Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
File:                     E5kSHmqxW_iSv4n71dqfNIaDl_g.mft (raw, json)
Hash identifier:          cQD2ck4jfKvgsIB4Q+LJaiLuqRCN1vFq0THvumwBP14=
Subject key identifier:   2E:70:19:AD:F4:E2:A4:DF:AC:BE:94:D8:41:B7:EF:0D:03:7E:F5:40
Authority key identifier: 13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8
Certificate issuer:       /CN=A91DA736/serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8
Certificate serial:       84
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
Manifest number:          84
Signing time:             Fri 17 Apr 2026 07:21:45 +0000
Manifest this update:     Fri 17 Apr 2026 07:21:45 +0000
Manifest next update:     Fri 24 Apr 2026 07:21:45 +0000
Files and hashes:         1: E5kSHmqxW_iSv4n71dqfNIaDl_g.crl (hash: E1ZBqyA8HqCW3wRQrA5TZMqT2e1Q5cGLHsH78Mfzmkc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl
                          rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:21:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 132 (0x84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA736, serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8
        Validity
            Not Before: Apr 17 07:21:45 2026 GMT
            Not After : Apr 24 07:21:45 2026 GMT
        Subject: CN=69e1df89-e92b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:44:db:c6:2f:03:8e:f0:cb:8f:62:34:6d:56:
                    91:63:8a:58:61:eb:8d:56:e8:63:ec:d7:4e:84:c6:
                    21:82:dc:c2:96:36:52:66:dd:5a:ef:07:16:99:02:
                    96:d0:63:ba:4e:cd:9b:bc:70:67:6d:67:44:d4:0f:
                    71:61:69:a2:a2:53:4b:f6:27:a7:44:94:70:93:28:
                    a7:93:fd:91:6c:aa:a2:57:7a:b1:ea:a1:3c:3b:32:
                    94:d6:71:2b:d9:fa:7b:be:30:17:eb:3b:b5:35:c0:
                    dd:7d:8e:18:82:41:09:58:fb:46:1f:1d:df:95:c5:
                    52:9b:2c:eb:08:f0:b9:a2:94:a9:06:83:5b:88:b1:
                    29:68:7f:a2:17:49:c3:34:d8:d9:40:e2:40:dd:f9:
                    00:35:d7:43:2f:c6:33:65:4a:a3:6f:b1:5e:64:34:
                    b6:54:26:6f:0e:d1:f0:3e:ba:f0:28:e0:2b:a7:eb:
                    69:1a:f5:d3:a7:ff:cb:e8:d9:97:08:6a:85:6f:11:
                    97:e3:36:dd:91:f7:99:6f:ba:48:21:ee:eb:65:e2:
                    54:00:f7:07:4b:d8:57:18:4d:3e:03:75:3e:38:65:
                    64:fd:58:6a:b8:b2:0f:ac:2b:3d:02:90:b3:d2:75:
                    d8:bb:3e:c1:2d:59:18:30:d8:65:8b:4a:17:03:0c:
                    f9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:70:19:AD:F4:E2:A4:DF:AC:BE:94:D8:41:B7:EF:0D:03:7E:F5:40
            X509v3 Authority Key Identifier:
                keyid:13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:fa:7c:3c:ce:07:a5:23:71:1b:72:7c:49:38:29:0c:a4:d9:
         ca:a7:bc:89:d7:43:b8:7a:06:68:db:f2:b2:42:bc:34:a3:8e:
         a3:04:c0:c3:c1:bf:72:1f:d4:36:73:f6:0f:18:1d:22:3b:65:
         65:7d:ae:e7:9f:bd:59:65:38:cf:5e:93:4b:d7:17:3f:7d:2d:
         d2:32:2a:62:3d:fa:0c:30:bf:1d:55:3d:fb:36:0d:73:ad:42:
         b3:99:68:81:6b:30:c5:c1:1b:c8:c4:16:c5:bf:db:45:07:a6:
         6c:74:d0:ce:c3:c2:2a:f7:db:5d:9c:84:88:ea:aa:e4:e4:ed:
         a3:b1:61:f1:57:eb:1f:8c:0d:f5:fe:55:90:07:f0:f6:8a:3d:
         3b:4e:68:ac:e3:5c:9f:70:28:66:75:28:04:70:e2:7b:5f:e7:
         57:a4:c2:39:61:5f:85:81:76:e4:01:a0:ed:3f:17:b8:93:19:
         9d:1d:da:ce:4b:69:cf:6c:6b:5c:85:5e:30:cd:07:75:a0:ab:
         79:aa:0d:4e:bc:57:69:9c:36:0f:cd:ab:10:88:49:11:67:b7:
         f5:95:83:ae:35:1f:12:c5:47:59:74:b7:b4:e1:ba:a5:b8:ef:
         d6:29:83:65:25:29:43:24:de:e7:37:0a:6d:3b:91:92:76:9b:
         fa:1d:b1:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:48:50 2026 by rpki-client