Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
File:                     RNKGOHOg4Xndk_snhK0EhGYj5-4.mft (raw, json)
Hash identifier:          MpR/+AM0n4YfjDJK2wh8Z2IDd59gzWiAj7VFqHLACbM=
Subject key identifier:   A9:3B:05:87:0E:16:64:E3:3D:5F:34:FD:E4:C3:6C:ED:7E:36:23:98
Authority key identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE
Certificate issuer:       /CN=A914E4E2/serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
Manifest number:          45
Signing time:             Fri 17 Apr 2026 08:09:23 +0000
Manifest this update:     Fri 17 Apr 2026 08:09:22 +0000
Manifest next update:     Fri 24 Apr 2026 08:09:22 +0000
Files and hashes:         1: RNKGOHOg4Xndk_snhK0EhGYj5-4.crl (hash: NIio8UBnCZg+Oy287tyuZZ1ryKggpuR0QEpXAHg7N6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:09:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE
        Validity
            Not Before: Apr 17 08:09:22 2026 GMT
            Not After : Apr 24 08:09:22 2026 GMT
        Subject: CN=69e1eab3-63d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:bc:e0:93:81:81:e9:d2:ac:b6:74:81:dd:
                    94:6c:3a:f9:63:68:eb:7d:20:27:2b:2e:00:7e:47:
                    f2:9e:b8:c1:bc:63:dc:fb:13:03:68:0d:52:20:62:
                    11:48:ea:cb:e2:c0:b4:1a:e3:b3:38:0c:e4:64:0e:
                    fb:7b:78:fa:8c:ba:10:65:bd:87:10:ad:07:50:73:
                    05:c7:65:fd:34:f5:23:0d:ae:09:68:f6:c6:d8:c0:
                    4e:60:85:c4:85:06:3c:a9:fc:d5:02:2e:fb:5a:bf:
                    6e:11:b5:b5:72:11:55:1e:8e:5f:3a:d5:2d:a6:82:
                    a8:6f:93:27:6b:0e:13:60:bb:59:fc:d7:2b:b8:e2:
                    ae:89:75:de:29:33:a1:a7:ca:18:14:0b:20:0a:20:
                    cd:15:5e:37:9f:64:6f:e2:8c:bc:94:df:3a:7c:77:
                    ca:ff:04:53:9b:b7:3d:c6:d5:b6:70:b5:38:2a:56:
                    0f:5b:7a:5f:fb:47:06:15:85:95:5c:c6:94:31:fd:
                    a4:af:be:f7:a6:24:98:b1:ff:10:61:7d:7d:72:c6:
                    bb:f6:84:c8:be:86:1d:00:1a:d8:26:15:25:c6:a4:
                    bd:7d:a1:86:26:90:c0:a2:e7:67:5c:9f:e6:04:48:
                    1c:32:8a:17:23:b2:68:2b:dc:fb:fc:35:ef:a9:52:
                    c7:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:05:87:0E:16:64:E3:3D:5F:34:FD:E4:C3:6C:ED:7E:36:23:98
            X509v3 Authority Key Identifier:
                keyid:44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5e:45:ab:e0:d4:46:65:d1:0b:3e:12:75:81:24:71:3e:ad:
         fb:7c:a2:4f:15:59:de:5c:bc:b1:52:84:91:83:94:f7:41:d4:
         26:1a:e1:8e:67:5b:35:3c:53:ee:bc:3a:07:6a:be:c5:95:1c:
         26:0c:bb:30:fa:ae:f9:64:fc:50:21:a1:ea:b3:55:17:06:ce:
         47:2a:78:93:83:ec:ea:a0:c0:36:bd:b3:bc:33:d7:ee:40:a5:
         d4:96:86:5e:e1:cb:11:37:ac:f2:65:1d:32:62:fa:42:f4:7c:
         ab:d2:c4:3a:d9:cc:a4:bf:f4:d1:6b:29:45:e1:3a:14:22:bf:
         18:f8:f5:4e:31:72:14:ff:64:29:5e:f4:80:23:60:7c:81:a7:
         c5:c5:1c:6a:74:f3:f4:62:5a:de:e0:fb:7c:dd:b4:f3:60:ee:
         df:11:c5:73:0e:d7:99:c6:64:f2:db:e8:cd:2d:22:60:54:54:
         f9:e4:65:f8:ac:39:96:fc:6d:8b:b0:6a:78:b5:e5:54:1a:03:
         e5:2c:06:ee:a0:43:8c:4e:98:e8:ac:11:1a:46:5c:2c:6c:3c:
         93:83:9a:05:73:2a:11:80:0c:0d:c2:0f:44:36:be:7b:ad:4b:
         bb:bf:fc:90:7a:1e:01:b6:ac:e0:6d:42:88:d2:b8:13:4f:42:
         df:aa:02:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:44:20 2026 by rpki-client