Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
File:                     daduw5hFLfosNmmexaR2zMWB3lc.mft (raw, json)
Hash identifier:          MGS3twDcK5guokFpLLW7wVaVQ0iDda4eGplA2G56lIc=
Subject key identifier:   57:10:4D:28:B5:5F:E8:D1:4A:16:97:F2:38:A7:C4:3C:D0:84:82:4F
Authority key identifier: 75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57
Certificate issuer:       /CN=A91D62C9/serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
Certificate serial:       1B02
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
Manifest number:          1B02
Signing time:             Thu 16 Apr 2026 16:13:55 +0000
Manifest this update:     Thu 16 Apr 2026 16:13:54 +0000
Manifest next update:     Thu 23 Apr 2026 16:13:54 +0000
Files and hashes:         1: daduw5hFLfosNmmexaR2zMWB3lc.crl (hash: 7/Uljt/Q6gNylPocdkmiS+80xnC2Q5AwmzCV30QsyIY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl
                          rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:13:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6914 (0x1b02)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D62C9, serialNumber=75A76EC398452DFA2C36699EC5A476CCC581DE57
        Validity
            Not Before: Apr 16 16:13:54 2026 GMT
            Not After : Apr 23 16:13:54 2026 GMT
        Subject: CN=69e10ac3-6a07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ab:6b:7b:88:65:44:d3:f1:7f:81:a4:c9:05:
                    0e:fe:0d:47:a9:c2:61:b5:49:b0:c3:4e:60:23:7e:
                    db:d5:91:cf:ed:4e:d5:d1:c6:94:e1:1f:ed:a7:a3:
                    e8:18:5c:3f:18:ef:a9:3d:20:23:e9:06:55:18:6c:
                    ba:22:b1:c7:c3:46:50:0c:19:87:26:62:2a:d3:70:
                    d3:50:7f:67:0f:a6:f8:6d:a3:f6:bd:7b:e4:00:f5:
                    13:02:04:da:8d:97:e5:12:c8:1f:c6:ec:f5:ed:a6:
                    32:e7:ad:35:50:1c:4e:a7:15:6b:73:e5:29:67:61:
                    07:46:5d:75:8a:10:80:5f:e2:a7:d7:72:8c:ef:24:
                    22:d4:65:ea:cc:a1:5e:f0:36:09:b6:a4:ff:95:ac:
                    1e:7b:e9:40:62:0f:52:38:48:f4:2c:c4:71:b4:3a:
                    c2:a9:10:5d:7f:68:bf:c5:c1:a8:84:c3:60:f3:b5:
                    74:a5:82:4d:c7:a4:f8:c6:97:77:c0:1a:08:fc:43:
                    e9:a8:eb:94:13:32:76:c9:ae:9d:28:d3:2a:1b:15:
                    08:cf:71:db:11:50:33:ed:5d:cc:82:c0:5d:7c:ee:
                    d7:e5:9e:bd:9f:69:4a:7c:9a:a7:dc:25:fc:2f:de:
                    79:04:6c:a8:92:d2:75:2e:b7:10:17:19:94:37:6d:
                    c9:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:10:4D:28:B5:5F:E8:D1:4A:16:97:F2:38:A7:C4:3C:D0:84:82:4F
            X509v3 Authority Key Identifier:
                keyid:75:A7:6E:C3:98:45:2D:FA:2C:36:69:9E:C5:A4:76:CC:C5:81:DE:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/daduw5hFLfosNmmexaR2zMWB3lc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D62C9/6FB0008E3E7F11E7948AF73AC4F9AE02/daduw5hFLfosNmmexaR2zMWB3lc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:69:b7:df:03:7e:ee:b2:77:c7:0a:29:c3:0f:0c:db:06:4a:
         a7:37:14:1f:d2:4a:07:01:49:dd:22:be:42:61:a0:43:dd:91:
         8c:ab:17:69:df:01:60:a9:1c:d9:44:66:05:44:5f:d2:56:05:
         10:15:42:b5:2b:f8:3d:9b:0f:14:a7:5c:e1:c1:b6:45:cc:ba:
         cd:cf:84:75:e5:2d:3b:65:c0:35:9f:bf:27:4f:4c:c2:54:fe:
         75:73:24:93:87:90:94:3c:c9:5e:87:2d:bf:2e:54:f3:75:18:
         d5:04:4f:3f:e4:d5:b8:24:19:41:d7:b0:d9:9f:b7:2b:9c:ec:
         3c:ef:de:8f:be:cd:f5:0f:b7:de:94:ba:8f:93:ac:83:7d:30:
         fa:ef:2c:24:c2:b1:7e:1c:b9:c5:d7:31:3c:fd:5d:bf:52:d8:
         a3:66:04:00:83:95:7f:22:ed:87:e6:38:c3:ad:b4:65:a0:96:
         27:39:3d:b7:2a:5b:3e:6b:5d:dc:71:c4:d0:55:25:56:8d:f5:
         a3:d9:51:20:dc:34:3a:a4:d2:27:5a:e9:e4:c7:e9:48:21:33:
         d6:08:e4:1f:24:9f:65:01:9f:df:fa:b0:3e:1e:bb:6b:d3:a2:
         b4:d9:02:08:f1:2c:2b:97:73:56:a8:c2:0c:7b:d1:58:b7:27:
         af:65:ed:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:06:58 2026 by rpki-client