Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft
File:                     S0Nd1JrBEcPde6D08IaF8hZRWFk.mft (raw, json)
Hash identifier:          Rs/i6J+CVmIMCQ+HAXA/g2T+2+lBqzpYE+I7CE8hyTU=
Subject key identifier:   32:D4:7A:4A:BC:D7:31:AA:68:EC:CD:5F:26:ED:92:CC:36:B1:EB:DE
Authority key identifier: 4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59
Certificate issuer:       /CN=A91DC33B/serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859
Certificate serial:       171A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft
Manifest number:          179E
Signing time:             Thu 16 Apr 2026 16:34:29 +0000
Manifest this update:     Thu 16 Apr 2026 16:34:28 +0000
Manifest next update:     Thu 23 Apr 2026 16:34:28 +0000
Files and hashes:         1: S0Nd1JrBEcPde6D08IaF8hZRWFk.crl (hash: UgbLktIhkLdyBBforHqlzVEyP3fuIomovFNNMkt/LZQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl
                          rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:34:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5914 (0x171a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC33B, serialNumber=4B435DD49AC111C3DD7BA0F4F08685F216515859
        Validity
            Not Before: Apr 16 16:34:28 2026 GMT
            Not After : Apr 23 16:34:28 2026 GMT
        Subject: CN=69e10f94-7b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:cd:e6:37:81:fb:dd:fe:a8:84:23:b2:8e:
                    78:9c:75:6d:61:15:b9:84:09:70:4d:f9:2b:64:3e:
                    72:cc:b9:31:32:0d:51:e3:58:bc:3f:f6:bf:41:dc:
                    b9:f2:83:93:cd:a4:3d:36:f6:16:52:a0:95:ea:b7:
                    b7:02:c7:23:4d:48:c3:65:b1:11:49:34:0b:65:34:
                    c2:8b:d0:0c:a1:50:a6:55:d9:3c:30:71:37:b8:2f:
                    fb:36:40:d8:25:df:42:60:2c:a1:a3:87:15:8d:d7:
                    15:96:14:25:18:b5:bc:12:49:cb:2e:6f:3b:98:fc:
                    f0:0f:06:21:88:82:2f:08:64:46:78:c5:3e:81:28:
                    d0:7f:af:f4:01:8e:1a:dc:2c:30:fd:b8:e9:65:4b:
                    80:54:a0:ab:cd:84:07:68:d9:14:ae:04:f7:59:c4:
                    ed:cf:2d:62:40:06:63:26:10:eb:b0:56:d5:de:0a:
                    78:e3:00:f5:d9:cf:f2:ec:fc:c4:cd:6a:8f:be:b6:
                    a4:ee:a6:68:2e:a2:89:da:df:be:0a:50:d7:ee:94:
                    8c:56:e6:10:fa:67:83:17:7d:c2:35:9d:62:f6:d2:
                    31:10:06:d5:aa:75:e5:fd:d7:9a:9d:94:a4:96:4e:
                    0f:1e:ab:21:c2:aa:c8:43:ee:65:dd:3e:4b:01:11:
                    58:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:D4:7A:4A:BC:D7:31:AA:68:EC:CD:5F:26:ED:92:CC:36:B1:EB:DE
            X509v3 Authority Key Identifier:
                keyid:4B:43:5D:D4:9A:C1:11:C3:DD:7B:A0:F4:F0:86:85:F2:16:51:58:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S0Nd1JrBEcPde6D08IaF8hZRWFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC33B/B4C9FE9206F511E89618F42FC4F9AE02/S0Nd1JrBEcPde6D08IaF8hZRWFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:96:5b:88:a1:a3:66:3d:4a:ee:45:c4:8d:cb:6a:47:8f:1a:
         55:0d:c3:f5:49:5c:3a:71:6c:5b:a6:6a:45:2d:8e:b8:07:88:
         da:7e:8e:33:14:a4:f9:25:43:a1:85:1c:0b:b5:8c:f3:3d:9e:
         e8:4e:16:a4:7c:4e:89:2e:c9:11:f7:54:d6:15:f4:71:c8:5d:
         1a:84:8f:5e:00:d1:88:62:93:0b:07:16:60:13:ff:28:09:59:
         e2:25:96:6e:42:ef:12:1a:a4:4f:d1:54:e9:e4:20:08:04:ce:
         52:2b:40:af:c2:35:a4:68:8a:6d:37:b1:e2:c7:1c:7e:f3:31:
         88:a0:b8:34:c7:96:09:66:ec:ea:96:27:9e:fb:b1:0a:ff:67:
         76:76:ef:12:2e:f3:ff:84:b4:7a:24:5b:24:84:2c:2a:7f:6f:
         56:cc:55:1a:6b:c1:53:69:8b:6f:51:21:35:07:75:87:a6:09:
         ff:30:a9:86:5c:0d:e6:df:b7:4a:3b:1a:01:7d:36:19:e2:ce:
         69:83:46:2e:04:c7:7d:19:c0:02:69:93:a0:28:1c:ee:ab:80:
         d4:7e:1e:4f:48:26:35:f0:c2:60:a9:07:77:ee:9c:41:55:30:
         97:8d:b6:89:cf:81:01:4d:73:8e:a2:b5:a3:4b:b9:90:bb:70:
         b1:4d:d3:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:07:06 2026 by rpki-client