Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
File:                     3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft (raw, json)
Hash identifier:          xo2yG+09viPbgxFPWfE35IktYsLJn3XfptM1TpWoLf4=
Subject key identifier:   D5:45:ED:D5:0A:D5:E0:B9:B7:A1:B9:35:A9:34:43:B9:BC:E4:8B:B9
Authority key identifier: DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73
Certificate issuer:       /CN=A91B5AAA/serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
Certificate serial:       0BE7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
Manifest number:          4112
Signing time:             Sat 18 Apr 2026 14:48:01 +0000
Manifest this update:     Sat 18 Apr 2026 14:48:00 +0000
Manifest next update:     Sat 25 Apr 2026 14:48:00 +0000
Files and hashes:         1: 3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl (hash: yeoV40RWWIO9J9zxmOQJ9ysZXt6CGTVxRRFafkT6lTk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 14:47:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3047 (0xbe7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=DCF5470C5C878288D61D9EA5A515D5850E7B5873
        Validity
            Not Before: Apr 18 14:48:00 2026 GMT
            Not After : Apr 25 14:48:00 2026 GMT
        Subject: CN=69e399a0-aa9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:7b:61:2e:8b:b5:00:84:07:19:9d:44:d2:c2:
                    92:6f:92:e1:46:d5:54:de:69:e9:88:e5:54:18:33:
                    af:df:a5:fc:73:76:bc:78:3b:cb:f0:f7:9e:2e:5a:
                    0b:4f:c1:1c:5e:e7:b3:c2:f8:24:b4:6a:3e:fa:8a:
                    33:47:6a:12:4d:e8:78:2c:89:4e:1c:b2:47:07:9b:
                    41:77:1a:31:64:38:2c:ca:c1:cd:45:37:ca:f2:58:
                    da:61:42:05:5e:3c:85:2a:2a:09:e1:6b:18:e8:6d:
                    d0:ac:33:d8:5d:fe:a9:dc:51:91:74:4a:17:6d:0d:
                    09:ef:46:1f:15:77:f2:91:b1:82:ec:75:68:b1:6f:
                    f7:10:d7:fa:84:24:76:9a:de:ce:e3:c3:13:05:be:
                    c3:be:ed:8e:a2:42:10:a4:21:0f:f1:08:6d:0b:89:
                    39:67:b6:6f:9e:1e:62:c2:e5:02:e2:c0:60:41:0d:
                    3f:2b:d3:c2:14:71:78:ca:58:bf:36:f5:47:bb:78:
                    4a:e3:0f:c0:b1:55:58:ef:ff:f6:62:4f:4d:f7:a5:
                    02:13:16:f9:20:0c:48:7b:40:1d:ca:5e:79:af:a9:
                    f2:c5:a9:5f:da:ab:7a:0e:ca:bb:d3:31:8e:a4:fe:
                    d3:18:96:d6:a0:86:20:eb:38:d8:63:e3:0d:e0:2c:
                    f3:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:45:ED:D5:0A:D5:E0:B9:B7:A1:B9:35:A9:34:43:B9:BC:E4:8B:B9
            X509v3 Authority Key Identifier:
                keyid:DC:F5:47:0C:5C:87:82:88:D6:1D:9E:A5:A5:15:D5:85:0E:7B:58:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/3PVHDFyHgojWHZ6lpRXVhQ57WHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:df:bd:4a:74:11:e4:7e:d9:10:f6:7b:de:2a:3a:85:95:c8:
         51:f2:36:7c:63:d4:f1:6d:5a:3a:a7:d6:75:bb:22:71:e0:34:
         56:b8:55:7b:d9:a0:57:cf:38:d9:de:1e:20:a6:9d:96:b2:65:
         ee:7c:d7:af:a1:22:88:d4:06:ba:f3:72:73:70:c0:89:bf:7a:
         8b:96:d2:65:5a:37:80:ef:69:e9:4d:95:0d:ce:da:03:5d:31:
         d2:f9:7c:4d:93:cd:a7:ff:bd:90:d4:fc:62:2a:6a:89:50:b6:
         d5:84:ae:86:f9:95:8a:f8:e6:4d:31:3f:c2:24:66:4d:bb:9a:
         16:2a:ca:03:80:14:f8:20:44:be:3f:2d:86:e7:4a:95:dd:7e:
         78:a7:56:c7:36:7c:0c:83:b3:a5:e7:29:3a:ce:34:28:24:9c:
         9d:f9:07:0a:14:93:40:bd:b0:ed:b7:7a:50:41:87:57:72:9f:
         e6:ab:d8:15:b9:18:4f:25:17:2b:af:27:c1:c0:38:e4:03:27:
         88:e2:30:0e:aa:8c:df:5b:6f:a1:68:2d:01:97:4e:f2:2e:39:
         86:8f:83:67:fc:8d:6d:3c:e4:fb:c0:19:18:2d:b3:95:1e:40:
         d6:e5:65:e8:c1:10:1b:47:3e:af:62:a3:a5:1e:9b:ad:71:f4:
         76:6a:0c:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 09:00:46 2026 by rpki-client