Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
File:                     2Y9v2wB__4PhEwj61Voer6g4dM4.mft (raw, json)
Hash identifier:          UJrJj1Wd7ZDC8Kl+JwITlC6nIpANs1ev4t7/kgDgyZQ=
Subject key identifier:   EB:20:70:DC:CF:69:54:0B:D1:32:94:6F:6C:62:1C:59:37:86:25:58
Authority key identifier: D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE
Certificate issuer:       /CN=A91D8601/serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
Manifest number:          31
Signing time:             Sun 19 Apr 2026 08:15:15 +0000
Manifest this update:     Sun 19 Apr 2026 08:15:14 +0000
Manifest next update:     Sun 26 Apr 2026 08:15:14 +0000
Files and hashes:         1: 2Y9v2wB__4PhEwj61Voer6g4dM4.crl (hash: /n8bNCyQ7lNDWHOSHBU+ZDXOGjvPhw9j/4+k8bY7Rpg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl
                          rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8601, serialNumber=D98F6FDB007FFF83E11308FAD55A1EAFA83874CE
        Validity
            Not Before: Apr 19 08:15:14 2026 GMT
            Not After : Apr 26 08:15:14 2026 GMT
        Subject: CN=69e48f13-265f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:7b:a0:e3:a8:87:e0:48:3d:96:3c:de:80:
                    7e:42:cd:41:7b:67:c6:18:3e:03:ab:3a:06:66:d8:
                    0b:d1:5f:cf:fb:ef:83:2e:3c:2c:60:cc:ee:6e:b5:
                    e4:e7:21:e4:d3:cd:c8:a8:62:66:c4:29:8d:ca:3a:
                    3a:d6:85:6b:82:0e:37:46:da:34:c8:6f:73:7e:d1:
                    87:fa:af:19:40:11:5d:17:6f:53:d9:30:a8:dd:03:
                    9d:cc:d2:d1:6a:75:68:d8:7f:f0:f5:4f:eb:9a:ba:
                    77:a5:1b:e8:c2:6a:e2:7c:df:53:b2:17:1e:7b:07:
                    3f:e3:e4:92:a7:40:72:58:e5:53:2a:55:27:00:7d:
                    b4:e7:65:62:60:bb:aa:df:cf:e9:6d:a7:8c:a8:b8:
                    18:2e:00:49:59:18:30:24:16:fc:f7:57:38:40:1d:
                    d8:ce:da:80:3d:54:fa:4f:57:93:f8:b3:16:fc:72:
                    80:c7:0f:2e:4a:79:ea:82:e9:af:2d:04:dc:96:2c:
                    90:33:01:4a:c1:c6:74:ca:4f:7a:7b:db:56:b2:3a:
                    e9:d2:8b:ed:59:15:68:79:c6:01:9a:ce:31:59:f1:
                    fa:41:63:b0:67:7c:f5:01:67:63:47:9d:e3:f5:ae:
                    85:13:6c:ac:13:c9:bc:54:b2:0d:9f:f4:55:79:62:
                    67:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:20:70:DC:CF:69:54:0B:D1:32:94:6F:6C:62:1C:59:37:86:25:58
            X509v3 Authority Key Identifier:
                keyid:D9:8F:6F:DB:00:7F:FF:83:E1:13:08:FA:D5:5A:1E:AF:A8:38:74:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Y9v2wB__4PhEwj61Voer6g4dM4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8601/594B2C3CF6AF11F0896ABC5F436F56BC/2Y9v2wB__4PhEwj61Voer6g4dM4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:50:6d:11:59:3e:f6:ea:6b:9b:4a:08:31:ce:54:9b:1a:ab:
         8d:49:12:a9:3a:bc:82:d5:c7:1d:64:ec:ab:a7:e1:9f:2b:28:
         1d:01:3b:ba:59:f9:5d:b9:d7:c9:fa:3e:e1:d2:65:af:c4:ee:
         9c:43:0c:71:fc:39:b8:5d:08:28:49:ad:d3:7a:d0:a7:7a:94:
         22:a9:74:6b:aa:63:f2:e2:25:7f:e9:71:03:73:84:13:7c:08:
         d9:7e:ff:ef:cc:d1:ef:e9:88:cd:f5:06:80:2e:32:c2:37:0d:
         cc:d0:07:33:d4:68:b2:a2:78:2d:77:08:b0:36:eb:33:a9:5d:
         55:9c:3d:d7:e3:a7:d0:c3:29:b2:15:26:58:b0:fe:3e:e0:fe:
         e6:33:0c:3f:ce:87:f5:c8:5f:82:1e:b6:c0:8e:dc:c9:ec:99:
         41:2e:f3:0a:0f:d2:9e:97:3a:94:e2:76:6c:3d:62:89:38:80:
         85:91:1d:20:15:9a:6d:d1:f4:a8:6f:c6:cb:be:5c:d5:f4:55:
         74:4c:ad:3e:22:24:7e:8f:9b:28:e2:b8:75:be:bf:65:88:b1:
         a4:89:c7:1b:c3:24:91:cc:67:bf:87:8c:f5:a2:f0:9c:50:8a:
         79:cd:69:4e:d9:62:f8:cd:57:fc:7e:0c:49:91:05:68:52:82:
         ea:7c:75:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:14:25 2026 by rpki-client