Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
File:                     _ZFHrvajMNGN1MnP2GQvDtqnuQc.mft (raw, json)
Hash identifier:          T3Mp8vK6//XAqx+gL5z7ZVobaQZ4gcrPIO9gLmSPpUg=
Subject key identifier:   EF:76:00:92:6F:7E:C5:AE:45:2B:C3:32:59:C0:A9:D7:5D:38:D0:21
Authority key identifier: FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07
Certificate issuer:       /CN=A91E1853/serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
Certificate serial:       54
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
Manifest number:          54
Signing time:             Sun 05 Apr 2026 07:34:43 +0000
Manifest this update:     Sun 05 Apr 2026 07:34:43 +0000
Manifest next update:     Sun 12 Apr 2026 07:34:43 +0000
Files and hashes:         1: _ZFHrvajMNGN1MnP2GQvDtqnuQc.crl (hash: 9yWcWn3P9SOoWD36O9E/hogYUPn7QQVEbKy/oKciwZg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl
                          rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:34:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1853, serialNumber=FD9147AEF6A330D18DD4C9CFD8642F0EDAA7B907
        Validity
            Not Before: Apr  5 07:34:43 2026 GMT
            Not After : Apr 12 07:34:43 2026 GMT
        Subject: CN=69d21093-19f4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:95:e3:1a:fc:6b:a9:49:b0:ad:c0:8e:73:3d:
                    9f:03:9b:cc:65:e7:0b:49:b0:86:e4:47:92:ea:44:
                    ec:73:10:19:ad:75:a2:dc:99:a7:ce:4b:f0:89:26:
                    12:72:60:62:34:dd:03:f2:56:22:73:d9:7f:b2:7d:
                    31:20:ea:cb:62:e9:22:db:c6:75:9f:2a:12:42:f8:
                    d0:b6:d5:24:84:32:63:8b:fe:16:7d:d2:81:07:5b:
                    58:e0:c6:98:5f:b8:94:48:9a:e5:89:b0:8c:a4:5f:
                    7c:a5:02:e3:14:29:00:ac:fb:26:17:1e:0f:fd:a5:
                    b3:8d:13:f8:bb:e3:01:c6:c9:c7:0b:93:30:4c:21:
                    af:df:c3:50:d8:97:53:37:8e:d0:30:56:6f:f1:19:
                    30:d2:a5:4e:1e:98:9b:56:1e:6a:3f:8b:b2:4a:6e:
                    d6:0b:86:76:c8:fd:83:a4:df:f2:54:e1:85:6c:49:
                    cf:94:5b:98:a2:86:21:a8:60:96:eb:51:f6:38:57:
                    48:b7:96:24:28:b7:0f:41:b1:14:4f:87:a6:6a:a4:
                    07:a7:84:65:4c:7d:e9:89:8a:93:81:bb:0a:bd:d5:
                    54:39:71:0b:4e:5b:9e:6c:48:a5:22:9c:f5:28:8e:
                    17:3f:82:4a:58:3a:4a:29:8a:58:89:36:43:c7:77:
                    5a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:76:00:92:6F:7E:C5:AE:45:2B:C3:32:59:C0:A9:D7:5D:38:D0:21
            X509v3 Authority Key Identifier:
                keyid:FD:91:47:AE:F6:A3:30:D1:8D:D4:C9:CF:D8:64:2F:0E:DA:A7:B9:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_ZFHrvajMNGN1MnP2GQvDtqnuQc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1853/1AB15B8CBDB011F087EDE929C4F9AE02/_ZFHrvajMNGN1MnP2GQvDtqnuQc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:0b:7f:c1:75:04:c4:fa:d4:cc:c5:45:70:1f:d0:42:81:73:
         54:a9:a1:58:15:42:4d:a7:d7:fa:39:e6:03:ab:3c:d9:0e:8f:
         5f:2f:15:02:d5:17:c3:a4:e0:7e:10:02:0c:7c:6e:e4:08:62:
         af:68:73:68:21:cc:34:de:a1:ca:fb:53:1a:65:98:10:55:e1:
         d7:fd:8a:aa:c6:38:2f:d1:af:24:7d:b9:28:1b:21:a1:61:41:
         cb:18:a9:dc:1f:92:00:4a:4f:e6:32:32:db:e8:c9:ed:24:fc:
         d2:82:d5:49:69:18:a3:cb:7b:63:86:c3:1d:93:a5:e6:87:87:
         bc:01:cc:9c:39:29:fb:db:ae:64:d9:55:63:21:c7:6c:6b:28:
         e9:a8:a0:35:39:31:72:0e:53:70:7f:3c:c0:ae:58:db:c1:03:
         6c:a7:b1:fa:66:24:25:0e:bc:24:01:b7:ca:cb:6b:66:ff:ef:
         a4:b5:94:c6:07:35:16:8a:40:e3:88:db:ef:d5:0b:71:ef:d3:
         09:a6:ac:cb:54:6f:24:2b:1d:31:4b:de:c0:ae:fb:c8:4a:5c:
         23:e4:b9:9e:bc:b5:1b:74:e0:9c:a4:e7:e9:b5:e3:61:5d:30:
         5c:ab:a3:94:9d:60:4f:c6:00:b0:6e:d4:61:d7:2d:0a:1e:7d:
         bc:2b:62:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 22:24:52 2026 by rpki-client