Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
File:                     ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft (raw, json)
Hash identifier:          nOTH6e3e6gq7b2O20j+X887NRE22SoCaEFXgWdLPILo=
Subject key identifier:   0F:5E:63:11:71:41:32:4B:37:8B:F0:3D:22:2F:3F:E4:BB:ED:27:C7
Authority key identifier: 93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45
Certificate issuer:       /CN=A91CEF3E/serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
Certificate serial:       0F43
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
Manifest number:          0F23
Signing time:             Thu 16 Apr 2026 17:31:03 +0000
Manifest this update:     Thu 16 Apr 2026 17:31:02 +0000
Manifest next update:     Thu 23 Apr 2026 17:31:02 +0000
Files and hashes:         1: ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl (hash: LEpLPSMr3HITT1UeOrXV5m84ogQUud9b4ECq9WgmWv8=)
                          2: 5C154406988911E991B10838C4F9AE02.roa (hash: tQrQ6Cd+gUF5DxrjyCWytmMItl98qXXXMjLohZ6qa3w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl
                          rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 17:31:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3907 (0xf43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CEF3E, serialNumber=932EC2E6E52B5AF6C7B03C415020EDE272AAA145
        Validity
            Not Before: Apr 16 17:31:02 2026 GMT
            Not After : Apr 23 17:31:02 2026 GMT
        Subject: CN=69e11cd7-71ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:36:a0:1d:20:18:7b:78:56:2b:ec:1d:86:
                    72:1d:da:24:1b:b2:9f:fd:4f:e6:ad:18:37:a7:83:
                    8a:93:8c:f2:23:f4:2b:a2:ad:63:e4:45:43:5f:66:
                    e5:f1:49:5d:63:c5:8f:0a:ab:3b:6b:e0:45:e2:31:
                    0a:07:7f:b2:1c:26:76:53:00:4d:9a:e5:03:74:5d:
                    ee:5a:fe:18:73:d2:75:32:92:8f:a0:7c:c1:9e:aa:
                    a3:f2:1f:95:d8:29:cf:de:a9:13:d7:d0:f3:64:fd:
                    35:d2:85:1f:84:a3:63:b1:fe:05:ba:4a:f5:ac:cd:
                    6a:58:26:3b:4c:eb:5b:09:2b:97:97:ea:11:ff:21:
                    c5:1b:39:36:02:47:fe:8b:df:28:6c:75:58:bf:ad:
                    f5:26:9b:49:b0:21:5f:7c:8b:78:f9:81:52:8f:d7:
                    e8:5c:41:d0:38:04:0c:b0:43:04:32:31:e4:31:6a:
                    00:c6:bb:02:c3:04:6c:ed:16:54:0d:91:3c:b2:be:
                    18:3b:ae:c4:2b:18:54:a4:70:ad:25:d2:25:9d:87:
                    80:8d:a6:9b:78:90:fa:68:a4:34:92:36:8a:dd:d5:
                    a8:04:16:42:2f:16:a5:8e:0e:81:f6:08:19:05:42:
                    31:c4:0f:1d:78:8a:c9:5b:68:69:2a:a0:2d:3a:9d:
                    34:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:5E:63:11:71:41:32:4B:37:8B:F0:3D:22:2F:3F:E4:BB:ED:27:C7
            X509v3 Authority Key Identifier:
                keyid:93:2E:C2:E6:E5:2B:5A:F6:C7:B0:3C:41:50:20:ED:E2:72:AA:A1:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ky7C5uUrWvbHsDxBUCDt4nKqoUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CEF3E/CB74CF6E987B11E983ECCF13C4F9AE02/ky7C5uUrWvbHsDxBUCDt4nKqoUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:45:6d:db:8d:93:a9:d9:5e:bf:ec:87:4a:1c:4a:7c:af:2d:
         5e:72:fb:77:47:9b:9c:39:d8:fa:b1:52:f8:56:04:a5:27:c8:
         f8:c9:20:30:b2:13:1b:0d:a6:72:d3:4f:cc:c8:85:9c:9a:e2:
         31:1b:5b:00:9d:f0:32:c3:29:8f:06:37:fd:c7:53:5e:aa:33:
         79:8b:07:ae:34:3c:55:81:f7:d0:e9:4c:d4:65:19:83:90:16:
         7b:29:41:31:3b:d0:41:1d:1b:52:d6:fb:81:9a:3c:c9:e8:17:
         b4:41:f8:ff:fd:b6:71:ee:f9:6f:ee:b5:b3:76:ba:96:c0:96:
         6e:97:2a:be:64:65:51:d6:57:b6:10:e1:13:00:bb:c8:86:01:
         8a:08:ee:ed:9b:63:b8:5e:c6:42:32:e3:8a:a1:df:a9:96:ab:
         92:d7:37:a8:72:0f:77:26:21:64:aa:ea:ec:73:9e:a3:09:d9:
         3c:c6:a4:86:aa:26:1a:91:85:15:fc:94:96:51:d6:95:9e:20:
         a9:b5:78:3b:be:84:a8:ac:45:c2:2b:e3:b0:94:c8:3b:c7:80:
         7f:8b:7e:e4:08:55:e4:fb:f9:9a:1c:e0:cb:e4:30:c4:92:7d:
         bc:24:a5:23:42:b8:5a:40:9c:7e:75:46:17:b2:f3:42:1a:a1:
         db:8e:32:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:31:50 2026 by rpki-client