Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
File:                     EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft (raw, json)
Hash identifier:          /VbxXxnnPjiNPXlhXzz0DVgleq0ihK2C+bMD3gKSR88=
Subject key identifier:   09:E2:D1:BC:10:71:23:E6:36:C5:9E:A8:B1:E9:60:5D:11:76:58:63
Authority key identifier: 11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44
Certificate issuer:       /CN=A919FDC0/serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
Certificate serial:       72
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
Manifest number:          72
Signing time:             Sun 01 Mar 2026 09:13:34 +0000
Manifest this update:     Sun 01 Mar 2026 09:13:34 +0000
Manifest next update:     Sun 08 Mar 2026 09:13:34 +0000
Files and hashes:         1: EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl (hash: sQqsx5EcFJKmX+dmGcmRltxo/PuNETFrgw6xHDYfGGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl
                          rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 09:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919FDC0, serialNumber=117C0D6D19BFBA48B5FA9E517D0E692655C98C44
        Validity
            Not Before: Mar  1 09:13:34 2026 GMT
            Not After : Mar  8 09:13:34 2026 GMT
        Subject: CN=69a4033e-4e71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:31:d5:36:c7:af:6a:03:e6:7d:e2:65:37:59:
                    04:63:37:b2:dd:2e:7c:fb:a8:1d:21:1a:49:f3:a2:
                    c0:f4:60:87:a0:65:3b:0f:6b:b3:9a:ad:54:2f:06:
                    5b:70:01:da:a3:5b:da:2d:d7:1b:e9:d4:55:cd:13:
                    cb:13:62:28:00:e5:4d:6c:7e:ff:7b:ef:c3:e6:74:
                    bb:0a:4c:f0:34:ea:a1:c2:56:e9:a7:7a:2a:e3:8a:
                    d5:fa:fe:81:c5:01:06:25:62:b8:47:af:68:c5:7f:
                    25:78:4c:a8:8b:a8:81:9a:90:2c:54:34:49:be:49:
                    fe:d8:3c:63:6e:ed:98:6f:e6:6b:d2:4f:5e:38:57:
                    83:22:44:d0:18:91:af:a1:c4:30:3b:82:c3:5b:a7:
                    da:4c:d3:7b:94:e1:ad:7a:63:cf:11:fe:6f:8f:e1:
                    c7:2a:03:f9:90:c1:df:9c:ba:3d:4d:84:b4:ef:28:
                    f8:3f:a3:8c:6d:c1:aa:28:01:ca:87:6e:34:0a:fa:
                    52:1d:a7:5e:87:0a:d2:c2:e0:59:41:17:93:28:5f:
                    99:e8:18:43:0d:79:c1:5f:19:26:5b:f3:d3:f9:a1:
                    c2:3b:b2:5b:71:d5:b2:29:09:15:d7:dd:0f:40:10:
                    b4:09:c2:8e:e1:4c:73:23:51:86:56:f5:d3:6c:bd:
                    b5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:E2:D1:BC:10:71:23:E6:36:C5:9E:A8:B1:E9:60:5D:11:76:58:63
            X509v3 Authority Key Identifier:
                keyid:11:7C:0D:6D:19:BF:BA:48:B5:FA:9E:51:7D:0E:69:26:55:C9:8C:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919FDC0/3311F0EE69E911F081B65B67C4F9AE02/EXwNbRm_uki1-p5RfQ5pJlXJjEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:6b:52:a9:24:09:84:f5:0a:1a:35:a5:3c:89:48:ba:17:0e:
         9e:5f:ad:27:16:ba:96:91:84:15:61:14:d2:93:e3:2e:fe:ab:
         75:fa:d4:c9:a2:ab:73:42:c1:b8:c1:2a:f7:5c:fd:41:07:91:
         ce:5e:10:16:9e:96:91:f6:2a:06:bb:c6:2f:32:c4:3b:66:0d:
         28:a5:bf:fa:be:e0:c4:50:33:e3:05:53:9f:c3:dc:59:0d:09:
         4b:d1:35:d4:d3:a0:3a:60:be:f3:42:c4:e2:f7:7a:e8:02:bb:
         1c:40:64:31:5e:7f:0e:4c:64:e5:56:b3:af:eb:ed:a9:94:50:
         55:86:be:a4:24:43:34:21:77:c0:aa:8b:f8:df:df:4d:05:f7:
         d4:67:10:1e:6e:08:b6:83:2f:d0:37:48:65:91:45:42:e3:22:
         47:bf:57:75:0e:df:b7:d9:33:b5:53:24:84:a8:94:da:04:a2:
         f5:20:3e:a9:d5:c6:95:4e:84:70:88:85:6d:56:05:b6:0d:b4:
         97:19:45:91:23:26:51:22:44:46:d8:9b:64:a1:22:17:27:14:
         2a:c2:b2:a7:2b:f9:78:6d:30:4e:c5:23:41:a3:3d:ab:36:63:
         b2:96:d6:63:d8:b3:ad:b1:e0:b4:fb:6f:54:87:22:d9:1d:1b:
         f4:68:64:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:38:04 2026 by rpki-client