Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft
File:                     mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft (raw, json)
Hash identifier:          3MvgWT/nLj2ldpHW//s88s+HjVYmGwkQVT3nCsto+vc=
Subject key identifier:   37:5B:D9:D0:E4:D8:50:6B:E6:7C:2D:30:D3:15:D3:C9:7B:17:68:B1
Authority key identifier: 99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B
Certificate issuer:       /CN=A9192122/serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B
Certificate serial:       2E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft
Manifest number:          2E
Signing time:             Sun 05 Apr 2026 08:03:56 +0000
Manifest this update:     Sun 05 Apr 2026 08:03:56 +0000
Manifest next update:     Sun 12 Apr 2026 08:03:56 +0000
Files and hashes:         1: mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl (hash: V46Hk3v4RV0BH2GOXcuwGGgBxZQxFc74TANwo//A2J8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl
                          rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:03:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192122, serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B
        Validity
            Not Before: Apr  5 08:03:56 2026 GMT
            Not After : Apr 12 08:03:56 2026 GMT
        Subject: CN=69d2176c-83ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:fd:42:e0:d5:f2:54:cb:21:67:5f:13:e0:3f:
                    7b:fd:22:1b:1a:a0:a1:0d:91:54:88:70:a9:2d:5c:
                    4c:43:48:9f:d5:37:90:e3:63:47:6c:c4:5f:f7:27:
                    f0:40:ed:ee:9b:9e:84:ec:18:14:4a:79:94:92:cc:
                    c8:df:ee:9c:e4:53:3a:b1:81:9d:0f:97:4c:2b:f0:
                    91:56:8e:bb:dd:c1:7a:7b:f4:2f:1c:03:4e:87:3e:
                    d9:5e:6a:df:e7:07:30:64:8d:7e:84:79:23:b4:80:
                    0e:f8:39:29:54:57:61:04:56:af:ab:c1:f2:8e:40:
                    8a:52:1d:18:ab:d8:0f:29:d0:c8:83:f7:80:6f:a5:
                    5f:ac:34:89:56:5c:6f:ef:41:15:f9:63:5e:09:ff:
                    e5:82:74:1e:6e:66:cf:b6:25:0b:01:a1:46:14:82:
                    b7:c3:09:fe:3a:e1:63:89:be:78:92:46:91:cd:30:
                    26:23:dc:a8:c0:3e:1c:95:c8:31:ce:6e:a5:96:c0:
                    ef:0b:66:e6:d3:d0:d3:4c:75:27:6b:bf:16:b8:84:
                    a9:af:9d:7f:46:6a:1f:92:f1:82:92:21:a7:c8:5d:
                    52:67:89:28:58:ec:85:b8:6f:5f:16:ad:e4:dd:cb:
                    43:43:70:0d:ae:7f:85:66:5f:f9:65:d3:a5:0d:c6:
                    1f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:5B:D9:D0:E4:D8:50:6B:E6:7C:2D:30:D3:15:D3:C9:7B:17:68:B1
            X509v3 Authority Key Identifier:
                keyid:99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:cf:b4:3f:0f:bf:83:84:ee:6f:0e:93:1f:b2:62:2c:8f:d2:
         e2:ed:cb:69:20:94:6e:65:81:16:8f:85:93:fe:1a:dc:21:9d:
         fb:75:df:2b:92:96:bc:35:c8:7b:08:53:73:bf:3a:ea:bd:0c:
         59:da:d9:20:85:48:7d:a8:17:95:13:af:60:d2:57:34:a0:2d:
         c5:8b:38:cc:fa:49:7e:66:b9:99:18:5b:1c:bf:f4:26:bf:ba:
         5a:ff:23:73:c0:8c:c8:3b:44:2d:7f:72:e3:d7:aa:eb:57:6f:
         dd:08:09:5c:c1:fd:29:2c:6f:0b:6e:55:ba:14:26:36:e1:8a:
         82:d6:c6:98:b3:ec:b6:63:c3:24:de:79:ae:33:35:5c:0a:e0:
         24:f8:b7:30:cd:87:48:bf:c6:b5:27:5c:b4:bb:ff:2f:77:97:
         79:7a:38:db:8b:03:b2:9c:8e:0d:48:ee:e5:49:78:ed:83:23:
         c7:53:61:40:0a:67:d6:1d:c6:78:04:cf:6d:e8:40:8b:ac:e9:
         1c:05:ea:80:35:ad:37:63:77:20:77:d2:4a:13:a6:c4:45:5c:
         25:15:bf:20:0b:2a:66:ae:2e:5b:0e:28:a9:67:b0:51:a8:05:
         a7:f2:52:03:f4:84:df:76:b3:5a:c2:f2:59:ff:14:56:eb:ab:
         71:43:b3:be
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBLjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE5
MjEyMjExMC8GA1UEBRMoOTk0QjE5RUNEM0EzRDUzQTY3OTU0NjM5Njk4RjVDREY4
OThGOTUyQjAeFw0yNjA0MDUwODAzNTZaFw0yNjA0MTIwODAzNTZaMBgxFjAUBgNV
BAMTDTY5ZDIxNzZjLTgzYWIwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCV/ULg1fJUyyFnXxPgP3v9IhsaoKENkVSIcKktXExDSJ/VN5DjY0dsxF/3J/BA
7e6bnoTsGBRKeZSSzMjf7pzkUzqxgZ0Pl0wr8JFWjrvdwXp79C8cA06HPtleat/n
BzBkjX6EeSO0gA74OSlUV2EEVq+rwfKOQIpSHRir2A8p0MiD94BvpV+sNIlWXG/v
QRX5Y14J/+WCdB5uZs+2JQsBoUYUgrfDCf464WOJvniSRpHNMCYj3KjAPhyVyDHO
bqWWwO8LZubT0NNMdSdrvxa4hKmvnX9Gah+S8YKSIafIXVJniShY7IW4b18WreTd
y0NDcA2uf4VmX/ll06UNxh8BAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUN1vZ0OTY
UGvmfC0w0xXTyXsXaLEwHwYDVR0jBBgwFoAUmUsZ7NOj1TpnlUY5aY9c34mPlSsw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTkyMTIyLzZGRDVFQzNFRjNB
RTExRjBCNkRENkQ5QzNBNkY1NkJDL21Vc1o3Tk9qMVRwbmxVWTVhWTljMzRtUGxT
cy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvbVVzWjdOT2oxVHBubFVZNWFZOWMzNG1QbFNzLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTky
MTIyLzZGRDVFQzNFRjNBRTExRjBCNkRENkQ5QzNBNkY1NkJDL21Vc1o3Tk9qMVRw
bmxVWTVhWTljMzRtUGxTcy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBQz7Q/D7+DhO5vDpMfsmIsj9Li7ctpIJRuZYEWj4WT/hrcIZ37dd8rkpa8Nch7
CFNzvzrqvQxZ2tkghUh9qBeVE69g0lc0oC3FizjM+kl+ZrmZGFscv/Qmv7pa/yNz
wIzIO0Qtf3Lj16rrV2/dCAlcwf0pLG8LblW6FCY24YqC1saYs+y2Y8Mk3nmuMzVc
CuAk+LcwzYdIv8a1J1y0u/8vd5d5ejjbiwOynI4NSO7lSXjtgyPHU2FACmfWHcZ4
BM9t6ECLrOkcBeqANa03Y3cgd9JKE6bERVwlFb8gCypmri5bDiipZ7BRqAWn8lID
9ITfdrNawvJZ/xRW66txQ7O+
-----END CERTIFICATE-----
Generated at Sun Apr 5 19:42:41 2026 by rpki-client