Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
File:                     sLiO7pE7KqjXtZU3FT782HAKkUA.mft (raw, json)
Hash identifier:          iq5F0fHF938adA4fAaAv6kvC9kjCMMXZrOLLqeVQ6uY=
Subject key identifier:   6F:B0:A5:FD:5C:B1:68:4A:D0:0E:8B:78:0C:F8:0E:3E:C7:B7:7A:95
Authority key identifier: B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40
Certificate issuer:       /CN=A91B62A9/serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
Certificate serial:       3532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
Manifest number:          352D
Signing time:             Thu 16 Apr 2026 15:04:08 +0000
Manifest this update:     Thu 16 Apr 2026 15:04:08 +0000
Manifest next update:     Thu 23 Apr 2026 15:04:08 +0000
Files and hashes:         1: sLiO7pE7KqjXtZU3FT782HAKkUA.crl (hash: WnPsRMbaTwXuQ5SOTDHgfFwqRjSywOIVLNBwyYiX6m0=)
                          2: 8146430A45BE11EF92C29882C4F9AE02.roa (hash: zBVuWCHc4lzO9QNlV2GGFOrIuW/CBB9gjpbg2O07Y+8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:04:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13618 (0x3532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B62A9, serialNumber=B0B88EEE913B2AA8D7B59537153EFCD8700A9140
        Validity
            Not Before: Apr 16 15:04:08 2026 GMT
            Not After : Apr 23 15:04:08 2026 GMT
        Subject: CN=69e0fa68-b30d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:75:b8:87:9c:5b:ba:6b:96:6b:cf:40:16:6a:
                    c2:c4:62:5d:87:00:f8:57:83:b6:d0:2a:96:44:d0:
                    63:e6:ad:5f:32:09:74:29:71:59:cc:53:27:93:ca:
                    90:77:37:e9:82:56:15:74:64:43:32:4e:f5:b3:e8:
                    b2:32:8c:33:49:f6:05:e3:1b:96:34:a0:32:d1:19:
                    13:b5:ad:41:a5:f5:7f:80:75:b9:2f:a5:70:34:4d:
                    14:84:81:49:db:dd:99:02:b6:d9:20:03:9d:68:cf:
                    f5:83:22:c3:6d:43:96:62:16:cc:6a:c8:c3:be:5a:
                    e6:0e:92:b2:87:53:d7:14:a6:77:e1:fb:51:82:24:
                    aa:b9:f0:a0:f8:71:8c:89:6a:c2:4c:f6:4b:c8:1f:
                    48:ad:14:93:1d:95:05:c8:fb:ce:61:d0:4b:4e:4e:
                    56:14:d6:36:66:51:13:a8:fc:89:28:54:9c:fa:be:
                    d6:88:0c:b9:6b:9d:0b:3c:e0:1e:9b:99:ec:7e:fc:
                    61:8b:0c:b4:db:c3:b3:b1:47:ee:df:c7:80:5b:4a:
                    57:3e:70:f5:e2:bd:55:94:e8:e9:87:f9:d1:c3:52:
                    89:84:d5:1d:fe:5a:05:6e:e6:82:91:f4:03:9e:30:
                    0b:f3:a8:93:29:bb:d0:00:9b:1a:ad:12:b3:3b:25:
                    7d:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:B0:A5:FD:5C:B1:68:4A:D0:0E:8B:78:0C:F8:0E:3E:C7:B7:7A:95
            X509v3 Authority Key Identifier:
                keyid:B0:B8:8E:EE:91:3B:2A:A8:D7:B5:95:37:15:3E:FC:D8:70:0A:91:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sLiO7pE7KqjXtZU3FT782HAKkUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B62A9/D77F91421DA111E2BFCB309408B02CD2/sLiO7pE7KqjXtZU3FT782HAKkUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         37:b9:d4:41:bc:8c:8b:21:0a:7c:71:f3:97:64:a1:9b:33:61:
         00:14:3e:8c:85:45:74:d2:cf:28:1f:98:8e:53:42:97:5d:89:
         00:97:c2:d9:17:52:e1:f9:27:18:0f:75:8b:dd:b0:d2:df:75:
         87:62:45:91:61:d0:67:82:0c:f9:4b:60:b4:0a:31:ca:ab:cb:
         6d:40:83:1f:d5:90:50:85:5f:67:96:76:fc:30:8b:82:e7:04:
         5d:f3:57:96:47:75:f7:7b:c3:c9:f1:3f:80:68:02:7d:ec:ba:
         7a:b2:60:a6:79:8f:eb:93:55:c9:07:31:54:e3:34:48:10:12:
         d3:40:58:83:a6:2c:b0:b9:f8:d2:d2:b4:8b:cb:f2:7b:9e:6f:
         b8:6a:12:9a:f2:4b:49:7b:2f:90:10:29:a1:0b:8f:64:fd:1f:
         c2:8c:ae:a0:9c:f8:d5:0c:53:e8:05:0e:06:2d:80:52:56:ec:
         b2:b1:3d:31:72:cf:9e:34:9d:89:ca:f1:97:67:00:eb:cf:39:
         ac:5c:dd:8e:ed:a7:f3:34:06:f6:a6:9f:d6:a1:fc:eb:2e:f7:
         d8:f1:36:a0:99:9a:75:b3:b1:e2:8a:ec:54:dd:b1:aa:a8:f4:
         1c:f1:28:e9:ba:f4:f2:c9:1f:7a:68:8f:e1:67:81:70:34:86:
         c3:bc:c7:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:06:27 2026 by rpki-client