Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
File:                     4z23k7vv5Gy8912zTnCUJ6cu8PM.mft (raw, json)
Hash identifier:          AZ1YVokUrDHJvvdInRShgRRR23YUgRkBKsUdR4RTm7I=
Subject key identifier:   0A:92:DA:2D:E1:22:C1:FD:52:99:A3:AD:AF:B7:18:75:D9:6C:C2:06
Authority key identifier: E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3
Certificate issuer:       /CN=A91C7F6A/serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
Manifest number:          026B
Signing time:             Sun 05 Apr 2026 01:39:00 +0000
Manifest this update:     Sun 05 Apr 2026 01:39:00 +0000
Manifest next update:     Sun 12 Apr 2026 01:39:00 +0000
Files and hashes:         1: 4z23k7vv5Gy8912zTnCUJ6cu8PM.crl (hash: Uet80W54sTKjYu2+T6r2MQ4Ifx5BJtAiqcRkylIDp4U=)
                          2: 81D5DEE47F5D11EDB4309B54C4F9AE02.roa (hash: mGLrUqchoRUjle/BuvUxiJtXqbGGvFSdYgwJHN85mfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl
                          rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:38:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7F6A, serialNumber=E33DB793BBEFE46CBCF75DB34E709427A72EF0F3
        Validity
            Not Before: Apr  5 01:39:00 2026 GMT
            Not After : Apr 12 01:39:00 2026 GMT
        Subject: CN=69d1bd34-fddc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:45:3d:7e:05:5e:eb:91:58:3e:41:c6:b8:b6:
                    2f:1b:dc:67:9a:0a:dc:08:9d:a3:10:e3:9f:b0:9f:
                    ca:69:ac:d7:e2:34:2a:fc:e9:35:c7:9b:97:5b:ae:
                    21:a8:23:95:63:f5:1f:f7:f5:f5:8d:06:dc:ab:d4:
                    97:a5:71:2f:9d:f5:a8:bb:f7:b1:4f:8c:73:54:d9:
                    53:42:d4:b0:c7:2f:b5:17:bb:e7:3b:7f:ea:85:18:
                    f9:e9:34:89:e6:38:91:1c:44:7f:bd:7f:f3:bc:6b:
                    2b:b1:09:87:f7:7e:47:9c:46:ed:91:88:f0:6d:80:
                    52:ce:3f:36:9c:8d:60:d0:d4:10:ab:90:99:26:e1:
                    af:0f:80:39:e4:54:0d:78:5a:5d:b6:b5:81:87:eb:
                    67:c4:e4:12:78:5b:de:27:d5:06:8b:49:20:e9:b0:
                    d5:16:b6:52:29:f7:08:fe:ef:b5:ac:20:86:b1:e0:
                    e6:09:3b:17:1e:d5:5b:49:b6:67:5b:52:3c:17:5b:
                    29:8c:67:9c:18:ad:e5:67:f2:b3:58:f3:ad:9e:98:
                    30:aa:61:35:3a:4a:a7:5d:64:87:c4:56:76:61:85:
                    2a:d0:1f:e2:82:03:3e:47:ec:b6:22:51:02:be:c8:
                    f7:78:d0:77:4f:7a:0e:85:9e:f4:aa:0e:94:24:bc:
                    81:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:92:DA:2D:E1:22:C1:FD:52:99:A3:AD:AF:B7:18:75:D9:6C:C2:06
            X509v3 Authority Key Identifier:
                keyid:E3:3D:B7:93:BB:EF:E4:6C:BC:F7:5D:B3:4E:70:94:27:A7:2E:F0:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4z23k7vv5Gy8912zTnCUJ6cu8PM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7F6A/067925007F4211EDB4E78C86C4F9AE02/4z23k7vv5Gy8912zTnCUJ6cu8PM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:47:a4:37:ae:87:30:a2:90:0a:31:30:7e:75:07:be:ce:57:
         74:da:6a:f4:e4:ab:dc:7c:69:b7:b6:3c:5f:21:a8:90:bf:2a:
         31:e2:59:ad:87:5f:9e:c5:cf:c3:a1:05:7f:c4:6a:e5:23:23:
         6f:6b:da:4e:ce:9c:f1:84:02:08:80:1c:43:50:e0:08:e8:8b:
         b4:3f:7c:44:46:11:8c:b2:28:98:d5:f3:33:ed:8d:27:d3:38:
         fa:b7:69:17:df:59:74:ff:72:9e:dd:2c:bd:d1:25:08:65:62:
         83:8b:35:a8:18:4f:32:20:6f:68:87:79:c2:11:e9:11:b3:cf:
         49:e9:56:b1:80:bf:3d:39:b5:a5:62:cc:f2:c2:68:37:25:d6:
         21:4b:b8:37:9f:9b:b3:a5:ae:c9:da:91:12:3b:d6:97:ba:3e:
         13:9f:2b:7c:c8:6a:88:31:10:44:20:d5:29:9b:1b:52:12:16:
         78:fa:b7:59:0a:05:d2:6b:80:3d:ac:75:b5:f5:5a:dd:ae:8b:
         15:77:34:ea:f4:6c:06:55:e5:09:47:37:94:38:3f:7e:46:f4:
         78:29:01:60:e7:5d:ef:8e:af:8d:fc:90:87:73:6c:3c:6a:a7:
         ed:56:5d:b8:0c:9e:0a:8e:71:79:a5:80:0b:dc:02:44:5a:0f:
         35:7f:75:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 01:15:30 2026 by rpki-client