Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
File:                     -tm5N3fQzrort6a3jVB_d5CSHAY.mft (raw, json)
Hash identifier:          YbxdI3mTV2tYIhzGCgaqyTjm2WhM1PG/NE7IyQwpv04=
Subject key identifier:   2B:10:A6:B1:C5:86:E1:F6:66:03:F3:61:41:81:49:80:35:8B:DF:AF
Authority key identifier: FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06
Certificate issuer:       /CN=A91557F2/serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06
Certificate serial:       078D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
Manifest number:          097F
Signing time:             Sat 18 Apr 2026 21:24:58 +0000
Manifest this update:     Sat 18 Apr 2026 21:24:57 +0000
Manifest next update:     Sat 25 Apr 2026 21:24:57 +0000
Files and hashes:         1: -tm5N3fQzrort6a3jVB_d5CSHAY.crl (hash: xRpkG5SzGWix90uTGdFGcm3rhxYRnNjdgtHfaHY3+vM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl
                          rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 21:24:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1933 (0x78d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91557F2, serialNumber=FAD9B93777D0CEBA2BB7A6B78D507F7790921C06
        Validity
            Not Before: Apr 18 21:24:57 2026 GMT
            Not After : Apr 25 21:24:57 2026 GMT
        Subject: CN=69e3f6aa-899e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:24:f4:32:fd:2e:c1:22:c5:66:a8:46:99:70:
                    c5:40:ec:0d:30:0f:37:27:41:14:c8:f0:77:65:41:
                    0b:a1:12:68:54:9f:49:87:40:d4:92:11:73:36:57:
                    f0:90:78:54:fc:46:e1:27:4e:a1:f7:91:82:98:7b:
                    66:80:cd:69:66:1f:b5:d4:31:b4:3f:a4:8b:d1:81:
                    ce:71:67:f5:3d:d2:b2:d9:c1:33:f3:cd:ec:69:60:
                    2e:f0:2d:ef:28:53:f4:02:5d:78:73:71:fe:33:58:
                    a2:f5:46:ab:80:46:81:14:d2:ab:71:e6:bb:ce:b6:
                    1e:40:9f:30:bd:86:f0:1c:95:56:9a:8b:49:33:09:
                    64:ac:33:6a:83:4d:5d:68:f0:5f:df:92:cc:4d:87:
                    77:41:3d:01:76:72:21:1f:28:c0:e3:74:29:ab:91:
                    48:d6:cf:c6:c6:f7:06:fb:7a:7e:2c:83:99:05:ad:
                    c4:d1:f4:c6:c7:52:9b:09:cf:b2:9e:b7:5f:a8:6e:
                    9f:5f:e8:54:18:d0:29:3c:90:f4:0b:3c:88:40:bf:
                    c6:bd:e0:25:ba:77:74:05:9f:2c:05:9d:54:75:8c:
                    bd:5a:65:42:f9:24:45:90:6a:c4:aa:f9:55:a9:e6:
                    d0:2c:a4:09:c6:ce:72:85:bb:4b:f2:de:54:d8:f4:
                    2b:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:10:A6:B1:C5:86:E1:F6:66:03:F3:61:41:81:49:80:35:8B:DF:AF
            X509v3 Authority Key Identifier:
                keyid:FA:D9:B9:37:77:D0:CE:BA:2B:B7:A6:B7:8D:50:7F:77:90:92:1C:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tm5N3fQzrort6a3jVB_d5CSHAY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91557F2/233504A44FCC11EB9DBE7F5DC4F9AE02/-tm5N3fQzrort6a3jVB_d5CSHAY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:b1:58:dc:c3:70:e1:6f:50:e7:83:2e:8e:11:29:ae:2a:f8:
         22:cb:e3:6d:ce:27:94:dc:71:6d:5a:9e:28:9e:93:8c:ea:f8:
         12:8d:ea:46:06:af:d3:bc:33:58:dc:45:2d:9a:8f:78:e1:0b:
         72:16:97:0a:33:e7:bf:fb:57:fe:23:0a:de:9e:bf:db:6d:64:
         c0:f5:94:44:90:6f:ff:d1:6a:ed:91:0a:8f:af:b0:25:cf:4b:
         75:c8:2b:27:e1:2e:4d:06:70:1a:f2:16:c8:a6:e2:b7:ad:dc:
         53:b8:82:85:57:2c:9b:fc:d2:7d:0e:27:ed:21:7b:80:79:46:
         e3:77:86:6f:90:29:88:0c:e2:f2:b0:d8:71:46:97:7e:7c:19:
         89:3c:aa:f0:53:2a:07:b2:4f:67:00:ef:be:b4:ae:ee:33:89:
         17:d0:04:50:ed:20:5d:98:54:c5:87:4c:b3:d6:67:aa:46:a8:
         e8:fa:12:86:c0:96:2b:33:35:e7:f2:f9:a6:7a:2b:a4:2b:44:
         20:b9:e4:7a:6c:2f:e1:03:2e:d7:ce:bc:f3:1c:4d:13:40:76:
         bb:2d:d7:79:33:fe:8e:61:77:e6:1a:be:a2:fd:5e:aa:90:f6:
         12:c2:26:2f:6a:14:83:51:57:2b:fe:90:6c:5d:07:4f:35:c4:
         83:0d:8b:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:41:23 2026 by rpki-client