Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
File:                     PTiRpGy8urR0eN6kDSkI9nzOOyo.mft (raw, json)
Hash identifier:          pP0D+kcZMX+QDjXfnk35pe21Z9riG6e1M4peOSvvjhs=
Subject key identifier:   86:42:C2:09:6F:29:07:0B:7A:63:B7:6E:A6:FD:A3:6C:35:28:A8:88
Authority key identifier: 3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A
Certificate issuer:       /CN=A91AAEC2/serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
Certificate serial:       092C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
Manifest number:          0921
Signing time:             Thu 16 Apr 2026 20:10:22 +0000
Manifest this update:     Thu 16 Apr 2026 20:10:22 +0000
Manifest next update:     Thu 23 Apr 2026 20:10:22 +0000
Files and hashes:         1: PTiRpGy8urR0eN6kDSkI9nzOOyo.crl (hash: iSo20GGr/i7BMF6pLJuBOj2W1xgogGBGHx6GKKwFdE4=)
                          2: DFEA30745C3011EEB250DE0EC4F9AE02.roa (hash: i/znacwdWC+cJbSfpSGuIUnxdzdxG75j2+xmoBgpqDI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl
                          rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:10:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2348 (0x92c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AAEC2, serialNumber=3D3891A46CBCBAB47478DEA40D2908F67CCE3B2A
        Validity
            Not Before: Apr 16 20:10:22 2026 GMT
            Not After : Apr 23 20:10:22 2026 GMT
        Subject: CN=69e1422e-3dc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:64:97:15:c3:eb:33:59:02:6b:5d:c3:2a:c4:
                    5f:b9:b0:ff:22:3e:36:2e:90:03:f8:30:e7:3b:e9:
                    94:6f:98:a2:b0:83:3b:74:86:2a:c4:d4:36:aa:25:
                    c2:92:2a:78:c0:82:df:b9:ca:6e:f3:3e:bf:26:c0:
                    30:86:ed:d5:bc:1c:46:2d:b3:69:c3:a8:bd:c3:bd:
                    18:8f:a0:fa:10:2c:85:77:39:48:81:c5:8d:01:0e:
                    9b:2e:7a:b6:39:b1:7e:9b:6f:5a:ee:cd:af:1b:1f:
                    fb:55:d2:37:a8:6f:54:ab:c2:13:f4:fa:1a:a8:07:
                    19:c5:07:14:87:7e:d0:02:a1:9d:c2:d5:1f:7f:76:
                    76:41:fc:fd:b1:39:85:5a:de:05:99:1e:3c:7c:03:
                    7b:52:78:90:5a:c9:13:00:0a:de:2a:28:01:76:d2:
                    c4:7d:04:0e:38:93:b0:60:5c:c3:e8:2a:b3:bd:f4:
                    52:7e:60:ff:4c:3d:f4:c0:5f:ea:f8:34:72:34:78:
                    9f:e0:a5:8d:45:c6:aa:7b:a4:80:0b:af:42:a1:25:
                    87:9d:9b:0a:d8:31:eb:a0:0b:16:da:db:32:22:bd:
                    10:b0:6f:17:75:d2:98:f8:67:33:43:c8:a9:f9:16:
                    8a:59:6e:91:e5:60:fa:81:eb:d1:94:0f:bb:ca:3a:
                    20:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:42:C2:09:6F:29:07:0B:7A:63:B7:6E:A6:FD:A3:6C:35:28:A8:88
            X509v3 Authority Key Identifier:
                keyid:3D:38:91:A4:6C:BC:BA:B4:74:78:DE:A4:0D:29:08:F6:7C:CE:3B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PTiRpGy8urR0eN6kDSkI9nzOOyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AAEC2/2DDDD26CC2C011EA93D5857FC4F9AE02/PTiRpGy8urR0eN6kDSkI9nzOOyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         05:5f:03:a3:f5:06:d5:33:b9:a3:15:e5:10:6f:f9:4e:90:78:
         75:33:fc:01:42:0b:22:b4:86:42:07:e9:91:45:4b:f4:2c:4b:
         e2:0e:bb:7d:b4:4c:e9:48:53:3a:da:01:c9:25:eb:8a:de:77:
         83:8a:b7:fc:91:98:24:a6:9c:b9:da:37:c7:e2:68:88:9b:15:
         69:84:05:23:b2:32:75:e3:37:e1:8a:60:7b:ac:42:85:5f:50:
         a0:1f:a7:5a:95:dd:52:11:1f:68:f0:d7:da:e2:86:a9:01:4a:
         6f:cd:98:4a:c9:d9:6d:ef:80:b8:ec:ec:6a:13:cd:2d:1d:ef:
         8f:40:bd:80:3d:61:2b:46:ed:b6:b8:8a:6d:b5:7c:9e:8b:8d:
         fb:db:d9:6c:ab:27:9f:dd:e4:7d:e1:56:91:9e:54:f4:e9:d1:
         05:53:e3:79:36:b5:22:af:e4:4a:f5:d0:6d:3b:23:3c:1f:42:
         77:6a:1a:13:91:e5:f4:ad:63:2e:89:a6:b7:f5:1f:75:78:c0:
         3b:cd:74:4e:c4:ee:3f:87:bc:99:2e:ad:ac:11:ec:de:1c:5e:
         b6:9a:7e:ca:33:91:9d:fb:0e:57:73:0c:6f:4e:9d:2a:ef:14:
         9b:b7:80:cc:80:28:9f:a1:8a:b4:41:34:63:d0:b4:06:31:ac:
         b9:b2:32:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:57:37 2026 by rpki-client