Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
File:                     446z9aUQfjDwynHd6nWxcNCwMlY.mft (raw, json)
Hash identifier:          /RqClkNV+o+IoCi+s6dTtof36NdhsVxKpG3ArF6pVpE=
Subject key identifier:   6B:A2:A0:3F:93:7C:FE:33:59:81:EA:0F:96:36:E7:32:15:61:4D:FC
Authority key identifier: E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56
Certificate issuer:       /CN=A91A5560/serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
Manifest number:          015B
Signing time:             Sun 01 Mar 2026 06:13:18 +0000
Manifest this update:     Sun 01 Mar 2026 06:13:18 +0000
Manifest next update:     Sun 08 Mar 2026 06:13:18 +0000
Files and hashes:         1: 446z9aUQfjDwynHd6nWxcNCwMlY.crl (hash: RHH+Atd34k5Noe7FJtQdnwSo0qlbiGAlCkJKZXkM2yc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 06:13:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5560, serialNumber=E38EB3F5A5107E30F0CA71DDEA75B170D0B03256
        Validity
            Not Before: Mar  1 06:13:18 2026 GMT
            Not After : Mar  8 06:13:18 2026 GMT
        Subject: CN=69a3d8fe-489f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:3c:32:39:04:18:4f:8f:32:4b:be:56:c3:4f:
                    ac:6f:a2:bb:11:30:04:48:58:fa:0c:fe:37:eb:b5:
                    5a:51:34:c6:a0:3c:90:2a:95:09:8b:b0:ca:08:9b:
                    d2:b3:14:07:e0:c7:68:aa:65:bc:e6:fe:31:c0:6e:
                    d1:14:3e:c5:41:32:86:e9:ef:7a:0f:e7:20:6d:8b:
                    f1:2e:63:39:e2:8e:c3:0e:ca:c9:95:3c:e0:f8:e7:
                    e4:0f:7c:62:64:9f:b8:f6:01:d3:50:23:90:86:1f:
                    ed:e0:35:1a:00:8a:ba:73:71:60:10:5d:ac:bf:e1:
                    e1:7e:e6:54:1d:df:65:2d:fc:34:dc:ac:ba:fa:9b:
                    9d:65:d9:36:ee:71:1f:ca:31:08:38:d8:26:a2:15:
                    46:ae:8e:3d:7c:c3:2e:29:12:d2:36:7d:13:db:9c:
                    c7:b5:cb:0d:67:a4:97:c2:e1:45:13:fc:bc:57:d3:
                    f3:90:4f:91:20:d1:04:b4:c6:bb:dc:55:64:22:2e:
                    e5:16:c0:48:4f:8c:53:24:45:0f:ff:ea:f4:8f:24:
                    79:4e:e5:59:54:0e:c7:4d:37:4e:e8:64:17:90:b8:
                    b2:98:7a:72:92:40:39:b1:09:92:e9:be:d0:e1:56:
                    9f:2c:5f:07:e8:e2:9c:f9:a2:ac:9f:f5:70:4e:0d:
                    91:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:A0:3F:93:7C:FE:33:59:81:EA:0F:96:36:E7:32:15:61:4D:FC
            X509v3 Authority Key Identifier:
                keyid:E3:8E:B3:F5:A5:10:7E:30:F0:CA:71:DD:EA:75:B1:70:D0:B0:32:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/446z9aUQfjDwynHd6nWxcNCwMlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5560/4C3D6BC0216F11EFAF45EA2DC4F9AE02/446z9aUQfjDwynHd6nWxcNCwMlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:3e:46:17:bf:03:01:f1:2e:a7:5e:e1:be:36:b4:1f:16:12:
         62:89:c0:67:fd:fa:87:5f:9b:6b:f4:8b:f7:f2:a9:a8:0a:2b:
         27:c3:e0:dc:61:1b:78:79:cb:0b:72:e3:64:0c:61:fd:d3:3d:
         19:04:2c:cc:ea:55:38:c9:0f:5f:c6:95:21:fb:5f:62:c9:88:
         17:22:d8:05:1a:cb:7c:a3:3c:e6:3e:b9:ac:5e:6c:11:03:cb:
         c5:f4:55:d6:1a:c8:12:e2:60:88:f5:55:2f:95:b0:bb:ff:09:
         07:8b:5b:69:39:e2:37:4f:bf:5b:05:ff:9e:02:39:8e:22:54:
         d2:5a:3d:db:cb:21:dc:15:4c:9a:00:cf:15:00:b7:13:13:e6:
         ca:59:dd:2e:fb:ca:54:06:26:c8:a0:0b:0a:7f:b1:1c:15:d1:
         d8:19:01:2b:a2:a3:cf:f5:87:65:ba:5b:6d:7a:41:2d:fa:b3:
         d0:16:b3:ef:1f:1c:e7:56:58:f4:59:d2:fb:d3:33:73:3e:a7:
         8a:43:74:06:b8:88:06:eb:b6:4d:3f:a7:3e:6c:52:f7:73:6b:
         78:9c:98:9b:7a:ef:d4:3d:b7:85:80:76:36:67:e7:79:5f:93:
         d7:71:6d:67:0e:75:52:66:82:78:d8:c1:56:e9:4c:75:69:f8:
         5b:eb:a7:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:22:19 2026 by rpki-client