Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
File:                     72Nt-xWS8CIgFrAPrKJwNXP00oI.mft (raw, json)
Hash identifier:          jZlk5SQzbwe3DCrttMCWfeV06fRA1blbetMyzmyv7vE=
Subject key identifier:   23:5D:3A:16:1C:FC:61:25:4B:87:AB:EB:9E:61:E4:36:D5:E8:80:01
Authority key identifier: EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82
Certificate issuer:       /CN=A91DC8BD/serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
Certificate serial:       01F5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
Manifest number:          01F5
Signing time:             Fri 17 Apr 2026 02:58:48 +0000
Manifest this update:     Fri 17 Apr 2026 02:58:48 +0000
Manifest next update:     Fri 24 Apr 2026 02:58:48 +0000
Files and hashes:         1: 72Nt-xWS8CIgFrAPrKJwNXP00oI.crl (hash: Sz9VVMhtL9qcyZJDhmUQu/7mYtFS5Jq7S6jSX2UEGSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:58:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 501 (0x1f5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8BD, serialNumber=EF636DFB1592F0222016B00FACA2703573F4D282
        Validity
            Not Before: Apr 17 02:58:48 2026 GMT
            Not After : Apr 24 02:58:48 2026 GMT
        Subject: CN=69e1a1e8-413e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:ae:fb:4e:56:55:d4:38:30:05:ce:27:3f:e6:
                    72:89:53:83:33:ec:df:7d:28:e5:fc:da:12:68:13:
                    ce:3c:5d:5a:da:88:d5:29:c0:47:bb:5c:74:cc:2b:
                    41:8b:ed:3b:22:81:f6:cb:6f:aa:87:a0:34:05:32:
                    b7:c2:78:75:17:a6:15:f8:5c:01:0e:9f:04:2a:a1:
                    99:ac:a0:ec:c0:64:0d:68:f4:7e:6f:ec:b0:b7:db:
                    15:a3:3a:de:3d:a5:2a:e4:2d:67:4e:81:17:07:f7:
                    e4:e2:97:fb:fa:b0:04:63:03:f3:bb:72:77:b4:a9:
                    6b:f6:36:53:29:81:ea:01:21:98:41:8c:04:a2:8b:
                    2c:44:d4:74:e1:1b:54:c5:84:2d:12:a0:a6:3f:8f:
                    b6:fb:9d:b4:47:3f:ed:d6:13:4c:5d:1f:38:71:09:
                    1b:79:65:8a:df:ad:04:26:9c:1c:9d:07:5a:a8:9a:
                    fd:c9:9f:01:ac:41:56:e8:9d:c5:84:3e:60:ea:5c:
                    14:0e:95:1f:4b:da:a7:bc:28:55:38:68:42:f3:1e:
                    0f:56:b4:2f:a9:c2:a0:48:01:a9:98:2a:1a:0b:5c:
                    55:24:ec:d1:cf:ce:c9:1a:20:aa:ef:7b:88:fb:4d:
                    f2:4e:c6:db:9d:58:1b:c8:c5:fb:f3:f0:0e:19:6c:
                    b8:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:5D:3A:16:1C:FC:61:25:4B:87:AB:EB:9E:61:E4:36:D5:E8:80:01
            X509v3 Authority Key Identifier:
                keyid:EF:63:6D:FB:15:92:F0:22:20:16:B0:0F:AC:A2:70:35:73:F4:D2:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72Nt-xWS8CIgFrAPrKJwNXP00oI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8BD/119CC22040FD11EEA6AD2935C4F9AE02/72Nt-xWS8CIgFrAPrKJwNXP00oI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:56:3b:32:ad:de:bf:63:71:92:45:ff:43:73:f5:69:5d:1d:
         4c:e4:0c:a6:d3:37:0e:5e:cd:93:fe:8b:29:20:ba:15:bc:df:
         b8:bc:c6:d7:c5:76:53:4b:dc:7a:a5:9c:47:55:2d:47:78:45:
         c4:6a:0c:89:b3:e7:bd:24:9f:4c:34:4a:11:f5:99:cd:69:b0:
         ae:90:0a:a1:3c:2f:09:93:bc:19:e4:2c:5f:62:67:f7:86:0b:
         dc:1c:44:37:56:12:63:b7:95:52:73:65:20:4d:95:0b:0d:d5:
         53:b3:7e:22:f1:39:0f:01:24:3a:c4:5a:95:9a:bf:13:a5:f4:
         17:bb:b3:5c:2f:bb:ee:24:b9:c0:ba:e9:f0:c5:47:5c:33:cb:
         d8:5a:ed:c5:f7:fe:d4:7e:73:57:5b:7d:45:8d:dd:71:05:ca:
         de:09:a0:bd:91:bb:b4:ce:a9:73:cb:3f:3b:61:49:ce:27:1d:
         2d:75:04:09:9d:ab:6e:7d:5e:0f:be:12:a0:e1:b5:17:ee:ab:
         da:a7:c0:59:d8:67:69:62:12:26:9b:97:69:39:63:65:4b:21:
         2f:71:dc:47:01:18:14:18:1f:3e:8f:06:15:e3:6c:91:5a:43:
         f5:20:53:a3:29:69:65:c9:5b:5f:2b:a8:4a:d3:76:18:50:36:
         2e:4e:73:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:27:00 2026 by rpki-client