Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          AW9W6m/CZ+P//TlKSRVcxyx9Ci560NIxI1zixBpHE0g=
Subject key identifier:   42:12:FC:75:D3:9B:4D:91:71:50:11:B7:41:24:C0:EE:AE:60:37:CC
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          24
Signing time:             Sun 01 Mar 2026 10:18:47 +0000
Manifest this update:     Sun 01 Mar 2026 10:18:47 +0000
Manifest next update:     Sun 08 Mar 2026 10:18:47 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: SWKOsHYO7CK/nVlSr5P/Bj/iLCr2FI+yYRImqyF0FIU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 10:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Mar  1 10:18:47 2026 GMT
            Not After : Mar  8 10:18:47 2026 GMT
        Subject: CN=69a41287-b1f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:0b:de:50:5e:70:c0:3b:75:1d:dc:e8:c2:d6:
                    64:81:46:a6:6c:7c:20:67:ed:39:bb:39:b6:7e:21:
                    ef:57:69:fc:60:6e:0c:9d:93:10:8f:20:6a:41:9e:
                    08:c2:df:16:49:85:35:d3:ee:f9:1e:2d:cc:b3:87:
                    d1:25:b0:23:86:0c:55:96:8d:3d:8a:e1:67:19:ce:
                    ac:e3:bb:d6:94:ac:6b:c0:f2:9c:fa:0b:71:d0:15:
                    57:d5:64:95:94:44:b4:3f:15:05:7d:66:3c:8d:62:
                    40:19:94:a4:f4:4c:e2:0a:8b:a5:e0:d6:27:3e:6f:
                    a1:10:62:fb:d0:24:6a:c1:62:52:b0:0a:26:9c:40:
                    e1:9a:7e:72:4f:3b:40:5f:20:99:33:3f:25:46:a0:
                    87:30:d4:28:1c:97:c0:34:c1:43:dc:c9:ee:61:04:
                    d2:31:d4:36:63:d2:d6:bc:d6:c7:f3:42:bc:bd:bb:
                    2b:15:66:49:89:9a:5f:ef:52:68:a6:8d:00:41:b1:
                    e5:1e:ad:4c:f1:d4:63:35:99:8a:5b:f7:2d:79:49:
                    57:52:32:d9:5b:34:7a:96:d1:8f:f4:04:90:2a:44:
                    4d:de:4e:b4:dd:c4:53:5b:e1:86:27:ea:e4:e4:f6:
                    4b:08:f8:ab:cc:4c:94:b1:7c:b6:d6:39:3a:a2:1a:
                    c6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:12:FC:75:D3:9B:4D:91:71:50:11:B7:41:24:C0:EE:AE:60:37:CC
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:0f:75:dc:6e:dc:e3:73:3c:9c:b5:71:12:39:e2:fe:44:3d:
         a6:8a:37:4c:2d:a1:6b:bc:2a:ab:e6:0a:fe:c6:8b:eb:3c:38:
         13:c6:00:fc:45:cf:8a:c5:f9:4b:89:8f:e9:8f:4a:e4:2a:5c:
         f7:ef:1f:4f:f4:da:fd:70:1a:b1:d9:76:80:2f:6e:41:3e:29:
         77:80:84:89:23:1a:9c:a4:0c:e4:46:bc:ea:b2:96:cf:0a:c2:
         1d:1a:25:6b:ac:92:3b:78:64:9b:f2:3a:85:47:4a:ec:ea:27:
         ed:e7:d4:ee:1e:11:5e:43:b3:3a:84:62:0b:f0:af:01:14:be:
         83:15:0e:4d:94:3d:43:da:93:5c:ef:e2:2f:ea:e4:b9:df:3f:
         80:9c:15:ca:64:11:35:b9:e6:19:03:11:2b:43:e9:99:73:8d:
         ee:86:58:89:eb:f4:61:d5:66:5a:8b:e2:93:b7:0e:3f:7f:eb:
         e5:8a:2e:79:4e:18:c3:84:c1:89:49:c5:6c:b2:a3:19:39:e6:
         b0:1f:86:5c:39:bd:54:3f:f5:03:9d:c3:1d:e7:94:3e:03:94:
         92:91:de:2d:2b:c0:ef:ed:ca:17:9d:2d:e2:f5:bb:0e:b4:bb:
         4a:33:52:ba:30:51:ff:b3:d8:3f:ad:85:ed:6d:d5:df:45:48:
         2e:55:a9:df
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBJDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
RTMzNDExMC8GA1UEBRMoODU4QkJDOTAyQzA3N0Y2RTAzMTNBRURDNDlEQjM2RTZG
RUYyMzRCMjAeFw0yNjAzMDExMDE4NDdaFw0yNjAzMDgxMDE4NDdaMBgxFjAUBgNV
BAMTDTY5YTQxMjg3LWIxZjAwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDTC95QXnDAO3Ud3OjC1mSBRqZsfCBn7Tm7ObZ+Ie9XafxgbgydkxCPIGpBngjC
3xZJhTXT7vkeLcyzh9ElsCOGDFWWjT2K4WcZzqzju9aUrGvA8pz6C3HQFVfVZJWU
RLQ/FQV9ZjyNYkAZlKT0TOIKi6Xg1ic+b6EQYvvQJGrBYlKwCiacQOGafnJPO0Bf
IJkzPyVGoIcw1Cgcl8A0wUPcye5hBNIx1DZj0ta81sfzQry9uysVZkmJml/vUmim
jQBBseUerUzx1GM1mYpb9y15SVdSMtlbNHqW0Y/0BJAqRE3eTrTdxFNb4YYn6uTk
9ksI+KvMTJSxfLbWOTqiGsYxAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUQhL8ddOb
TZFxUBG3QSTA7q5gN8wwHwYDVR0jBBgwFoAUhYu8kCwHf24DE67cSds25v7yNLIw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURFMzM0L0M1MTI2Q0NFRTU3
OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0REU2N2NTZHMyNXY3eU5M
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvaFl1OGtDd0hmMjRERTY3Y1NkczI1djd5TkxJLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MURF
MzM0L0M1MTI2Q0NFRTU3OTExRjA4MzZFRUFBMTQxNkY1NkJDL2hZdThrQ3dIZjI0
REU2N2NTZHMyNXY3eU5MSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBxD3XcbtzjczyctXESOeL+RD2mijdMLaFrvCqr5gr+xovrPDgTxgD8Rc+KxflL
iY/pj0rkKlz37x9P9Nr9cBqx2XaAL25BPil3gISJIxqcpAzkRrzqspbPCsIdGiVr
rJI7eGSb8jqFR0rs6ift59TuHhFeQ7M6hGIL8K8BFL6DFQ5NlD1D2pNc7+Iv6uS5
3z+AnBXKZBE1ueYZAxErQ+mZc43uhliJ6/Rh1WZai+KTtw4/f+vlii55ThjDhMGJ
ScVssqMZOeawH4ZcOb1UP/UDncMd55Q+A5SSkd4tK8Dv7coXnS3i9bsOtLtKM1K6
MFH/s9g/rYXtbdXfRUguVanf
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:59:11 2026 by rpki-client