Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
File:                     1bm7ozBeiMAA9WKTnROLpQYieyo.mft (raw, json)
Hash identifier:          Zo3erffkYMgLcLZfktGiGwa08zr5RTnzi9IudHSR8jw=
Subject key identifier:   36:E5:B8:FB:92:F5:07:20:73:E7:8D:8F:C6:A2:5A:F4:9D:A5:26:0B
Authority key identifier: D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A
Certificate issuer:       /CN=A91EAF4B/serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
Certificate serial:       0BB1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
Manifest number:          0D3A
Signing time:             Thu 16 Apr 2026 19:00:25 +0000
Manifest this update:     Thu 16 Apr 2026 19:00:24 +0000
Manifest next update:     Thu 23 Apr 2026 19:00:24 +0000
Files and hashes:         1: 1bm7ozBeiMAA9WKTnROLpQYieyo.crl (hash: 0+Mu2mc0qx07uPsKVxoEqjx4QtzivU1FiNTrcPV54Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 19:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2993 (0xbb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=D5B9BBA3305E88C000F562939D138BA506227B2A
        Validity
            Not Before: Apr 16 19:00:24 2026 GMT
            Not After : Apr 23 19:00:24 2026 GMT
        Subject: CN=69e131c9-15b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:71:6f:be:82:07:35:8a:52:fe:a9:44:e3:df:
                    58:06:fc:8a:68:76:71:44:35:87:e3:7f:3e:7c:59:
                    78:7f:e2:17:63:79:05:67:ab:bc:6f:32:31:62:dd:
                    81:8f:eb:fe:f0:ca:f1:5b:36:86:25:87:9a:b2:64:
                    e5:43:a5:ec:71:85:f2:b5:e2:ce:da:87:35:d2:46:
                    01:07:92:8f:dc:e7:af:4a:bc:41:4e:a0:18:32:54:
                    8c:ee:87:cd:49:07:ca:80:a2:55:cb:bb:5c:ae:62:
                    72:27:40:bc:05:fb:a9:29:ab:00:e3:2e:47:36:75:
                    69:30:16:17:01:d7:84:41:22:03:26:97:c2:34:2e:
                    c3:de:01:23:16:61:e0:8b:f7:1d:4c:6c:9e:f3:9b:
                    99:4d:7e:a4:d0:e9:f9:b0:68:08:2d:7d:a5:db:9a:
                    7a:77:b3:7e:d0:ff:19:3a:8c:20:07:60:e0:e9:d0:
                    55:0b:d4:6a:d3:0e:e6:c5:aa:7d:2d:6e:21:e5:46:
                    47:a0:b2:df:4e:43:9f:df:f4:f6:b0:df:2c:bf:5d:
                    e9:96:8b:32:af:ca:26:4f:72:9f:13:ed:c0:f9:7b:
                    d3:ac:6d:de:af:0d:2e:bc:4f:48:4e:63:3c:8b:b1:
                    63:b7:05:80:c8:2e:0a:58:bd:1f:23:e5:3b:f7:4c:
                    9b:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E5:B8:FB:92:F5:07:20:73:E7:8D:8F:C6:A2:5A:F4:9D:A5:26:0B
            X509v3 Authority Key Identifier:
                keyid:D5:B9:BB:A3:30:5E:88:C0:00:F5:62:93:9D:13:8B:A5:06:22:7B:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1bm7ozBeiMAA9WKTnROLpQYieyo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/1bm7ozBeiMAA9WKTnROLpQYieyo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4f:7d:74:df:0b:4e:6b:51:58:bd:d8:23:e0:9f:27:c4:89:dd:
         20:56:1f:b6:ab:65:78:80:00:ee:5d:03:b6:c4:13:88:09:55:
         b6:17:ff:95:92:62:10:37:95:6b:29:2a:8e:c5:f8:5c:27:f6:
         8f:96:85:d8:ae:55:10:33:4b:4f:b7:f9:c5:b9:16:1b:b1:2c:
         1e:df:20:ba:49:dd:4a:d2:ea:b6:c0:db:ad:e0:b5:5d:b2:b6:
         2a:9d:15:75:7a:6e:34:fe:d1:9b:86:b1:90:ca:5c:c1:47:5d:
         87:91:f6:c6:43:22:6d:e5:24:38:7b:ac:9b:c3:a8:4b:4b:93:
         bf:95:a9:00:52:03:d4:c5:88:f5:dd:3e:05:dc:de:af:49:e1:
         fd:36:a8:87:6f:88:65:39:70:1f:9b:6a:8a:10:4d:cc:80:b7:
         c5:dc:b9:2c:33:22:de:fb:90:cd:28:29:4d:b6:9c:bb:40:96:
         50:83:01:a1:f6:f7:c3:66:87:8c:d0:1b:41:77:ae:18:5d:13:
         a5:ce:23:f8:0b:1b:4f:d5:43:23:81:0a:f3:9f:55:2d:80:73:
         3f:4a:39:70:35:ef:c4:3f:76:b8:82:81:8d:a5:11:ce:e9:24:
         0e:8d:85:9c:bd:03:6b:68:0e:28:a3:c8:19:dc:74:c8:a6:d3:
         5b:7f:2b:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:25 2026 by rpki-client