Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
File:                     -v1MzrYU4itCRPcgJe_Ck4QAq8E.mft (raw, json)
Hash identifier:          eQBuWMmMB+SL+twqfhzkXYrYpFFKu/h44570Xy7vScU=
Subject key identifier:   67:71:32:3E:FE:1F:4F:99:5C:7D:39:98:4D:E1:FE:B2:F3:29:01:B8
Authority key identifier: FA:FD:4C:CE:B6:14:E2:2B:42:44:F7:20:25:EF:C2:93:84:00:AB:C1
Certificate issuer:       /CN=A91C8AE7/serialNumber=FAFD4CCEB614E22B4244F72025EFC2938400ABC1
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
Manifest number:          10
Signing time:             Sun 01 Mar 2026 10:37:15 +0000
Manifest this update:     Sun 01 Mar 2026 10:37:15 +0000
Manifest next update:     Sun 08 Mar 2026 10:37:15 +0000
Files and hashes:         1: -v1MzrYU4itCRPcgJe_Ck4QAq8E.crl (hash: yH++LUiAhnhN2x4Sk57bcIqJtgvo6P3v+oPezigNfRg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.crl
                          rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:37:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8AE7, serialNumber=FAFD4CCEB614E22B4244F72025EFC2938400ABC1
        Validity
            Not Before: Mar  1 10:37:15 2026 GMT
            Not After : Mar  8 10:37:15 2026 GMT
        Subject: CN=69a416db-25d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:cf:21:8a:dc:f9:d2:90:1b:16:03:b3:ce:d3:
                    83:d0:c8:93:c4:05:d3:e1:74:8f:03:43:71:ed:61:
                    a1:6d:9c:97:5d:14:27:c1:e6:09:6f:8d:cb:ab:8a:
                    1e:a6:8f:f6:d9:b6:55:3a:e2:1d:d0:26:1d:2d:b1:
                    47:6f:45:18:c6:28:e0:c4:29:2a:b1:22:dd:af:de:
                    75:7c:32:12:65:11:18:e4:12:07:b5:87:31:dc:21:
                    39:ba:83:38:bf:f8:26:20:da:fc:5c:93:a5:f1:f3:
                    1e:49:cc:fa:85:45:f7:e9:d2:49:49:ec:9c:8c:67:
                    1c:cf:bc:08:7d:2c:fe:90:b0:c6:bc:57:3e:5f:f7:
                    13:19:db:cd:8a:4f:de:6f:8d:c5:ce:ca:3d:c6:36:
                    ae:ac:d9:e5:f4:99:43:8d:db:bd:b9:5d:6d:51:d1:
                    55:75:1c:56:78:ac:dc:8b:7b:08:79:f2:32:48:99:
                    49:b0:55:0e:e7:0a:1b:6d:08:a2:92:45:7b:58:34:
                    c5:60:71:08:5f:b4:89:95:85:5a:e5:f0:7f:23:fa:
                    27:46:86:75:b1:6c:13:48:df:dd:aa:e6:01:bc:a2:
                    22:cd:06:4e:73:e5:3d:99:5f:d5:41:d9:bc:ff:ec:
                    b0:25:a7:5d:33:2c:8c:c1:ad:5b:cf:70:f1:62:c5:
                    18:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:71:32:3E:FE:1F:4F:99:5C:7D:39:98:4D:E1:FE:B2:F3:29:01:B8
            X509v3 Authority Key Identifier:
                keyid:FA:FD:4C:CE:B6:14:E2:2B:42:44:F7:20:25:EF:C2:93:84:00:AB:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-v1MzrYU4itCRPcgJe_Ck4QAq8E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AE7/EE4C41EE062811F1A1995728263D8C67/-v1MzrYU4itCRPcgJe_Ck4QAq8E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:e9:1e:dc:7c:a8:58:03:cf:ba:c1:05:8e:1b:da:51:f1:93:
         e5:0e:97:1a:df:02:17:fe:4a:b5:d7:ba:43:32:2b:6a:5e:d3:
         db:90:23:78:05:75:00:9c:54:81:a1:a8:ce:a9:0c:4a:44:40:
         44:57:1c:ec:3d:c8:86:76:f7:53:17:2d:9b:b1:93:db:4d:b8:
         5e:e6:3c:52:6e:ba:ec:47:ae:73:3c:e7:7c:ac:c2:75:ee:67:
         6c:1a:22:4c:81:75:8f:39:75:7a:a7:e6:c2:18:44:0a:70:02:
         c7:e4:01:18:13:2b:f0:7e:91:da:1d:92:7e:62:58:68:89:8f:
         aa:86:83:52:0a:74:fb:b1:2e:c8:31:13:8c:95:09:c5:49:b3:
         42:2d:e3:33:28:07:b3:c1:8f:18:65:eb:76:e1:01:cf:50:ae:
         7a:40:dd:cb:3b:b4:23:0b:30:fd:52:56:2a:45:ca:47:a6:2f:
         4d:c5:25:af:f8:af:28:a2:10:fd:5c:5c:31:b9:25:a8:02:7e:
         97:81:09:e5:fe:bd:41:a0:ac:28:d8:d4:fe:be:ee:37:60:4f:
         4f:84:83:b9:30:63:82:0e:5b:c4:76:14:79:26:52:87:2f:95:
         cf:0e:92:33:e6:1e:0e:f3:1b:d5:2e:32:76:18:61:41:45:f8:
         db:5a:77:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:05 2026 by rpki-client