Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
File:                     iB8oqx80yszxJe2ul-HgEGBYI0k.mft (raw, json)
Hash identifier:          31aWKCC+3t67ezmQ5lXwtMmZTd2isN/eNat1QDUj2zU=
Subject key identifier:   6E:50:76:94:E4:09:7A:70:9D:2E:57:EA:47:41:B8:63:23:11:26:A1
Authority key identifier: 88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49
Certificate issuer:       /CN=A91D342A/serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
Certificate serial:       6D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
Manifest number:          6D
Signing time:             Sun 05 Apr 2026 07:14:40 +0000
Manifest this update:     Sun 05 Apr 2026 07:14:39 +0000
Manifest next update:     Sun 12 Apr 2026 07:14:39 +0000
Files and hashes:         1: iB8oqx80yszxJe2ul-HgEGBYI0k.crl (hash: zsf6BH6nKOVMJ4m2NxWMHy7S+uthjOAXMQNuzIV+Vdg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl
                          rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:14:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D342A, serialNumber=881F28AB1F34CACCF125EDAE97E1E01060582349
        Validity
            Not Before: Apr  5 07:14:39 2026 GMT
            Not After : Apr 12 07:14:39 2026 GMT
        Subject: CN=69d20be0-d93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d8:b0:fa:cd:7d:35:71:43:1d:c9:10:3b:df:
                    c2:ca:b2:bb:f5:1a:c4:34:5f:db:98:33:ac:76:05:
                    6c:67:1d:d7:51:53:14:0b:ae:3a:28:30:3d:8d:72:
                    13:88:59:3d:80:dd:6a:f0:a3:d2:13:36:f3:6a:de:
                    a7:f0:86:e6:05:87:38:b0:9b:6a:00:d5:82:09:46:
                    7f:d5:a0:d2:ae:41:bf:cf:06:f4:90:0d:4e:d6:80:
                    70:a1:29:b8:fa:8f:8a:16:80:49:25:f2:54:77:29:
                    cb:19:28:6f:8a:7f:53:1c:1f:f6:7c:cc:f5:3f:5a:
                    1d:7f:77:00:57:97:34:64:b0:f4:95:71:62:99:f2:
                    37:a6:ff:9b:45:48:53:44:6e:ee:86:df:9b:aa:30:
                    b5:ce:62:ca:78:e9:21:46:4b:7e:fb:fc:3c:10:12:
                    b2:d8:f9:0d:87:ec:11:7b:5b:b1:ed:b5:12:65:08:
                    64:13:b0:0d:7e:cf:fa:5e:95:f3:2e:c8:25:8e:72:
                    51:3b:c5:9b:33:ab:e9:de:3b:3c:e9:9d:76:7a:cb:
                    59:85:eb:4f:72:9b:3b:2b:3e:a9:ce:5d:7f:43:b3:
                    14:37:c5:3d:30:3f:4d:ec:f0:9a:8e:26:35:34:f7:
                    d0:30:fc:1e:cd:f7:68:25:75:ac:09:48:b5:11:9f:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:50:76:94:E4:09:7A:70:9D:2E:57:EA:47:41:B8:63:23:11:26:A1
            X509v3 Authority Key Identifier:
                keyid:88:1F:28:AB:1F:34:CA:CC:F1:25:ED:AE:97:E1:E0:10:60:58:23:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iB8oqx80yszxJe2ul-HgEGBYI0k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D342A/1778B70C8EC711F0BB12853CC4F9AE02/iB8oqx80yszxJe2ul-HgEGBYI0k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:7f:87:71:bf:4f:f8:0a:b6:f7:8b:db:a1:55:c2:a1:f0:bb:
         10:07:6b:d9:ae:0c:6f:ed:40:22:23:3c:bb:d9:f3:93:19:d1:
         d7:30:3e:dd:81:a6:f4:3a:7d:12:9a:0b:10:64:7f:ef:e4:75:
         9b:3b:67:21:0e:f3:cd:70:94:1b:aa:4e:e1:23:bd:a9:08:75:
         51:0d:1d:6a:6a:dc:1e:9e:df:f6:df:3d:73:b9:a3:62:e0:6a:
         38:5d:ec:85:59:e2:a7:8e:85:7c:c5:70:0e:f4:9f:58:ad:f9:
         40:15:ff:1b:76:52:75:ab:f0:b7:b7:86:a5:42:5c:25:56:7c:
         54:19:7b:dc:60:0f:95:dc:2f:32:47:df:28:fd:0b:f4:46:a4:
         dc:31:3a:01:16:1c:6a:4c:8e:b8:9c:6d:3a:d1:dd:15:44:fb:
         28:7e:60:5f:f2:12:5f:35:ca:2c:0a:94:a2:dd:ab:5c:92:34:
         6f:49:ad:e3:49:05:53:d8:7f:cf:33:68:5f:5f:72:62:35:0e:
         2e:09:b6:62:3e:ec:9d:5c:b3:5d:45:94:c0:93:b3:e3:91:4e:
         32:45:07:81:82:4b:57:72:60:93:84:12:02:3e:d3:bc:d1:a9:
         7f:47:4f:a3:cb:2a:e2:f6:56:ea:cc:c7:30:88:16:f3:e7:96:
         0a:93:27:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:00:08 2026 by rpki-client