Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          lhBASc3nh83CK6NgJYInw2piZumFfDUHwEjezudHAj0=
Subject key identifier:   84:DB:22:C1:45:74:08:56:3C:29:B8:AA:1C:30:1D:8B:FE:C4:4A:B5
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       02DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          02DA
Signing time:             Fri 17 Apr 2026 01:14:19 +0000
Manifest this update:     Fri 17 Apr 2026 01:14:19 +0000
Manifest next update:     Fri 24 Apr 2026 01:14:19 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: 8Fm3E/Sx5NxgASYJ1zgBYOtHzMtXlB0Ai7VWb4kznqk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:14:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 731 (0x2db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: Apr 17 01:14:19 2026 GMT
            Not After : Apr 24 01:14:19 2026 GMT
        Subject: CN=69e1896b-6ae0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a9:8c:e5:21:2a:6e:b0:14:11:d8:29:ca:d4:
                    3a:d8:98:77:23:66:36:eb:2f:36:78:62:58:e9:a9:
                    80:e9:f4:ad:61:c3:41:7b:9f:7d:5c:0b:62:42:af:
                    1a:2e:c5:1c:ba:44:9c:9d:a2:83:a3:b6:fa:31:e9:
                    7a:00:68:42:ef:ab:fb:e6:cc:09:a3:cc:e1:09:9d:
                    97:db:1e:81:ec:97:61:02:ec:77:9a:90:d7:0e:28:
                    23:c6:62:f1:f5:a5:66:a9:25:bf:2b:53:c7:a9:1a:
                    9a:46:e6:95:8a:ca:4d:8a:e8:0a:aa:32:c4:1e:8b:
                    06:b7:2f:ef:61:e8:69:16:ea:3e:32:93:70:6e:c4:
                    49:a6:d2:ec:70:06:53:4f:6d:a4:49:3a:11:bf:f7:
                    bf:5d:e6:77:d3:ca:7e:67:b3:e5:bd:15:c7:57:1a:
                    a3:3e:50:99:23:2d:ae:8b:86:4c:c0:13:e5:3b:6c:
                    46:f3:51:eb:20:78:0d:7d:62:cc:1b:26:9c:02:0f:
                    71:b7:e6:dc:6c:a3:26:5c:f9:a1:6a:34:e7:4f:3d:
                    5a:51:4b:d0:72:89:65:4c:22:53:eb:27:75:e0:c6:
                    f4:31:55:1c:58:a2:9b:8e:0c:05:55:cb:8c:60:c4:
                    b1:be:8d:f0:ab:64:f4:95:66:ae:67:45:10:84:17:
                    5d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:DB:22:C1:45:74:08:56:3C:29:B8:AA:1C:30:1D:8B:FE:C4:4A:B5
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c7:c1:cb:b1:08:36:51:82:b4:98:4c:81:51:05:7a:02:d0:9d:
         73:c1:52:5d:d1:26:a1:83:0e:3a:04:24:4c:94:63:81:02:24:
         cc:35:07:e5:8d:9f:f5:14:28:c6:17:a9:14:16:ea:10:d4:00:
         65:6a:df:f0:66:11:fc:80:6b:68:e8:89:9b:5c:35:02:cb:b7:
         fd:e5:be:65:25:d9:3a:49:8d:7d:b0:10:7a:0e:7e:97:8c:ec:
         fd:b4:b7:b6:07:1d:10:91:1c:74:23:d1:a8:e5:b0:da:d3:4f:
         fb:d4:e1:b6:3f:93:d1:d4:8d:c5:a1:c3:6b:64:d4:e9:f8:7c:
         4e:b5:7a:ba:df:79:6b:07:74:ca:f1:56:5d:eb:d5:61:12:f8:
         d1:ec:e2:b0:43:e2:ae:2d:d8:e5:73:33:8c:86:ee:7e:fa:ef:
         d5:9d:b0:1d:cf:1f:80:79:d2:ab:e5:57:6d:dd:12:ce:1e:88:
         eb:74:f5:0b:bc:29:c5:d6:60:57:aa:7f:4c:12:e9:9e:af:8b:
         39:44:ce:ee:5b:aa:43:1f:6c:4a:6a:24:ba:1c:6d:dc:57:d5:
         cc:0b:77:0f:9f:ef:92:a0:23:cc:c5:80:35:11:39:1d:3d:65:
         0d:b9:e1:24:b3:30:c0:6c:29:fe:dd:c0:35:05:09:19:6f:8f:
         df:4d:19:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:42:35 2026 by rpki-client