Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
File:                     4PPPvfp9B0J0-nSdQCnO41iPd8M.mft (raw, json)
Hash identifier:          15aXknp0DJvicOPs68Kknd0gqpnoBL/yhh6/iZaxT1U=
Subject key identifier:   9A:18:92:FA:A5:D1:2E:4C:A0:F0:3B:85:A5:CF:2B:BB:D2:3B:CF:92
Authority key identifier: E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3
Certificate issuer:       /CN=A91D0853/serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
Certificate serial:       0864
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
Manifest number:          084A
Signing time:             Thu 26 Mar 2026 20:44:41 +0000
Manifest this update:     Thu 26 Mar 2026 20:44:40 +0000
Manifest next update:     Thu 02 Apr 2026 20:44:40 +0000
Files and hashes:         1: 4PPPvfp9B0J0-nSdQCnO41iPd8M.crl (hash: S92YRABRzITQ1C4uoD7QORHnT8wPgR3mbK4q0KMbib4=)
                          2: 3DAD522E1D7611EB8673F476C4F9AE02.roa (hash: VVuT0oGthuu1h4dpEkw5dwzZuqKsuK62xGDpmmEICJE=)
                          3: 9F8DA582EA0F11F0944A7CD7716F56BC.roa (hash: 3YwwSJL/lczWD+gAqMpWstD/Bdbs+l7Ejs50rGgef0E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl
                          rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 20:44:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2148 (0x864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D0853, serialNumber=E0F3CFBDFA7D074274FA749D4029CEE3588F77C3
        Validity
            Not Before: Mar 26 20:44:40 2026 GMT
            Not After : Apr  2 20:44:40 2026 GMT
        Subject: CN=69c59ab9-e794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2b:86:b3:39:fc:6a:7b:4e:ba:e2:e9:44:7d:
                    c0:9e:ea:8a:55:92:98:f6:d0:f4:05:62:a5:6c:05:
                    ff:50:e7:a4:ad:88:a1:f2:ed:2f:0e:07:4b:79:34:
                    5b:8e:f9:46:5e:0b:f6:4d:ee:0c:37:c0:f7:a5:17:
                    e3:b5:40:69:09:e0:9e:cc:b0:57:d5:d0:9f:0b:f9:
                    f0:94:ad:98:03:f7:fc:39:23:48:49:cd:b0:25:fa:
                    3a:c5:08:7b:3d:8e:5c:92:3e:88:35:eb:40:b8:b2:
                    7c:ed:f6:7d:59:0f:06:e5:dc:b5:39:6e:86:69:73:
                    7e:7a:ab:a7:9c:af:58:05:9d:50:2e:7b:07:1a:af:
                    d0:81:71:d4:6b:97:fb:c2:d4:9d:2d:d3:0f:3e:7c:
                    8f:3e:ec:1d:38:e6:b0:1b:2b:2c:c5:c8:fd:dd:3c:
                    89:57:b5:cb:16:16:63:88:14:f3:ee:f1:cb:c8:f8:
                    73:18:87:7d:2c:07:4b:7e:82:f6:6c:ae:e5:fc:6e:
                    3c:ca:52:0c:89:13:41:55:82:e9:39:48:0a:2a:f9:
                    52:5e:50:3d:58:df:4e:c2:a2:67:a8:94:4e:5f:86:
                    d3:17:fe:13:cb:0e:6a:19:8a:2a:0c:79:63:48:60:
                    f7:bf:0b:17:c1:60:61:d4:83:bc:88:66:14:2d:13:
                    99:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:18:92:FA:A5:D1:2E:4C:A0:F0:3B:85:A5:CF:2B:BB:D2:3B:CF:92
            X509v3 Authority Key Identifier:
                keyid:E0:F3:CF:BD:FA:7D:07:42:74:FA:74:9D:40:29:CE:E3:58:8F:77:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4PPPvfp9B0J0-nSdQCnO41iPd8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D0853/5B94390E044111EB91C43E45C4F9AE02/4PPPvfp9B0J0-nSdQCnO41iPd8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:f0:ec:93:dd:8a:4c:82:62:bb:68:9d:ba:49:bc:74:cc:16:
         3c:aa:c9:be:68:cc:85:13:88:0e:ad:18:49:2d:9a:9a:f0:8b:
         56:53:c4:57:92:3e:7d:0f:5f:4e:01:92:c0:1c:a7:0c:cc:c2:
         be:e9:cd:d8:da:99:bc:45:cf:a2:a7:dc:22:40:a2:f3:f5:0f:
         1b:66:ba:c3:bd:9c:f9:b5:40:ff:9d:22:89:ba:ab:49:e8:cc:
         69:a4:e0:c5:15:34:b0:14:a8:07:c5:09:28:4b:8e:34:42:98:
         5e:85:a8:a2:03:cb:78:c6:e9:6a:98:5b:64:51:e5:62:2b:a8:
         f2:49:33:bc:0b:0e:84:ff:78:45:70:84:ce:0a:c8:93:f6:67:
         da:51:42:f9:a8:d9:f6:7d:d8:b2:02:fa:34:2a:e4:a0:cc:c7:
         d2:8b:11:6d:99:0c:c9:1b:bb:89:bf:34:b1:38:d8:c6:95:1a:
         7f:c9:68:ca:28:24:44:0a:dd:25:86:4d:81:55:61:bf:11:ff:
         71:97:8a:16:e2:24:7a:df:7a:5c:6e:db:e3:03:81:f5:18:39:
         be:c1:49:63:7f:78:be:21:0e:6e:ae:a3:3a:3f:f6:7f:a4:be:
         aa:b2:da:d7:4e:f3:b7:73:fa:f1:a8:64:b8:da:5c:9e:c5:96:
         62:38:6a:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:33:23 2026 by rpki-client