Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
File:                     pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft (raw, json)
Hash identifier:          QTzaI7EGbneyNk7FM+Ii7TfrcLV4s/k1iFptWdd0AVs=
Subject key identifier:   CB:60:81:76:93:AA:5B:B1:A4:28:F9:DF:4B:52:79:40:BD:7E:7B:DE
Authority key identifier: A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18
Certificate issuer:       /CN=A91D6552/serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
Manifest number:          352B
Signing time:             Thu 16 Apr 2026 14:53:50 +0000
Manifest this update:     Thu 16 Apr 2026 14:53:50 +0000
Manifest next update:     Thu 23 Apr 2026 14:53:50 +0000
Files and hashes:         1: pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl (hash: YjAGFPgH2n1pQxorn76heeYvvlfzH4GFVNMVmGS9rWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl
                          rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:53:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D6552, serialNumber=A56E0433AEB8B0FCC59EFE91F0EAF5061B70D118
        Validity
            Not Before: Apr 16 14:53:50 2026 GMT
            Not After : Apr 23 14:53:50 2026 GMT
        Subject: CN=69e0f7fe-63ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:50:76:be:0d:20:4b:3b:25:ec:9c:e7:1d:ac:
                    14:70:22:8f:df:f0:b2:31:a7:1a:7b:03:37:ad:64:
                    96:ac:54:28:52:2b:43:9c:0d:2d:38:9e:37:9e:77:
                    22:88:30:c0:86:09:0f:89:c9:f8:ab:f0:74:58:03:
                    b9:e7:6b:c6:65:95:8b:c2:2b:19:c8:1c:81:22:75:
                    01:61:dc:ef:0c:22:1d:7f:c5:c1:bc:f6:14:36:4e:
                    dc:1b:05:94:74:8a:83:2f:80:c4:ac:a0:e5:92:24:
                    64:c4:cb:92:5b:6c:3b:16:56:50:ae:06:77:f7:0a:
                    e6:27:90:1f:a4:02:0b:f0:8d:d8:af:f9:a9:14:06:
                    51:1e:42:77:60:41:90:00:14:60:51:a7:ce:60:5a:
                    80:0f:8a:43:a5:ce:45:f3:30:a8:bd:7e:6e:2f:3a:
                    00:73:93:76:b5:5c:99:f4:84:5a:88:0f:bf:52:70:
                    07:54:22:67:c7:7c:91:4a:22:5a:ce:c0:24:b8:5b:
                    06:5f:e2:06:34:fc:53:99:39:e7:4a:3a:41:ed:3a:
                    09:e4:df:37:19:88:c2:8d:b3:0f:53:2b:24:e3:ac:
                    94:de:d1:a3:46:1f:1b:b4:5a:8a:bf:63:06:ad:a8:
                    ef:82:4b:8e:6c:d9:47:e0:62:29:9d:7a:aa:ad:4e:
                    9a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:60:81:76:93:AA:5B:B1:A4:28:F9:DF:4B:52:79:40:BD:7E:7B:DE
            X509v3 Authority Key Identifier:
                keyid:A5:6E:04:33:AE:B8:B0:FC:C5:9E:FE:91:F0:EA:F5:06:1B:70:D1:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D6552/887D75121D9911E2BA5F258608B02CD2/pW4EM664sPzFnv6R8Or1Bhtw0Rg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:5a:c4:ab:12:51:e1:e8:d8:65:4b:d8:98:78:3c:18:0c:31:
         b5:93:19:4e:0d:61:5f:ee:f7:f4:8e:34:05:19:c8:36:b8:9e:
         77:02:ba:4d:cd:82:fa:df:0b:06:80:7c:e8:3e:cb:f6:48:fb:
         4a:bb:e0:f3:1b:3c:47:43:a4:b9:8a:66:c5:1e:4e:cb:ac:73:
         ad:d7:ba:b5:dc:26:2d:77:d0:82:f5:cd:f1:3f:e2:02:eb:29:
         35:14:55:65:77:82:36:aa:a3:e7:62:fb:3f:2d:fe:1c:fa:48:
         23:98:22:56:4e:b7:8f:e3:b5:4f:bf:47:67:5a:35:84:28:8b:
         8f:fa:d6:b8:c6:aa:1d:f8:9a:d2:8f:8c:05:00:25:74:8c:6d:
         d8:22:12:b0:aa:21:8c:64:69:00:c3:a6:92:e9:48:d3:ad:4b:
         ea:f2:f0:5d:3c:1a:2e:2f:d7:41:5f:e9:b3:41:e0:b1:9c:32:
         32:2e:d5:14:56:de:14:52:6e:7b:8e:51:ae:a2:a8:6a:28:35:
         95:07:ad:6b:fc:03:e0:a7:19:d0:63:f9:67:4f:99:26:a5:27:
         12:e3:8a:e4:f1:b4:6b:98:c4:8a:34:fd:f4:16:e9:b7:5d:b6:
         2d:18:2c:a7:22:3b:e8:72:c8:4b:ae:0b:72:5a:1d:27:86:4f:
         2c:e4:44:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:20:26 2026 by rpki-client