Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
File:                     -sRVX74xo4CWkO4YeF16u-KnJ6M.mft (raw, json)
Hash identifier:          QDm2MPypWyjukXCdWBqLKVImYtH0j1y6tOK5d0iFraQ=
Subject key identifier:   38:A3:EC:43:31:E7:C9:15:A5:65:8B:7D:D6:FC:96:CF:77:33:30:14
Authority key identifier: FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3
Certificate issuer:       /CN=A91C4204/serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
Manifest number:          AD
Signing time:             Fri 17 Apr 2026 06:50:27 +0000
Manifest this update:     Fri 17 Apr 2026 06:50:26 +0000
Manifest next update:     Fri 24 Apr 2026 06:50:26 +0000
Files and hashes:         1: -sRVX74xo4CWkO4YeF16u-KnJ6M.crl (hash: 6vic5F3YcKt8TkSoVfii7IActIqp71WnI/MiKJmZStc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl
                          rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C4204, serialNumber=FAC4555FBE31A3809690EE18785D7ABBE2A727A3
        Validity
            Not Before: Apr 17 06:50:26 2026 GMT
            Not After : Apr 24 06:50:26 2026 GMT
        Subject: CN=69e1d833-af11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:0c:bd:d2:57:d2:c1:70:18:8b:96:de:b8:ac:
                    99:52:70:aa:9d:2b:d1:6e:0b:b9:27:8c:68:66:06:
                    c6:3b:4c:8b:c1:30:b2:ac:b5:b2:7a:e4:2a:82:a6:
                    a9:57:b1:94:38:86:89:23:e3:7c:5e:10:21:8d:34:
                    0a:6b:22:a6:1e:3f:ce:96:1f:d9:00:c4:f5:5a:82:
                    c7:35:8d:6a:52:d7:49:23:ff:5a:04:e8:53:9a:f8:
                    40:ab:1f:7a:37:5c:dc:99:bf:a8:d8:55:a0:44:7b:
                    68:92:f2:9b:0d:cc:66:33:85:2c:ab:08:97:35:b4:
                    a8:df:35:7b:2e:ed:27:de:4e:9f:80:fe:00:1e:05:
                    83:86:b9:76:b9:c1:eb:de:71:de:f4:4f:ae:a2:6d:
                    d5:4b:5a:03:a3:f7:be:16:d7:41:f8:9a:7c:b9:03:
                    f9:88:44:b9:4b:10:21:4f:92:a1:72:4b:3e:54:04:
                    f3:ec:cf:29:96:5b:06:eb:ba:b5:8e:f2:0c:65:1a:
                    43:20:ef:c5:92:70:1b:4e:11:c6:45:6d:ce:01:b2:
                    d8:91:24:9f:81:ab:5e:de:e2:4d:1b:7b:de:c9:a4:
                    f2:60:c5:2e:a3:fc:4a:69:b8:75:fb:62:fc:38:ae:
                    77:fd:82:3f:02:2c:1f:20:3e:77:8e:9d:f7:46:8b:
                    09:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A3:EC:43:31:E7:C9:15:A5:65:8B:7D:D6:FC:96:CF:77:33:30:14
            X509v3 Authority Key Identifier:
                keyid:FA:C4:55:5F:BE:31:A3:80:96:90:EE:18:78:5D:7A:BB:E2:A7:27:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-sRVX74xo4CWkO4YeF16u-KnJ6M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C4204/4C5D2EDE300911F0A0AA7D3DC4F9AE02/-sRVX74xo4CWkO4YeF16u-KnJ6M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:2f:c3:fd:fa:67:e1:4f:dc:cb:80:73:fb:f0:83:1d:f3:37:
         f8:6b:5e:df:31:13:71:0c:e4:98:04:61:c5:a8:f7:77:cc:ef:
         b7:cf:1e:d9:16:4e:12:2e:41:c2:b4:21:70:a7:63:66:f9:7c:
         03:0a:0d:3e:b6:7a:32:36:85:5d:81:d8:36:6b:aa:b2:2a:d9:
         9b:24:b5:6c:47:43:d7:73:e6:a2:41:13:44:2b:be:fa:c0:8a:
         cf:1f:c8:71:48:f4:d3:1f:ee:36:3e:61:0b:b6:d0:e6:d0:be:
         bc:a0:70:a5:ac:53:21:05:db:d6:0d:72:60:9d:76:ce:c6:7f:
         7c:5f:7f:9b:da:1e:12:86:0e:02:57:06:56:ef:54:7d:74:f0:
         f9:d4:16:a4:43:9e:56:2e:2f:62:cb:35:34:54:c1:c9:bd:a5:
         68:28:e9:7f:a5:b1:08:18:11:f6:e5:c4:be:13:17:e6:d2:a2:
         0e:38:5b:4d:e8:93:9b:bd:37:b5:6d:82:cb:47:c5:f3:55:99:
         a7:a8:da:94:cb:c5:3c:e9:32:a8:f9:7c:c0:11:95:36:dc:50:
         ab:e1:2d:f6:af:d6:13:c6:12:4f:96:01:15:55:28:e2:f8:73:
         c7:bc:78:fa:9a:06:db:31:07:b4:c1:a4:cf:57:3f:a3:de:b9:
         a9:a4:47:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:08:25 2026 by rpki-client