Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
File:                     kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft (raw, json)
Hash identifier:          sv4zZ1d0cauTIpu+YBcm4l51dul43unL9YLIada0pII=
Subject key identifier:   74:04:CA:1E:57:57:1A:34:CF:1A:C0:65:E0:71:C7:5C:85:CD:15:62
Authority key identifier: 90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23
Certificate issuer:       /CN=A91EC4DD/serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
Certificate serial:       0786
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
Manifest number:          077D
Signing time:             Thu 16 Apr 2026 21:30:20 +0000
Manifest this update:     Thu 16 Apr 2026 21:30:19 +0000
Manifest next update:     Thu 23 Apr 2026 21:30:19 +0000
Files and hashes:         1: kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl (hash: MH7y2+j4mxvDJjNAw78RuEyCHkxAWj8Pgiv7jmubuaM=)
                          2: AFCD8352557E11EBACB5CE3BC4F9AE02.roa (hash: TiUPjLdVglIkEHQL/X4tGGIetQbXseZVHM8jybp8qAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl
                          rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:30:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1926 (0x786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC4DD, serialNumber=90C3D8351726A8B91DE26D46811283435CC52623
        Validity
            Not Before: Apr 16 21:30:19 2026 GMT
            Not After : Apr 23 21:30:19 2026 GMT
        Subject: CN=69e154ec-e630
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:6a:f9:21:13:57:3a:b8:63:f9:23:6e:02:be:
                    96:84:6e:58:98:c4:4e:64:38:2a:c8:24:35:ea:da:
                    c6:42:f2:37:2d:49:93:08:36:fa:14:05:f2:46:1a:
                    0b:61:7d:52:e6:a4:b3:1e:b4:1f:1c:d6:ab:e6:d9:
                    27:44:e5:26:5f:aa:da:f7:a1:b6:71:91:2a:8e:dd:
                    fb:06:e9:20:08:31:9b:0c:6b:fd:05:a7:33:17:d5:
                    9c:21:c3:95:76:f4:a2:e4:cb:43:74:3f:0f:63:7c:
                    89:c7:b2:07:33:a5:25:3d:f3:7f:29:fe:0d:bd:05:
                    09:db:e8:fa:f8:d1:13:f6:ed:73:34:55:f1:d9:ff:
                    28:f6:1c:27:23:12:1b:1f:90:2c:38:13:6e:2c:a9:
                    ca:a3:7d:ed:81:4c:a7:bf:a9:56:2f:1b:68:24:7f:
                    15:96:e6:f6:ef:fb:9b:96:8f:14:9b:2c:d0:60:8f:
                    88:7b:c8:b9:b9:8a:4c:4e:e7:c5:1a:4d:74:ca:33:
                    7a:50:53:14:b1:6c:2e:c4:e0:34:dd:64:1c:f5:51:
                    87:6b:24:9d:75:81:34:28:7b:79:34:21:d7:2c:19:
                    39:45:a1:a1:2a:60:b5:3a:84:ea:6f:9b:72:a1:6d:
                    6b:ed:39:b1:93:c7:2d:c0:c7:2d:5b:c8:d3:6f:87:
                    1c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:04:CA:1E:57:57:1A:34:CF:1A:C0:65:E0:71:C7:5C:85:CD:15:62
            X509v3 Authority Key Identifier:
                keyid:90:C3:D8:35:17:26:A8:B9:1D:E2:6D:46:81:12:83:43:5C:C5:26:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC4DD/B88C224C557D11EBB490B53BC4F9AE02/kMPYNRcmqLkd4m1GgRKDQ1zFJiM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:5d:c5:1a:43:19:94:b2:81:03:1f:b4:55:b7:4a:88:e6:09:
         fb:21:46:fe:c8:88:5f:78:b1:52:47:bd:6d:7d:6c:c6:38:ad:
         86:ce:61:5c:55:68:c4:cd:f4:33:0e:7b:65:e6:23:e9:3d:27:
         cf:30:a6:31:f2:93:b9:b8:75:c2:e8:8e:a6:e0:a1:b7:39:a0:
         5f:a8:93:06:6c:c9:0b:37:0c:7b:05:b1:d0:ef:1e:b7:f9:53:
         3c:ea:b1:0d:32:23:75:e2:f4:83:62:3d:0e:cc:b4:80:62:d8:
         46:30:86:6c:e0:96:6d:5d:9f:91:95:e2:4c:f7:09:fa:a8:ea:
         37:9c:49:0c:62:c2:5c:b6:11:2f:af:d8:dc:a3:e4:97:fb:13:
         c0:f1:0e:30:9a:47:b2:b0:74:d0:18:59:39:38:1f:2f:7a:1f:
         82:8a:8f:da:d8:32:80:26:9f:75:94:93:cc:10:4c:a4:c9:f5:
         0e:04:1f:95:81:5d:bf:79:75:e6:4f:1a:8c:fd:7b:26:29:22:
         8b:de:24:a7:00:f9:70:6d:ee:9b:b2:e0:26:34:20:06:32:cc:
         f0:a9:8d:0b:d3:7f:e7:cd:73:60:48:0a:18:9c:77:25:43:9e:
         c1:85:c0:d7:9a:36:b3:ac:cb:ef:9e:f8:42:f9:d5:ad:b1:5d:
         24:62:cd:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:51:11 2026 by rpki-client