF0711EFA13DFF77C4F9AE02.roa (hash: 1lIzFQEALQy8v+QadRa7FoXrMcnKcVBzKsOnfc22ih8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl
                          rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F854, serialNumber=E11A472F849FA3D663CA87CA6633ECE7D8D00762
        Validity
            Not Before: Mar 25 04:59:51 2026 GMT
            Not After : Apr  1 04:59:51 2026 GMT
        Subject: CN=69c36bc7-27b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a8:df:bd:de:09:8f:8c:73:57:7a:52:45:52:
                    89:e1:4c:5f:55:bc:38:a7:12:7e:76:b7:ec:c2:cc:
                    f8:da:1e:ba:f3:a6:24:bb:bc:0c:d2:55:24:73:9e:
                    75:ef:99:41:30:92:09:5b:e5:c4:31:81:c4:7a:bc:
                    68:20:98:b2:1c:90:9c:16:d4:06:40:b1:6c:90:76:
                    42:79:8f:b8:a7:23:6e:1e:92:76:4e:aa:9e:d2:2a:
                    6c:4f:18:37:f8:f6:11:dd:1b:2f:70:1d:4c:3c:03:
                    d0:62:d5:7d:97:db:b7:9c:0b:7a:81:e3:49:75:dc:
                    13:1b:14:45:1d:82:33:6f:c4:b1:8f:29:d5:9e:51:
                    3c:69:ed:fc:dc:3f:c2:71:bf:b4:90:9b:77:80:1f:
                    ff:12:95:61:77:93:a8:c5:ec:73:4f:ab:8c:e2:dc:
                    36:00:2f:e6:d8:b6:fb:f0:ad:41:f0:c3:ad:ec:61:
                    da:31:84:2c:98:88:9f:19:51:ec:49:d4:17:f1:d3:
                    9e:1b:d3:f4:76:86:11:41:90:97:ea:a7:f5:e1:4b:
                    ff:fb:77:ff:6d:d1:18:31:e5:04:b1:c2:13:a5:e5:
                    30:5b:e5:99:9e:2d:bb:43:a6:93:6e:30:dd:b9:41:
                    96:07:c2:60:88:c5:f3:f0:8f:db:35:ed:cc:42:4c:
                    6c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:62:43:B7:B8:1A:5C:F3:BC:76:10:6D:50:AB:D7:82:86:00:39:76
            X509v3 Authority Key Identifier:
                keyid:E1:1A:47:2F:84:9F:A3:D6:63:CA:87:CA:66:33:EC:E7:D8:D0:07:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4RpHL4Sfo9ZjyofKZjPs59jQB2I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F854/A8964660799B11EF811F9019C4F9AE02/4RpHL4Sfo9ZjyofKZjPs59jQB2I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:25:e6:67:79:00:da:52:ba:18:37:b0:5e:56:dd:06:2a:c2:
         f2:ae:2f:78:5b:c3:7c:11:16:37:f7:2b:7a:27:15:a4:3b:93:
         cc:fa:75:b4:52:05:ef:35:f2:7a:fd:8e:c1:af:cf:7f:b9:dc:
         ae:0e:14:36:d4:37:b5:15:47:9c:06:f9:57:4c:02:26:b1:88:
         3e:77:96:46:c1:5d:02:83:dc:ce:0a:38:7a:8e:88:48:76:51:
         9c:7a:61:89:a7:38:03:23:d0:84:be:bf:31:e7:9c:a5:a1:e7:
         c3:58:44:6a:37:16:9c:d6:b0:1f:cf:42:c8:96:a5:ba:40:05:
         5e:73:91:eb:43:fd:5d:e6:77:64:20:6a:e5:16:cd:d6:51:a6:
         0b:d7:c2:9f:59:ae:85:34:7f:83:b4:06:5c:2a:ba:3e:68:2d:
         fa:39:69:48:21:cb:1f:9b:3c:83:b3:3e:cb:1e:63:77:53:5a:
         84:79:e8:f8:1a:e4:af:44:2c:c1:d0:20:b0:62:65:64:2a:65:
         a5:06:06:7a:18:b3:cf:45:88:cc:9e:27:d6:f2:22:33:07:2e:
         47:06:3b:17:22:27:5d:23:7f:c3:d9:79:bc:92:9e:f1:f4:d1:
         3b:b1:70:a8:94:69:64:1e:cc:6f:fd:8a:22:a0:18:81:9f:ed:
         c4:80:c9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:45 2026 by rpki-client