Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File:                     MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier:          iq7/8xF1gSpvtkdniDFZkKpIAo1Zj/YzrZn06TIddP0=
Subject key identifier:   6F:65:85:CC:1A:AB:B2:DF:91:99:98:E3:74:A2:E8:D6:A7:59:C4:39
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer:       /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial:       3543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number:          353B
Signing time:             Thu 16 Apr 2026 14:32:34 +0000
Manifest this update:     Thu 16 Apr 2026 14:32:33 +0000
Manifest next update:     Thu 23 Apr 2026 14:32:33 +0000
Files and hashes:         1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: 2Og2zj4FrYapT5xmF4YYpDm5KV+NM4zklakKV+zraDA=)
                          2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: 6+roL2PbfwWq8y6ta4w/K7qCXrfAWrT67sYJoqqWyCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
                          rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:32:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13635 (0x3543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
        Validity
            Not Before: Apr 16 14:32:33 2026 GMT
            Not After : Apr 23 14:32:33 2026 GMT
        Subject: CN=69e0f302-f44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:57:8d:11:6d:1c:20:e9:2e:88:d5:14:11:a6:
                    8f:b4:72:de:8d:e0:a3:0e:57:76:cf:a2:56:f6:d2:
                    e2:da:f4:78:78:59:0b:de:67:0e:98:31:16:ca:00:
                    d1:c3:5b:9a:3c:47:78:2f:ea:ba:c0:c7:8a:0a:3e:
                    01:70:8d:39:38:b6:85:cd:bf:e5:64:d8:81:4d:01:
                    5f:4a:91:4a:50:0c:21:bb:a9:f0:52:97:fd:ae:fb:
                    5c:b1:68:cd:ac:43:35:23:ab:ec:90:e7:3f:c2:da:
                    eb:ca:98:b5:56:6f:80:88:84:15:53:7f:f3:20:02:
                    12:eb:51:90:60:56:78:a9:84:e2:30:ab:75:3d:39:
                    39:f6:59:5d:ed:b8:96:4d:2e:8f:15:f8:18:bd:7b:
                    37:63:cc:4d:fd:01:69:19:7f:30:e5:95:5c:09:d7:
                    ac:2c:a8:ad:cc:dc:3f:a1:f0:7b:ed:1e:52:38:ad:
                    71:54:a5:41:07:2a:e7:a4:bd:e0:df:a4:18:e2:70:
                    65:81:61:7e:48:52:1f:e6:4a:9f:b1:8e:bc:b6:de:
                    68:43:ad:3b:6a:98:75:66:e1:36:0f:42:24:d1:ab:
                    cf:44:a7:9d:3e:e9:37:35:80:49:c4:7e:50:df:49:
                    82:3c:73:af:44:3f:13:d4:3b:cf:a1:6f:56:34:0e:
                    cc:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:65:85:CC:1A:AB:B2:DF:91:99:98:E3:74:A2:E8:D6:A7:59:C4:39
            X509v3 Authority Key Identifier:
                keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:85:55:d0:a0:41:45:58:8c:8d:53:a3:7a:10:6b:70:15:7d:
         f3:3a:1a:25:9e:59:d2:fe:7b:55:58:d9:d9:20:03:cc:53:71:
         8f:b5:a8:e3:78:60:f6:bf:e7:16:23:ec:3e:7a:51:67:2c:f5:
         3a:04:16:d5:3b:47:94:e2:97:15:37:89:8e:c0:3c:ec:47:a0:
         d7:46:9d:f6:cd:a2:63:2d:a2:e1:fa:ab:b8:49:5a:ec:9e:dc:
         a5:e4:76:b2:0f:a1:d8:6e:de:62:41:a7:a8:0d:54:6e:c6:1a:
         80:39:6f:cf:fa:c3:d6:31:07:26:e1:3a:f7:ee:3e:ff:5c:54:
         7b:47:c7:b7:72:9f:1b:d0:4d:1d:f6:ad:b8:b7:2d:6a:d7:64:
         e5:2c:da:01:88:66:44:92:d5:07:23:b1:28:82:16:c5:49:15:
         21:03:44:ea:3b:06:86:6f:6b:61:2a:e6:e3:b0:37:7d:fa:6e:
         fa:45:fe:5e:f9:be:5b:f4:91:31:bd:35:f7:97:52:b6:e7:56:
         36:e2:83:93:80:24:87:76:4d:ea:39:03:10:e4:fb:e2:5a:cf:
         b0:6b:9e:12:2c:4e:e1:3b:ff:b6:7d:e2:ee:57:51:41:ea:32:
         c6:4f:9f:76:b3:af:25:0f:4e:c4:15:3a:82:12:7e:d2:ae:38:
         ec:62:d1:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 01:06:41 2026 by rpki-client