Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
File:                     Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft (raw, json)
Hash identifier:          b/VQDJQ5rdkEv0VQbmx8nx+vWA/2DnktKk/bEIQaIn8=
Subject key identifier:   38:39:61:55:F6:12:7E:A3:08:2C:89:92:B1:F5:1D:0C:B3:1A:6C:05
Authority key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D
Certificate issuer:       /CN=A913270F/serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
Certificate serial:       30
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
Manifest number:          30
Signing time:             Sun 05 Apr 2026 08:01:17 +0000
Manifest this update:     Sun 05 Apr 2026 08:01:16 +0000
Manifest next update:     Sun 12 Apr 2026 08:01:16 +0000
Files and hashes:         1: Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl (hash: DHuliwQDMEAXA4nv1KXrqGAQ0yejfV+rpbHgfaqyKoI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:01:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
        Validity
            Not Before: Apr  5 08:01:16 2026 GMT
            Not After : Apr 12 08:01:16 2026 GMT
        Subject: CN=69d216cd-91e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:de:04:ca:67:70:84:ba:c9:b5:68:ef:20:30:
                    80:5a:b7:d0:1c:5b:dc:ee:e5:cb:93:c9:5a:5d:10:
                    40:d0:d8:79:44:3b:36:d6:6c:de:5e:3b:62:9d:c3:
                    ad:ef:c4:11:97:35:21:43:c2:d1:ba:ae:fa:7b:aa:
                    f4:ba:0c:b0:c5:86:2a:7b:4b:33:f2:60:fa:f6:40:
                    98:ec:c1:28:ca:a2:18:01:08:54:db:3a:5f:44:73:
                    39:01:ca:84:0b:f5:32:93:78:2e:16:e1:19:31:ed:
                    01:7e:1c:2d:b7:af:de:a4:1a:46:0a:36:d8:3e:52:
                    53:8f:40:22:ea:a7:46:1d:f4:42:36:ba:bd:8e:08:
                    74:84:86:3b:82:04:4a:a1:d6:eb:7d:04:5d:58:45:
                    3d:6a:31:15:d6:0e:77:03:d7:ad:79:a3:13:09:b5:
                    48:07:25:28:c2:39:ae:f4:b8:65:51:41:db:33:2f:
                    06:fe:61:65:06:11:03:52:db:89:c7:55:66:fd:01:
                    96:ba:6e:33:cc:33:50:fa:01:76:b1:c8:75:8b:ba:
                    2c:c8:d4:4f:c2:fd:26:88:11:31:0a:b6:a1:d1:40:
                    38:96:4b:3f:4d:ec:f2:34:28:e1:51:e5:b1:e6:7e:
                    8f:7e:a3:71:d5:c7:36:87:f2:10:c7:13:55:6c:64:
                    00:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:39:61:55:F6:12:7E:A3:08:2C:89:92:B1:F5:1D:0C:B3:1A:6C:05
            X509v3 Authority Key Identifier:
                keyid:31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         16:f4:15:fc:a0:6b:35:fe:85:db:45:03:21:89:ea:2f:9a:e4:
         8d:cf:16:0f:3d:c7:a0:fc:73:25:94:13:4c:2b:e0:0a:d2:1f:
         d2:4a:bf:47:51:e3:97:f1:94:93:12:0f:09:20:26:d6:7c:9c:
         95:03:74:5b:40:4d:ea:f3:1c:58:7e:15:cf:55:eb:76:5f:b4:
         52:95:df:1a:52:4d:e4:62:dc:80:27:47:e1:df:8c:1c:22:16:
         74:50:cc:b8:9e:84:a6:2e:90:a3:63:93:11:53:30:52:c4:69:
         1c:0a:cd:60:09:5d:a2:97:17:ef:75:eb:63:22:01:43:08:57:
         a9:27:73:64:bd:37:35:68:63:8a:7a:cb:06:9e:a2:7b:3a:fe:
         e8:f6:43:21:55:a1:41:31:b3:99:08:9d:5a:52:48:0a:39:ee:
         aa:6d:d8:b9:88:08:35:79:82:2a:2c:6c:27:97:c9:4e:8c:8e:
         fe:15:bd:b6:16:e1:f7:91:42:bf:4c:28:85:f8:ec:ef:93:45:
         e3:d9:7d:d4:35:b5:fc:8d:0d:1b:c7:f5:36:9e:55:19:29:8f:
         bd:59:ea:a5:2e:1d:ef:93:e9:43:42:df:86:81:a7:62:d3:a2:
         49:f3:18:d4:a9:79:8c:05:0e:7d:9a:0a:3b:b3:b7:86:f8:35:
         93:03:ab:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:59:35 2026 by rpki-client