Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
File:                     2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json)
Hash identifier:          grzkc2auWNgCUERXfG4IHdkgkIGlPJSsqEUkVIlATBI=
Subject key identifier:   49:AF:C9:1C:4B:20:EB:B9:58:E1:1B:69:8F:41:CC:E0:9B:03:2E:81
Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
Certificate issuer:       /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
Manifest number:          5A
Signing time:             Wed 15 Apr 2026 07:38:26 +0000
Manifest this update:     Wed 15 Apr 2026 07:38:26 +0000
Manifest next update:     Wed 22 Apr 2026 07:38:26 +0000
Files and hashes:         1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: 1Wc0e28aTah9qQ+1PW7KJ7AtpeK6Tb3IsX/M/CdBrs8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
                          rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:38:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
        Validity
            Not Before: Apr 15 07:38:26 2026 GMT
            Not After : Apr 22 07:38:26 2026 GMT
        Subject: CN=69df4072-f011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b6:80:d1:ff:d2:4e:25:f4:9b:a2:00:66:7d:
                    fa:88:43:71:4a:91:a5:e0:07:26:e5:48:2a:cb:63:
                    64:b6:93:d3:6a:4e:7b:d2:c8:09:f0:7f:98:db:41:
                    df:87:ef:48:d6:62:4c:6e:18:a5:dc:49:1c:f6:99:
                    93:f2:0d:ab:bd:ce:41:9d:2f:c8:2a:c3:54:a3:ea:
                    22:92:1d:b3:fb:3f:54:b8:3a:ee:4e:94:09:c4:95:
                    c0:c4:0c:e4:07:72:9c:f7:85:2d:c4:d7:1e:e1:12:
                    d2:e4:90:d7:d4:d1:f7:14:d3:9c:65:1d:57:93:bd:
                    16:61:35:0e:5d:90:d1:01:84:88:2f:0c:47:40:79:
                    6a:88:77:a3:b3:1b:90:ec:b2:d9:04:22:fa:0b:be:
                    89:71:b4:99:80:89:13:7b:72:94:96:56:05:d0:54:
                    e9:8d:cc:59:f9:b5:ae:54:c0:d4:54:e9:b8:3d:59:
                    78:f2:d3:f5:25:76:a5:32:7c:af:40:41:8a:77:61:
                    47:e0:a1:2a:78:f7:21:0b:fa:06:7a:26:72:9e:49:
                    0b:2c:1e:b9:03:74:ef:71:76:ae:42:f7:d5:44:3d:
                    c8:a1:16:da:2f:a4:2f:f1:bd:e9:0c:fe:a2:3b:87:
                    ee:6d:5c:60:26:bc:b0:b4:1b:69:ad:a9:b1:b8:45:
                    3b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:AF:C9:1C:4B:20:EB:B9:58:E1:1B:69:8F:41:CC:E0:9B:03:2E:81
            X509v3 Authority Key Identifier:
                keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:73:0d:1a:0a:a5:cc:05:d7:39:9c:fc:3b:db:30:05:59:6a:
         74:f0:25:f8:b1:b1:f7:5b:ab:5f:57:9c:3d:d5:a0:25:ec:21:
         d3:15:fe:1d:52:d3:22:c3:d9:12:31:18:71:41:f1:c1:52:f1:
         45:bf:54:59:97:d9:02:10:37:e8:f7:2b:ba:8a:27:6d:b8:fa:
         e8:26:2d:59:5a:bc:94:01:cd:fb:62:d0:ef:63:47:c0:07:1a:
         f5:c9:e9:62:a1:07:fd:d3:51:e1:82:1f:3f:e8:34:f5:e8:26:
         30:89:26:61:5c:07:3f:f6:fb:96:df:df:5b:95:e0:8e:b2:b0:
         c9:be:64:1c:c6:d8:29:cc:25:54:fa:eb:5f:d5:04:a1:81:d4:
         c9:c4:1f:21:9a:4d:43:3f:88:f9:ac:a0:6c:95:43:8f:21:80:
         9f:52:82:8a:14:9e:7b:35:e0:50:c9:11:81:31:51:23:1b:aa:
         2e:58:6f:94:67:e3:be:a2:40:8e:f8:83:23:7d:c0:bb:5b:7e:
         a5:73:ab:4a:93:70:28:a1:fb:8e:46:68:07:0a:c1:e0:1e:16:
         07:14:59:9a:03:d8:d1:4c:ef:3d:9a:0f:c6:d9:29:a1:fb:59:
         57:4e:8f:4c:fb:43:30:4e:57:70:9f:ed:5a:54:f5:dc:67:5a:
         82:88:18:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:23 2026 by rpki-client