Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
File:                     d5zZIVaek_nSaxOlqn43bPtfBpA.mft (raw, json)
Hash identifier:          3ulJlgbXjdQ7UbldbXCytEBB+ARxeUUXC9tRRHQXlNg=
Subject key identifier:   60:34:4F:46:B1:20:72:BC:B4:F1:0E:D5:67:5B:05:EA:F1:F2:42:27
Authority key identifier: 77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90
Certificate issuer:       /CN=A91AF317/serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
Certificate serial:       06FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
Manifest number:          06F3
Signing time:             Thu 16 Apr 2026 22:00:45 +0000
Manifest this update:     Thu 16 Apr 2026 22:00:44 +0000
Manifest next update:     Thu 23 Apr 2026 22:00:44 +0000
Files and hashes:         1: d5zZIVaek_nSaxOlqn43bPtfBpA.crl (hash: 4oIxTkDZnqDInRZnH4owiOKv8F+XOuwVRbn2j7zdnH0=)
                          2: 291E55288C7111EBA752313FC4F9AE02.roa (hash: Psgba/J6D2Rc4QvTasd4fTFxXwiZJRSLuDPikpsNKlE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl
                          rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 22:00:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1788 (0x6fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF317, serialNumber=779CD921569E93F9D26B13A5AA7E376CFB5F0690
        Validity
            Not Before: Apr 16 22:00:44 2026 GMT
            Not After : Apr 23 22:00:44 2026 GMT
        Subject: CN=69e15c0c-bce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:88:ca:cb:e9:16:d6:b1:0a:b9:d4:45:96:9e:
                    f9:3f:f9:25:53:00:b4:22:df:78:9b:d6:81:66:eb:
                    3f:a8:48:aa:28:f0:bb:1e:65:57:18:a9:69:3a:2d:
                    6b:22:ad:59:5c:c3:93:59:62:0f:87:68:24:c0:ea:
                    08:c8:b9:81:ae:a8:52:6c:a9:5c:75:91:fc:00:82:
                    e9:7a:d9:72:8f:96:15:df:7a:1f:e9:b4:c1:93:26:
                    37:77:16:0f:90:80:6f:1b:4d:71:de:b5:fe:5c:56:
                    32:3a:09:98:cc:50:32:8a:9b:1e:a9:17:4e:78:ae:
                    af:6f:25:a9:2c:99:9a:ac:8d:33:1e:43:22:27:26:
                    ee:13:ca:f8:be:b0:69:84:c5:e1:3e:55:f4:e5:c3:
                    43:92:4d:a6:2f:40:51:45:65:dd:a7:5a:e4:31:d2:
                    1e:7d:83:1a:03:74:d6:36:97:97:2a:20:3e:8d:63:
                    a2:d2:fd:bb:14:32:77:cc:4c:ae:bd:b5:08:37:57:
                    f1:c6:fc:0b:c7:20:0c:52:84:d0:0e:97:0a:2d:71:
                    e2:1f:87:44:c8:09:79:a5:f8:74:17:fe:90:d8:09:
                    a1:c8:a9:ab:50:e9:a5:aa:b0:81:b1:d7:d1:04:db:
                    6a:44:cc:4d:6d:f1:0d:01:04:8e:48:9e:32:94:a5:
                    70:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:34:4F:46:B1:20:72:BC:B4:F1:0E:D5:67:5B:05:EA:F1:F2:42:27
            X509v3 Authority Key Identifier:
                keyid:77:9C:D9:21:56:9E:93:F9:D2:6B:13:A5:AA:7E:37:6C:FB:5F:06:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d5zZIVaek_nSaxOlqn43bPtfBpA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF317/4FD576808C6F11EBBA819F31C4F9AE02/d5zZIVaek_nSaxOlqn43bPtfBpA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:c1:ba:51:bb:1c:db:ed:2e:e6:74:f6:04:1f:bc:42:1a:bb:
         cf:15:80:19:13:d0:e2:a3:aa:ff:3e:85:c9:51:98:e7:cc:f8:
         f3:af:75:45:16:6b:44:4c:e0:2d:be:6d:4b:63:a6:a4:c6:b4:
         d5:85:1b:7f:94:04:2c:db:9e:7b:2e:4e:68:af:15:50:55:3e:
         f9:9d:20:b4:c3:96:e5:f5:2c:b8:a4:cc:b2:2c:6e:18:b8:15:
         bc:c7:35:72:5e:60:c9:ba:6c:34:cd:c0:bd:12:93:f5:45:0e:
         56:34:92:e0:03:74:b7:d0:95:46:d1:a2:6c:17:61:43:69:2e:
         9e:9f:46:ef:a6:cc:ff:a1:fa:da:12:53:a6:f8:13:2e:77:95:
         2e:d3:37:42:89:c4:5c:2b:86:ea:3c:5c:65:33:e6:94:6d:cc:
         3b:eb:5f:ad:1c:42:fa:05:83:33:8c:b7:c9:76:fb:71:a4:7b:
         b3:4b:1e:6b:cc:af:42:31:86:66:40:b4:da:d7:2c:ae:aa:7f:
         12:51:d8:33:47:04:cc:c7:69:1f:ab:5b:95:85:c9:ab:16:1b:
         e9:34:7d:46:85:96:f2:7a:62:ab:cc:4a:1f:1a:6f:92:f3:32:
         17:2c:09:53:a5:91:d5:b3:8e:3b:09:80:91:34:48:d4:e0:bb:
         40:a0:09:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:12:27 2026 by rpki-client