Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
File:                     EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft (raw, json)
Hash identifier:          4x/Dk3OXWL0rqtMTeRHV8JpJ+8FqsgzHKkChiRTWpxQ=
Subject key identifier:   63:BB:8A:0C:44:F8:4A:F4:4C:C8:4F:19:66:34:21:73:A8:8D:67:0E
Authority key identifier: 11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83
Certificate issuer:       /CN=A91E9888/serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
Certificate serial:       0D27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
Manifest number:          0D13
Signing time:             Thu 16 Apr 2026 18:03:24 +0000
Manifest this update:     Thu 16 Apr 2026 18:03:24 +0000
Manifest next update:     Thu 23 Apr 2026 18:03:24 +0000
Files and hashes:         1: EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl (hash: Fm0havwkMom8ar0ZPqMtmIqmvDvjNR5jeuPNyF8pZt0=)
                          2: E8E88010F2C811EA914D710EC4F9AE02.roa (hash: 7GgDsm4qfz7L4govKwRdOloWJBuVphbOH50u4jZ9bk4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl
                          rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:03:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3367 (0xd27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9888, serialNumber=11F5A7073AC21AFF5CC4D3BBBD658DEA3932CB83
        Validity
            Not Before: Apr 16 18:03:24 2026 GMT
            Not After : Apr 23 18:03:24 2026 GMT
        Subject: CN=69e1246c-66b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:9d:4d:9d:50:07:74:3e:6a:18:f2:92:cb:93:
                    77:39:13:5a:1e:8f:94:f3:22:d5:d7:6a:a7:a5:70:
                    75:fd:a3:19:0a:30:77:ea:e1:22:4a:ea:91:3b:bb:
                    8c:5e:aa:9e:8a:64:e0:8a:dd:c8:6b:38:bb:42:eb:
                    1a:98:95:64:c8:71:46:2d:54:07:74:9e:2a:cb:36:
                    d4:8e:c8:5c:5a:45:c6:c1:c8:46:85:03:68:33:b5:
                    b2:35:79:96:63:5c:34:ad:b7:68:99:2e:b9:14:4e:
                    6b:31:41:2b:6d:f8:7b:3e:18:79:84:b7:79:a2:2d:
                    42:81:00:48:b9:ea:cc:99:6c:fd:f0:c6:ab:79:5b:
                    8c:47:8a:77:4a:f0:3a:df:55:5d:80:98:e0:86:b0:
                    b9:d0:e6:ac:52:4d:d7:db:6a:1e:6b:53:54:a3:a5:
                    2b:91:39:18:85:66:e6:cb:af:1e:c9:ed:06:c9:16:
                    f1:60:f6:65:3a:3f:78:8a:03:b3:a9:69:b1:ef:d8:
                    4d:b5:05:f2:6b:20:68:c3:09:35:95:42:bc:91:5b:
                    06:8b:7e:ba:02:89:d5:7e:9a:1a:f5:ab:df:a2:d0:
                    ad:4e:05:0a:a9:e6:6a:4d:d4:a0:d8:40:25:5a:15:
                    c8:6e:9f:b7:5f:19:aa:df:ec:3d:a5:88:07:a3:96:
                    b3:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BB:8A:0C:44:F8:4A:F4:4C:C8:4F:19:66:34:21:73:A8:8D:67:0E
            X509v3 Authority Key Identifier:
                keyid:11:F5:A7:07:3A:C2:1A:FF:5C:C4:D3:BB:BD:65:8D:EA:39:32:CB:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EfWnBzrCGv9cxNO7vWWN6jkyy4M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9888/6F54D10EFFF311E9879B1479C4F9AE02/EfWnBzrCGv9cxNO7vWWN6jkyy4M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:2c:32:b4:e6:1f:3c:3a:53:86:b9:22:39:c2:5d:db:ca:cc:
         fe:d7:20:c2:a4:02:71:87:9d:a5:3d:ae:2d:8a:a4:d7:d2:66:
         59:fa:6a:9f:0f:a1:4f:36:db:d0:70:bf:9a:14:af:f1:58:77:
         24:30:7d:c4:e8:25:39:20:69:7f:63:a8:dd:ab:62:f3:34:75:
         45:40:54:9b:66:2e:eb:ef:e2:dc:12:9d:0c:18:5e:ed:fe:e9:
         91:2e:dd:52:ce:b9:b0:e7:7f:8a:3c:b3:a6:61:19:8d:ed:4c:
         be:b6:c6:0d:67:41:db:3e:ec:55:c2:f9:e2:b6:f9:d8:0b:55:
         3d:08:c7:e5:32:7b:83:c8:f7:28:1d:14:db:8a:42:20:90:44:
         0d:6e:dc:01:0b:94:31:47:e7:f7:34:9c:27:37:a0:4f:60:62:
         90:01:38:5f:bc:74:56:a4:42:8f:94:8a:61:70:04:d4:cb:a9:
         6f:94:80:05:1f:74:94:04:c1:5d:28:f2:80:d3:c5:7f:4f:ba:
         12:91:5d:68:44:f2:2c:d8:9d:db:32:f5:4d:31:a6:c0:af:6a:
         04:1d:98:26:02:53:05:3d:93:f7:80:6e:ed:5f:9f:0d:71:b6:
         bd:fe:b3:3b:30:8d:c2:cb:1c:43:9b:5d:2a:17:c2:92:7c:69:
         ad:53:8f:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:38:08 2026 by rpki-client