Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
File:                     iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json)
Hash identifier:          mcGnYokVRaJkWouH3fQ3jOdIbCBVXwXJfR4r0qG0h+U=
Subject key identifier:   A7:DD:3B:D8:A7:71:E5:FE:08:CE:6E:D1:57:05:3B:C1:0F:49:15:53
Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Certificate issuer:       /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Certificate serial:       73
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
Manifest number:          73
Signing time:             Fri 17 Apr 2026 07:31:37 +0000
Manifest this update:     Fri 17 Apr 2026 07:31:36 +0000
Manifest next update:     Fri 24 Apr 2026 07:31:36 +0000
Files and hashes:         1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: OldKizWBV9PaeUs3XpOT5kCWH1T3ACSNXZkRIXjT+2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:31:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
        Validity
            Not Before: Apr 17 07:31:36 2026 GMT
            Not After : Apr 24 07:31:36 2026 GMT
        Subject: CN=69e1e1d8-443f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:7e:06:2f:3e:ed:e5:62:64:b9:63:a1:dd:7b:
                    8f:19:1a:7a:99:8f:fd:5c:e6:da:0e:a1:99:0e:03:
                    eb:f8:24:7f:25:f8:5a:f9:2d:4e:45:38:da:0a:ff:
                    b5:98:84:af:3f:a4:2c:1f:3e:6c:d6:f8:cc:f3:37:
                    90:9a:ad:e8:09:7f:dc:e4:cb:33:60:72:a5:a6:5b:
                    22:1d:df:ee:8f:b8:e7:4e:8a:6e:77:c3:1f:fc:15:
                    34:33:cd:9c:16:38:ce:a8:49:bc:71:a3:c8:f6:bb:
                    b8:57:f2:85:9f:33:0c:de:9b:15:5d:f7:e0:1a:08:
                    b4:b3:b9:5b:3e:ca:c1:1d:1c:0b:d8:7c:a2:6b:80:
                    34:3a:ff:76:f6:5b:97:fc:d9:52:55:97:04:56:c4:
                    06:08:51:2a:0e:ba:1c:cd:ad:45:d0:7a:e7:6c:05:
                    75:02:d3:52:ad:6d:f5:0d:8c:e3:f2:a1:6f:40:35:
                    9c:65:9f:9c:e8:1c:53:7d:c7:dd:fa:55:33:de:00:
                    0e:a2:c0:40:e3:b5:15:3f:b8:fa:b1:0d:2d:28:0b:
                    01:b3:35:ab:7a:36:cd:44:0c:a5:34:32:c1:e0:72:
                    e5:01:a1:06:20:ba:34:7e:8a:95:61:d0:df:c0:c8:
                    ae:9a:83:04:13:a9:21:a8:05:e3:2e:6e:9b:3f:e4:
                    25:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DD:3B:D8:A7:71:E5:FE:08:CE:6E:D1:57:05:3B:C1:0F:49:15:53
            X509v3 Authority Key Identifier:
                keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:6e:1c:3f:11:5a:7c:c4:7e:35:4c:dc:0b:ff:d0:8b:08:a3:
         f9:23:e7:a9:17:5b:f7:16:6b:dd:ca:e6:84:c3:9b:23:47:96:
         a5:c0:02:f4:87:62:76:08:4b:63:89:cf:90:ce:a0:4b:52:fe:
         84:7b:ed:35:0c:07:ad:83:26:23:ee:ca:ba:b1:64:03:85:42:
         9e:d7:b6:27:72:6e:f3:0f:dd:33:0d:7b:ef:22:7a:c9:ac:e4:
         b3:7e:4f:cf:3b:8b:c2:4d:e4:3c:38:e4:07:90:c3:76:09:0a:
         69:36:c9:fe:67:1f:2f:80:f7:c7:92:be:9b:1f:d7:1d:ec:e6:
         fe:13:a4:6b:da:10:0d:7d:46:c0:71:b4:61:4f:d1:30:ac:ea:
         e6:86:96:57:14:c7:8b:38:0b:c4:58:a0:cc:51:44:e9:c8:c6:
         8e:23:f8:af:38:30:d7:8d:66:08:5d:50:c7:3b:7d:df:ab:6d:
         9c:98:eb:51:88:b6:ce:e1:c5:62:a0:17:35:38:b1:88:a1:39:
         0a:ca:89:b7:b2:56:ee:3d:67:5a:15:d0:ab:98:c9:5c:e5:97:
         11:d6:12:dc:2b:ce:33:5c:55:0c:9c:c2:89:e6:40:7b:01:41:
         0f:51:87:75:21:9c:29:6b:ef:42:13:1e:1a:1d:1c:c1:b2:7a:
         f7:50:94:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 03:11:01 2026 by rpki-client