Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
File:                     bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft (raw, json)
Hash identifier:          L4+S6PyPfbhuxHvqoCWWUGhoSeJJw7ZHwSfc0EEGvco=
Subject key identifier:   9E:76:6D:4F:0C:A3:BF:AC:1B:6D:B0:03:DF:B9:EA:81:AE:0C:92:58
Authority key identifier: 6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC
Certificate issuer:       /CN=A91B4873/serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC
Certificate serial:       014F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
Manifest number:          014F
Signing time:             Fri 17 Apr 2026 04:47:49 +0000
Manifest this update:     Fri 17 Apr 2026 04:47:49 +0000
Manifest next update:     Fri 24 Apr 2026 04:47:49 +0000
Files and hashes:         1: bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl (hash: SAPCrnTtJjoPs2Jp6V0gggi6tnhBQr7QCfMo8biIYKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl
                          rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:47:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 335 (0x14f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4873, serialNumber=6DD075C070CD19405C094D4D3D4BDA16340CEEFC
        Validity
            Not Before: Apr 17 04:47:49 2026 GMT
            Not After : Apr 24 04:47:49 2026 GMT
        Subject: CN=69e1bb75-0593
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:44:98:00:4b:be:44:82:00:44:b1:e0:e4:82:
                    be:20:af:9f:e0:a0:11:be:44:5e:48:c6:5a:74:7c:
                    6a:38:b7:68:27:04:14:47:38:38:3b:6f:51:d3:58:
                    ae:3e:a6:e0:47:c4:3a:f6:de:85:b8:c1:43:58:9d:
                    ac:28:ea:d6:f9:f6:96:6a:07:79:a4:19:80:77:ee:
                    74:c3:e4:10:0a:d5:50:e1:2a:33:ba:c1:b0:a3:2d:
                    8b:f9:99:92:18:19:ff:59:3f:27:1a:10:f0:a4:0c:
                    48:59:0a:a6:de:6f:f9:f2:f9:e2:1d:99:5b:62:a3:
                    fe:5d:e1:90:c7:1b:42:9b:15:64:49:32:20:c0:fa:
                    d2:10:3a:33:51:5f:38:56:23:34:1f:9a:c9:b6:b2:
                    54:9b:a2:19:45:15:a1:2b:fd:75:3f:02:22:ac:df:
                    a9:e0:6d:fa:15:51:61:79:31:01:1f:70:9f:1a:ec:
                    8f:68:94:9c:4a:eb:6f:b4:66:9d:2d:44:df:7e:45:
                    d5:d9:78:d8:db:39:f6:8f:00:df:9a:5a:d1:ba:a2:
                    d6:f9:fa:da:74:f4:9b:f1:b1:20:7e:84:1d:5d:2e:
                    cf:2c:ab:57:86:8b:bc:60:6e:e6:0b:65:79:6e:49:
                    2f:fc:f0:60:44:1d:94:5a:ae:52:15:59:c7:29:c5:
                    46:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:76:6D:4F:0C:A3:BF:AC:1B:6D:B0:03:DF:B9:EA:81:AE:0C:92:58
            X509v3 Authority Key Identifier:
                keyid:6D:D0:75:C0:70:CD:19:40:5C:09:4D:4D:3D:4B:DA:16:34:0C:EE:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bdB1wHDNGUBcCU1NPUvaFjQM7vw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4873/56A5B2AE38E711EF844B4F65C4F9AE02/bdB1wHDNGUBcCU1NPUvaFjQM7vw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:79:bd:78:75:2d:e5:22:67:46:68:22:a8:2f:23:15:16:80:
         dd:52:0d:f8:51:56:fc:99:71:44:00:0d:70:2d:a8:2e:70:38:
         9c:91:ef:e9:e4:ed:bb:f2:40:f7:11:d1:98:87:06:9a:3b:23:
         4b:f1:b7:23:95:02:05:9d:3c:b0:0d:1b:23:9d:99:f1:15:9d:
         28:44:e2:a7:57:b0:59:e2:94:bc:7f:91:bd:48:4d:a7:e5:b6:
         c8:e7:68:c3:ac:ec:ea:7e:39:21:76:34:67:e2:2a:95:2b:af:
         08:a7:04:e5:1b:61:f3:6d:85:8e:4d:84:f4:16:3e:22:0d:4b:
         b4:c8:9c:2f:55:c6:31:5c:fd:22:b3:73:41:25:b9:6b:53:53:
         bc:a2:42:42:7a:62:41:56:01:4e:4d:53:a2:18:98:24:53:3c:
         02:c9:c7:3b:d2:8f:af:c1:c9:58:97:3b:8b:8c:59:32:c4:cb:
         34:22:f8:6d:2d:53:08:4b:e5:1e:07:9a:cb:f2:63:3a:c2:08:
         d8:89:3f:ec:e1:7f:1a:92:e4:61:fb:ed:60:b5:a7:fa:65:5b:
         61:d0:7c:26:eb:04:24:ec:78:e3:14:3d:4f:25:40:21:b5:a6:
         3e:fd:da:50:49:6c:83:49:4b:40:12:7b:68:27:0f:32:0d:24:
         7c:af:7e:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:12:12 2026 by rpki-client