Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
File:                     d324l0Vw6bbATiZX5tClA3xxiGs.mft (raw, json)
Hash identifier:          TvQKwOS/PMqzL5tLDakdphK0camkZ9LDKf5u8DRTTP0=
Subject key identifier:   63:3E:37:76:6D:31:6D:AA:AD:47:AC:44:E4:B0:BD:93:50:F1:B3:E4
Authority key identifier: 77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B
Certificate issuer:       /CN=A91AF207/serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
Certificate serial:       F6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
Manifest number:          F6
Signing time:             Fri 17 Apr 2026 05:57:18 +0000
Manifest this update:     Fri 17 Apr 2026 05:57:17 +0000
Manifest next update:     Fri 24 Apr 2026 05:57:17 +0000
Files and hashes:         1: d324l0Vw6bbATiZX5tClA3xxiGs.crl (hash: 98Fx+RlVXAfbrMe7vUCU0lowKdT2GcuV/lzWADxWxTY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl
                          rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:57:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF207, serialNumber=777DB8974570E9B6C04E2657E6D0A5037C71886B
        Validity
            Not Before: Apr 17 05:57:17 2026 GMT
            Not After : Apr 24 05:57:17 2026 GMT
        Subject: CN=69e1cbbd-0341
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:54:70:9b:2b:bb:eb:72:14:82:c8:37:ce:f9:
                    45:f6:e4:7a:32:8c:20:c5:bf:85:df:36:2d:42:9e:
                    fb:99:0a:78:39:83:0e:bb:ca:90:43:77:7a:24:4e:
                    4e:a7:39:33:1b:4b:36:44:8d:df:9a:d3:0c:06:f1:
                    83:8a:c8:22:ff:0a:7e:29:f9:5a:63:ba:d0:f6:23:
                    3d:d4:ee:fa:3b:aa:87:98:28:9d:9d:ec:e0:24:87:
                    13:55:0a:05:2d:50:91:a6:b1:b7:06:a9:9e:ae:2e:
                    46:b4:cd:ec:c6:0a:92:5b:dd:ca:40:1a:7d:13:7b:
                    f2:88:8a:30:a3:fc:a6:88:61:cd:69:2d:e7:1c:6c:
                    fd:bb:1c:07:14:60:51:32:75:29:90:59:2e:c7:ab:
                    42:9d:e9:85:de:56:b9:4c:28:62:1d:70:4f:53:27:
                    71:df:63:e8:bf:c4:a7:67:ea:37:60:22:e4:54:4f:
                    7d:ee:74:1d:77:2c:fe:8b:da:60:0b:e5:a6:7b:4b:
                    23:33:f6:96:f6:25:c1:e1:1a:bf:5e:83:54:6e:66:
                    af:b6:ef:10:e7:ce:bf:c8:f7:71:df:45:f7:98:98:
                    06:0a:66:fc:b8:65:b9:aa:11:4c:99:a7:17:9e:42:
                    e5:6c:82:ed:1b:fd:a4:7c:f2:77:71:68:7e:08:2b:
                    23:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:3E:37:76:6D:31:6D:AA:AD:47:AC:44:E4:B0:BD:93:50:F1:B3:E4
            X509v3 Authority Key Identifier:
                keyid:77:7D:B8:97:45:70:E9:B6:C0:4E:26:57:E6:D0:A5:03:7C:71:88:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d324l0Vw6bbATiZX5tClA3xxiGs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF207/B48861C6C22811EF86E3484FC4F9AE02/d324l0Vw6bbATiZX5tClA3xxiGs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:f4:be:f3:f9:af:a6:64:a4:fc:59:43:1e:bf:69:a2:c7:08:
         f9:69:bb:26:1c:6f:ba:8f:c7:d1:12:9f:e0:97:8c:1b:1a:23:
         5d:b0:92:d4:b5:02:62:f2:db:65:78:46:c3:be:44:33:5f:81:
         f6:26:f2:52:02:99:a5:09:c9:7a:28:b4:c6:a5:5a:ed:e1:98:
         1d:e5:1a:5b:0a:de:d9:3b:d6:01:5a:c9:c1:b6:39:0b:8b:3a:
         77:3c:55:aa:91:ea:34:fc:9c:91:ac:cb:31:38:77:0a:92:17:
         e7:61:9a:b6:15:47:e2:e6:f7:1d:ab:26:95:62:e1:1a:70:7a:
         02:85:d1:ed:38:07:e4:7e:44:15:09:ce:19:17:e9:19:8b:83:
         4b:79:08:7f:85:cb:d7:59:a8:3d:26:a2:8a:0b:2f:d1:5f:2e:
         37:52:36:6b:b8:69:43:ed:32:fa:12:3e:af:f7:e4:05:d2:3a:
         bf:14:90:a5:09:e7:a8:68:81:62:d8:56:c1:3d:79:18:b2:8b:
         dd:90:dc:33:db:bb:19:1c:fe:1d:a9:43:81:b0:3d:76:bc:1c:
         6e:a4:68:57:5d:87:08:16:56:91:c1:8a:ff:8f:30:54:86:cd:
         12:3f:74:86:d5:53:7a:85:54:3f:31:57:0f:2b:fd:30:28:57:
         c5:ad:b8:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:38:44 2026 by rpki-client