Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
File:                     67Vu9aQ9Hla4rmw179-QarhdJ1U.mft (raw, json)
Hash identifier:          SmGw19AvTM7/xoriZaiF87xTBw6x2cEubIkPX/wN69g=
Subject key identifier:   CA:6E:DF:B4:75:EF:44:AA:B0:EA:E7:30:2C:94:D3:9D:16:07:96:64
Authority key identifier: EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55
Certificate issuer:       /CN=A91DC8C8/serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
Certificate serial:       028F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
Manifest number:          0289
Signing time:             Sun 05 Apr 2026 01:20:38 +0000
Manifest this update:     Sun 05 Apr 2026 01:20:37 +0000
Manifest next update:     Sun 12 Apr 2026 01:20:37 +0000
Files and hashes:         1: 67Vu9aQ9Hla4rmw179-QarhdJ1U.crl (hash: 6FlzKEw/1NCBuuJgVqZnotLQMPq4nGyDt737e7ogspE=)
                          2: 376CBBEA504411ED83277887C4F9AE02.roa (hash: ySqmK71UK+jNs+wh1mi4xJfCYQhQm8sGIT3aKm073iI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl
                          rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:20:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 655 (0x28f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC8C8, serialNumber=EBB56EF5A43D1E56B8AE6C35EFDF906AB85D2755
        Validity
            Not Before: Apr  5 01:20:37 2026 GMT
            Not After : Apr 12 01:20:37 2026 GMT
        Subject: CN=69d1b8e5-e979
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:7a:85:c2:bc:fa:b6:89:92:2f:76:8f:6f:3d:
                    70:63:42:d3:65:0c:f8:cd:eb:ca:e1:25:30:1b:ae:
                    b3:b5:17:c1:ad:0e:30:0a:fa:f3:12:0f:29:91:7d:
                    18:8a:67:84:59:f8:36:ab:6e:e5:16:bb:42:53:26:
                    36:5f:44:5d:71:b4:61:70:2d:be:0b:d6:83:3f:6e:
                    53:cd:a2:35:92:d9:c5:9e:2c:d4:29:9b:bc:f7:3e:
                    b7:e3:f0:f3:40:ec:15:1c:10:c1:a7:ad:c6:58:3b:
                    49:a1:e5:77:8d:d4:68:27:f8:a4:7f:07:f0:21:89:
                    55:a9:f8:7d:46:d2:ab:4c:d1:c4:93:d2:72:c0:73:
                    a3:7d:e0:5b:03:cc:3c:cd:95:9b:7f:5b:16:cf:1e:
                    91:a6:ef:b0:a7:80:cd:b3:10:ff:20:c9:31:52:b9:
                    11:36:a4:70:ce:32:0a:d0:e2:f1:c8:b4:37:08:45:
                    2d:08:87:34:00:65:0d:56:30:e8:c9:e4:e6:01:ef:
                    6b:fc:c0:a5:af:6b:55:ca:6b:13:23:f5:84:41:0f:
                    32:74:d2:90:a0:9e:7f:fc:b6:3a:c2:01:5f:e5:7a:
                    d6:fb:64:5b:e3:87:92:6f:1b:22:3f:89:11:1f:7d:
                    c4:28:40:99:9a:8d:7e:c9:c1:d0:74:20:76:18:74:
                    a5:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:6E:DF:B4:75:EF:44:AA:B0:EA:E7:30:2C:94:D3:9D:16:07:96:64
            X509v3 Authority Key Identifier:
                keyid:EB:B5:6E:F5:A4:3D:1E:56:B8:AE:6C:35:EF:DF:90:6A:B8:5D:27:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/67Vu9aQ9Hla4rmw179-QarhdJ1U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC8C8/9945FDA4503F11EDB25DF66AC4F9AE02/67Vu9aQ9Hla4rmw179-QarhdJ1U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:22:25:2f:85:3a:4e:ce:d9:8a:fc:2d:78:d8:6e:ac:0b:df:
         44:86:82:9d:23:b8:f1:de:1e:47:ee:e2:6d:cc:33:85:ee:56:
         51:5b:6d:2d:1e:25:06:aa:d4:d6:21:28:f2:71:97:6c:56:65:
         b3:8d:de:88:79:33:76:37:35:a3:61:13:dc:ee:72:14:27:02:
         ca:c2:04:a9:dc:d1:aa:0c:50:a0:94:3d:89:21:68:9d:6d:ad:
         db:4b:85:52:b4:a6:06:e1:3d:63:d4:aa:6a:cb:43:88:07:3c:
         3e:e6:a1:9b:50:26:76:83:3b:86:c1:c5:95:ba:11:9f:26:d9:
         14:ff:da:a5:c9:7f:3b:b1:f5:f7:54:45:a1:d7:86:93:bd:09:
         af:a2:b4:25:be:13:09:e1:0a:5d:4a:38:de:b1:10:84:b0:d7:
         1b:aa:8e:0a:26:73:5b:c5:41:2e:25:0e:24:ab:61:7e:81:22:
         03:23:f0:a4:c7:2b:de:9e:63:77:29:48:8d:02:bf:bb:24:97:
         71:3a:8e:2f:5c:19:e7:42:ad:95:5e:46:50:e4:fe:bc:77:3c:
         d1:ca:73:44:dd:e2:b1:cb:2c:fd:51:97:95:a1:fe:e2:30:8b:
         99:e7:bb:ec:b4:3a:02:4d:ed:54:90:03:ad:27:e2:66:59:b9:
         cf:e1:e3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:58:16 2026 by rpki-client