Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
File:                     4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft (raw, json)
Hash identifier:          yOBPUAEopWThPe5XsfMYRXZZbIVfCsD2GiZoNwvGfS8=
Subject key identifier:   9B:06:2B:F9:72:54:35:0A:66:48:01:C9:A1:B8:18:1E:AF:21:CA:6A
Authority key identifier: E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A
Certificate issuer:       /CN=A91D1306/serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
Certificate serial:       19B5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
Manifest number:          19A7
Signing time:             Thu 26 Mar 2026 16:21:48 +0000
Manifest this update:     Thu 26 Mar 2026 16:21:48 +0000
Manifest next update:     Thu 02 Apr 2026 16:21:48 +0000
Files and hashes:         1: 4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl (hash: NjUhcCU9dRRATQUuFubFY0Hsy1zpNONAhSePG9aOwkw=)
                          2: 66BEBEDE83CB11E796105342C4F9AE02.roa (hash: f0Q1Azb+EY8V4HrdxVOXBmjzrSvFe4VSQb8ZAnHoPpo=)
                          3: 09C0DFCE202011F098619934C4F9AE02.roa (hash: wOYzNzzIS0paJhEaL4lnWRrHmB69EScSsL5hsvt2zxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl
                          rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 14:54:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6581 (0x19b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1306, serialNumber=E04FB2AA627D97B989AECFE86974E3C5F303121A
        Validity
            Not Before: Mar 26 16:21:48 2026 GMT
            Not After : Apr  2 16:21:48 2026 GMT
        Subject: CN=69c55d1c-023c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:5e:4e:a9:c5:4e:b4:9f:f7:e6:34:28:21:80:
                    d2:11:c2:0b:e8:f8:13:a8:0b:7d:01:24:f7:b3:74:
                    e1:fe:b5:e3:4c:fd:9f:0a:3d:a6:72:13:35:68:b2:
                    c9:56:d1:54:7f:17:fd:79:9e:27:b5:b1:e1:e0:14:
                    88:68:a6:2a:0e:97:b6:bd:61:a9:57:aa:d2:6e:cf:
                    d6:a5:b4:09:cc:14:89:23:36:97:4c:da:2c:c4:2c:
                    63:20:23:8c:2b:11:7b:3b:c9:11:c1:36:8e:c2:02:
                    90:d3:99:eb:67:7b:4b:72:2e:99:f6:f7:f5:82:c4:
                    67:8a:5c:0d:98:f7:de:51:de:87:75:99:bb:47:82:
                    a1:04:22:93:1c:a0:92:ca:70:28:33:fb:84:6b:88:
                    24:ad:6f:83:46:70:ed:ca:5c:12:f9:01:84:1d:89:
                    d3:59:5e:d7:8a:ad:17:73:50:7d:b8:31:20:06:59:
                    7d:a4:9f:80:4b:96:81:6e:3a:11:6d:6f:3b:79:7a:
                    3d:30:9e:d2:be:23:b8:50:24:49:71:57:23:fd:15:
                    6f:41:9f:07:76:ad:9a:2b:f8:98:47:6a:77:cd:ed:
                    80:01:a8:67:56:8f:f7:89:36:6f:e5:47:76:86:44:
                    8e:f4:0d:29:0d:2b:fb:fd:74:85:65:82:bd:f1:e6:
                    9d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:06:2B:F9:72:54:35:0A:66:48:01:C9:A1:B8:18:1E:AF:21:CA:6A
            X509v3 Authority Key Identifier:
                keyid:E0:4F:B2:AA:62:7D:97:B9:89:AE:CF:E8:69:74:E3:C5:F3:03:12:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4E-yqmJ9l7mJrs_oaXTjxfMDEho.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1306/FE49749883CA11E7B8240A42C4F9AE02/4E-yqmJ9l7mJrs_oaXTjxfMDEho.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:89:ab:15:c2:e3:c8:f5:f8:fb:1f:00:49:8b:b5:4e:b5:79:
         6b:b8:f8:20:05:e0:dd:49:bd:45:e2:c6:8b:ef:0d:5f:c5:9b:
         5a:9f:3b:3d:af:07:96:13:6e:0e:4f:e7:4e:d5:9c:c5:87:aa:
         9b:16:34:92:1d:6d:76:71:12:0a:6b:9f:1a:61:de:73:2c:73:
         01:31:a5:c7:1b:9f:c4:58:bb:38:c3:be:9d:88:1d:d9:13:84:
         79:21:58:34:e9:b5:73:bd:b5:c7:fa:de:82:3a:2c:b8:a7:f3:
         aa:20:af:77:13:75:47:74:1c:2f:5d:3b:a7:53:a0:c6:af:9e:
         1f:a9:bf:39:b1:62:8d:f8:45:94:cf:f6:69:e0:25:26:b0:1a:
         f6:f2:c7:47:df:1c:1d:31:f2:e2:85:ec:95:a8:19:f9:a8:80:
         39:11:48:fb:d0:df:38:a8:d0:72:27:2d:af:66:fb:a7:05:38:
         ad:c1:8d:c6:59:29:9d:56:ee:5b:15:64:db:0f:5e:af:93:29:
         e3:bb:3d:1e:47:84:b5:59:b7:70:85:f2:56:2d:7a:21:e6:b9:
         5e:8c:bd:eb:c5:c5:27:35:37:ad:3c:06:6e:86:cc:ac:3b:e7:
         6f:78:46:62:6b:d7:97:d0:cd:3b:bb:62:7d:1d:cc:2e:70:50:
         d6:50:49:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:46:56 2026 by rpki-client