Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
File:                     PVoEjy0O64mMxmE79kE3I3iWTLA.mft (raw, json)
Hash identifier:          ajppRm5dy2FPhQkS5lO+uCO4l1m/mQ748z6mjaohIY8=
Subject key identifier:   DB:C1:53:E5:04:2A:EC:40:14:88:FE:96:AF:5D:8C:04:8F:F1:0C:34
Authority key identifier: 3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0
Certificate issuer:       /CN=A919AFBE/serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
Certificate serial:       56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
Manifest number:          56
Signing time:             Fri 17 Apr 2026 07:49:53 +0000
Manifest this update:     Fri 17 Apr 2026 07:49:52 +0000
Manifest next update:     Fri 24 Apr 2026 07:49:52 +0000
Files and hashes:         1: PVoEjy0O64mMxmE79kE3I3iWTLA.crl (hash: /ha551IUlWBlin4G1b6mL8mrRb0h7i9HFiC+tZb8qLE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl
                          rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:49:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919AFBE, serialNumber=3D5A048F2D0EEB898CC6613BF641372378964CB0
        Validity
            Not Before: Apr 17 07:49:52 2026 GMT
            Not After : Apr 24 07:49:52 2026 GMT
        Subject: CN=69e1e621-efdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:08:90:52:39:03:c4:30:77:9d:5d:33:4e:3e:
                    f7:de:15:b7:b8:33:bb:ed:73:36:c9:37:78:7c:15:
                    f5:0f:35:33:a5:21:d6:4a:54:3a:a4:6a:6a:84:73:
                    53:18:75:f3:15:be:1f:97:26:ed:50:21:60:79:9b:
                    b3:8a:00:f3:2f:ba:e8:60:07:e7:51:b3:cc:b4:13:
                    f5:ed:4c:51:fe:54:37:18:6c:a4:5a:96:17:85:14:
                    ca:44:58:66:46:8a:40:0b:44:bd:df:0c:09:c2:9c:
                    3f:dc:07:5f:1f:ac:74:d3:b2:04:59:3e:4e:4f:db:
                    40:e2:f6:be:a0:1f:16:86:37:c9:55:18:ea:5c:55:
                    c5:3d:47:5f:42:1b:74:f8:ba:ee:16:02:47:1e:96:
                    56:29:55:46:9e:88:8d:1d:b7:b5:93:fe:47:e7:ef:
                    56:2d:a2:e8:49:f1:60:bd:79:9b:bd:00:27:7a:74:
                    8f:9e:16:ca:b2:09:20:d3:d4:aa:76:9d:22:cf:c5:
                    d8:d8:24:39:da:8e:b0:ca:d0:9f:2d:ef:b3:27:a0:
                    dc:2c:69:10:43:c1:ad:c1:00:ab:c3:9c:80:af:6d:
                    6d:9c:bc:a3:93:f6:cd:3f:61:a9:92:ff:98:42:00:
                    12:60:ee:09:aa:87:a4:98:83:12:15:71:b7:29:60:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:53:E5:04:2A:EC:40:14:88:FE:96:AF:5D:8C:04:8F:F1:0C:34
            X509v3 Authority Key Identifier:
                keyid:3D:5A:04:8F:2D:0E:EB:89:8C:C6:61:3B:F6:41:37:23:78:96:4C:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PVoEjy0O64mMxmE79kE3I3iWTLA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919AFBE/C3882762BA1E11F0B987393BC4F9AE02/PVoEjy0O64mMxmE79kE3I3iWTLA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bb:b4:70:67:75:de:7e:3f:d7:44:21:56:a4:d5:03:a6:ae:01:
         f5:fc:1b:52:1a:47:ec:d4:17:0f:16:bf:8d:ae:e5:da:d4:70:
         30:de:e9:fc:88:d9:a7:be:c0:e7:51:82:cd:4a:dc:be:fc:ea:
         5a:ea:cc:2c:d5:9f:7e:e2:65:ad:2b:ec:fe:38:71:a1:fd:20:
         96:19:6b:54:71:31:94:2a:b5:ec:e2:78:fd:23:cf:06:18:94:
         58:c2:5d:1b:3e:a5:59:f4:e9:7a:27:85:01:c6:6e:83:9f:00:
         f9:3b:53:10:99:05:96:2f:80:56:da:70:fd:4f:21:fa:2f:a8:
         c5:18:ff:dc:0e:4d:01:fb:a4:c1:e6:11:e9:9a:13:2c:93:ed:
         74:3b:5f:46:8f:bd:a5:b8:2a:80:91:33:b6:3c:b6:eb:bb:07:
         2d:7d:a5:17:c2:19:0d:b7:7c:f5:69:f7:b5:24:6c:f8:29:55:
         ff:73:f3:a8:10:ba:0d:5f:9d:f6:dd:27:ef:fd:70:ab:c2:6f:
         7f:a1:1c:aa:cf:1d:76:3f:51:06:54:ef:5b:c7:63:55:ee:91:
         39:4d:b8:6c:f5:94:f5:d4:24:aa:30:19:49:a2:7b:24:23:24:
         a9:26:58:92:e3:13:83:5b:cc:b4:ea:93:41:98:22:79:6e:e6:
         8c:00:eb:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:53:23 2026 by rpki-client