Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
File:                     2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft (raw, json)
Hash identifier:          idRwCRECe8a1mBrYKpUyH76PYn2eSTXzVEc4/I9cMP8=
Subject key identifier:   6C:5E:9A:F0:16:D1:7A:D4:2F:3C:A4:97:8B:59:5D:F3:F8:9D:81:60
Authority key identifier: D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4
Certificate issuer:       /CN=A91487B2/serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
Certificate serial:       04D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
Manifest number:          04D6
Signing time:             Sat 04 Apr 2026 23:35:18 +0000
Manifest this update:     Sat 04 Apr 2026 23:35:18 +0000
Manifest next update:     Sat 11 Apr 2026 23:35:18 +0000
Files and hashes:         1: 2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl (hash: 7DYKl7n5mUtq1Ylet+z+ir7zfjgTb4qyKyNdnRQCPk0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl
                          rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:35:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1239 (0x4d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91487B2, serialNumber=D96BF56AB63FAEF0169C0D29D64A54781C06B2E4
        Validity
            Not Before: Apr  4 23:35:18 2026 GMT
            Not After : Apr 11 23:35:18 2026 GMT
        Subject: CN=69d1a036-33dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:4a:90:62:5e:c9:4a:4e:fb:5c:c2:c1:78:39:
                    7e:5c:3d:3b:7e:72:84:60:2f:3a:f9:29:7f:9b:df:
                    1e:c6:07:cb:ee:67:05:e6:9c:73:ca:17:26:7c:90:
                    46:d7:a7:ac:32:35:24:00:90:ed:ce:fb:77:1c:0b:
                    7b:f5:c3:e9:9f:20:a4:c3:01:04:8f:b1:91:45:90:
                    c0:37:b4:51:f8:ab:d4:57:b2:42:79:54:e5:95:72:
                    f4:40:1c:9e:e3:4d:5e:56:66:06:ba:56:1f:bf:d0:
                    c4:c2:6c:21:ea:6f:80:3a:ec:cd:18:9b:55:fd:49:
                    ea:cb:e0:f2:8d:b4:bb:5d:32:7c:5b:35:65:e7:89:
                    eb:5f:98:4d:63:16:e7:b5:7b:5f:6c:e7:8c:8f:ca:
                    66:78:45:45:d4:48:b5:87:84:80:e5:a4:52:94:af:
                    14:07:8f:4e:02:1d:55:bd:46:7a:4c:83:65:9e:a3:
                    4f:50:f6:6b:38:7c:4c:7a:fe:8d:29:a3:ec:2e:11:
                    2d:3a:72:37:eb:5f:f7:84:c5:09:02:40:b9:e2:ef:
                    23:e6:bd:dd:27:82:6c:49:4e:da:87:4b:1f:0b:d9:
                    52:31:52:d4:6d:f5:1d:55:88:38:a7:08:5c:7e:2f:
                    8d:7d:3f:3b:5f:37:8e:cf:48:d9:03:bf:db:ce:ed:
                    f0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:5E:9A:F0:16:D1:7A:D4:2F:3C:A4:97:8B:59:5D:F3:F8:9D:81:60
            X509v3 Authority Key Identifier:
                keyid:D9:6B:F5:6A:B6:3F:AE:F0:16:9C:0D:29:D6:4A:54:78:1C:06:B2:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91487B2/746DB6F25D6511ECBB40D135C4F9AE02/2Wv1arY_rvAWnA0p1kpUeBwGsuQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:ed:19:7a:92:ee:b4:31:98:78:87:64:64:ec:34:b4:0e:6e:
         75:ff:b9:87:bc:61:a1:54:78:d3:4c:f1:68:23:a4:59:77:e2:
         f5:b2:83:80:bd:6e:62:ae:d0:6d:76:c4:1b:30:87:f6:cc:47:
         f0:00:21:fb:fe:51:c1:61:9c:c2:75:18:80:21:21:f7:d2:42:
         0c:17:39:2b:40:12:3d:1c:9c:13:d9:cf:37:69:2b:2c:b8:74:
         51:c2:2c:e5:69:b7:0d:2b:fd:ef:5f:34:12:b0:12:e1:0c:8e:
         38:49:09:29:3b:2e:2f:f4:ad:22:36:0d:ff:45:ea:f0:9e:d4:
         3e:62:c5:8c:3d:5e:c1:68:11:2e:02:1d:eb:87:a2:49:f5:c3:
         ad:d8:dd:6a:a0:8c:6e:86:f9:4d:69:12:11:15:88:1c:00:93:
         8d:69:80:51:f1:06:24:3b:0e:9f:44:c2:32:2a:34:64:a6:4a:
         44:30:4f:63:12:8a:6d:88:a1:10:fa:68:dd:e8:07:5b:0e:ba:
         56:c6:51:af:35:fa:58:93:d6:18:95:1c:bd:1b:cb:e6:1b:e8:
         d7:6e:5a:48:da:57:73:38:1b:c5:f6:70:a8:52:73:b2:c2:91:
         59:7c:bc:28:c1:37:5e:73:1d:95:1f:c6:bb:8b:9e:97:12:7b:
         7d:f6:d7:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:54 2026 by rpki-client