Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
File:                     m3GXbfcKU0c1AkN1KyIJIeANL6E.mft (raw, json)
Hash identifier:          WIB32xBuIQzJ1apyGkN3MCbDIEiJCZMpTC6XWMEqOz8=
Subject key identifier:   20:0D:16:CD:E4:C4:5F:44:37:DF:D9:25:D0:65:55:A9:34:45:46:BC
Authority key identifier: 9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1
Certificate issuer:       /CN=A917A2E5/serialNumber=9B71976DF70A5347350243752B220921E00D2FA1
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
Manifest number:          74
Signing time:             Sun 19 Apr 2026 07:22:51 +0000
Manifest this update:     Sun 19 Apr 2026 07:22:50 +0000
Manifest next update:     Sun 26 Apr 2026 07:22:50 +0000
Files and hashes:         1: m3GXbfcKU0c1AkN1KyIJIeANL6E.crl (hash: mY/KVfA8osvuQKeYNdRT+rs1vC8yyNPvBxkyc3AQ6HE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl
                          rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917A2E5, serialNumber=9B71976DF70A5347350243752B220921E00D2FA1
        Validity
            Not Before: Apr 19 07:22:50 2026 GMT
            Not After : Apr 26 07:22:50 2026 GMT
        Subject: CN=69e482cb-ce1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:f1:b4:e6:00:a3:6b:f7:1b:ce:c2:e8:09:
                    48:62:80:0e:c6:c3:ef:ac:ad:c1:2c:34:a1:ad:e9:
                    53:9c:b2:ff:4f:e2:85:78:a5:30:10:84:08:96:8d:
                    ef:61:ce:36:1f:4f:11:de:15:2d:c6:cd:b7:f8:e9:
                    1c:08:14:33:bc:3a:ca:04:f2:0f:5a:61:e1:b9:d6:
                    b5:7b:3d:1c:1b:10:2d:8f:60:8c:82:7f:c4:5a:ad:
                    31:41:34:25:34:59:6c:f9:8a:8d:25:3d:fe:ea:7e:
                    f3:56:af:1a:0b:39:42:67:54:29:44:37:5d:09:85:
                    98:76:54:1f:66:38:75:16:5e:20:69:85:d4:81:a4:
                    5c:85:6c:64:ba:da:b3:79:4e:f8:d6:b7:9d:82:df:
                    94:23:38:16:c5:4d:a6:af:68:76:90:f1:f1:c3:24:
                    3d:8b:1e:76:88:78:24:d7:cd:98:82:b7:27:20:79:
                    33:d7:94:4c:01:0a:df:b2:02:99:c2:68:90:0e:d9:
                    57:ea:99:e5:0a:2e:24:f3:0d:bd:04:a4:1e:82:41:
                    65:1c:61:42:97:a2:a4:51:ca:cf:ae:38:a0:05:91:
                    c4:d3:97:4d:5e:63:64:c3:36:8c:7b:f6:b5:6a:8f:
                    27:65:7a:e7:cb:93:cf:f8:4f:ae:29:27:fb:3f:75:
                    95:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:16:CD:E4:C4:5F:44:37:DF:D9:25:D0:65:55:A9:34:45:46:BC
            X509v3 Authority Key Identifier:
                keyid:9B:71:97:6D:F7:0A:53:47:35:02:43:75:2B:22:09:21:E0:0D:2F:A1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m3GXbfcKU0c1AkN1KyIJIeANL6E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917A2E5/B0B28FA68C9711F0A009D572C4F9AE02/m3GXbfcKU0c1AkN1KyIJIeANL6E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:99:78:23:4e:ea:23:73:7e:7a:47:54:66:7a:06:20:b7:a0:
         54:de:6b:8c:73:a5:7c:7a:1f:a2:83:8a:7e:d5:af:77:9c:cb:
         4b:c2:2b:ac:94:47:a3:3f:05:46:d5:9e:a9:56:dd:6a:ee:36:
         0d:4d:06:8b:a0:eb:4d:90:e4:d3:f7:e1:8b:77:65:2a:03:b3:
         6f:7f:29:67:88:70:bc:64:e6:ef:80:d1:01:6c:d0:0a:54:8a:
         80:5f:38:06:49:2c:02:1e:35:c3:6f:eb:36:0b:e6:bd:1a:6f:
         98:f6:9e:3c:16:eb:0e:a8:9c:ab:31:7d:17:22:16:4b:ea:cc:
         67:30:95:a2:1d:69:6b:8f:73:5f:ce:7a:c4:59:9a:22:88:ca:
         f3:ea:cb:ae:9f:8f:9f:c2:38:10:61:60:68:16:66:32:07:b2:
         cb:ac:4d:a1:d9:3b:e6:1f:69:1d:d5:9a:0d:e1:57:d4:23:b0:
         0f:4f:a9:59:06:1e:bf:aa:81:83:23:8e:2f:b1:ed:85:b9:12:
         49:e1:6f:18:e5:f6:f4:75:12:a7:dc:81:4b:8a:40:c9:98:60:
         11:4d:45:78:c2:5e:2d:f6:8d:f6:ca:f0:fd:0a:d5:8d:5e:a5:
         22:93:01:2a:ee:d9:ca:81:f3:91:60:c2:53:23:21:8e:82:2f:
         91:d7:8b:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:19 2026 by rpki-client