Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
File:                     ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft (raw, json)
Hash identifier:          oW6KLi4h98Pnfyo9bJZPHFpdu8trlkxg1opmMV8K0/0=
Subject key identifier:   44:A4:6B:BD:12:73:73:73:A4:33:BE:22:3A:21:55:35:CC:B9:90:D1
Authority key identifier: 44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51
Certificate issuer:       /CN=A914D3B0/serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
Manifest number:          36
Signing time:             Sun 05 Apr 2026 07:56:10 +0000
Manifest this update:     Sun 05 Apr 2026 07:56:10 +0000
Manifest next update:     Sun 12 Apr 2026 07:56:10 +0000
Files and hashes:         1: ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl (hash: qighdyzajEFuiZYeqLCTUQcVSbPQwrNfdR+lxOLejCQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl
                          rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:56:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D3B0, serialNumber=44ECAF3CF30D9204417E75BB3657E2F72101A451
        Validity
            Not Before: Apr  5 07:56:10 2026 GMT
            Not After : Apr 12 07:56:10 2026 GMT
        Subject: CN=69d2159a-d25c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:6c:30:08:8d:c8:fc:12:3d:5f:5e:32:34:88:
                    24:dc:5c:c8:ad:25:56:72:08:ca:b5:4e:d7:5f:93:
                    aa:75:2b:0e:6d:4f:72:e9:47:70:4a:12:70:3d:64:
                    3b:e6:fd:c1:3f:d9:e6:fb:fe:31:f9:f2:f4:b6:b6:
                    d6:8a:10:35:c4:0c:34:05:c8:b3:4a:25:13:8c:67:
                    99:8a:22:b6:3d:c1:d2:7f:52:68:a3:3f:48:a7:a5:
                    5f:c4:ee:6e:02:34:b7:ec:9b:d5:24:b0:ee:81:df:
                    f2:3b:fd:f8:a1:81:01:d7:6c:fa:34:af:26:9d:5f:
                    3d:e9:07:f9:b8:90:cd:d1:20:29:5e:f7:c7:4c:3f:
                    fb:e1:92:56:6b:01:fa:ae:e9:19:19:5f:39:b8:21:
                    d7:bc:f0:af:49:64:25:6a:94:a6:11:a1:f3:63:13:
                    20:36:d5:a3:e9:db:25:da:a1:0f:42:dc:9c:03:d0:
                    ea:a5:13:e2:f2:70:41:bc:50:b8:e6:c0:e9:ba:4e:
                    e8:2d:33:71:6b:6d:7e:96:0d:47:6e:23:96:05:d6:
                    05:a9:f7:97:66:56:85:d8:00:dd:ab:f7:4b:d0:f0:
                    ce:8b:f1:9f:db:49:ac:a5:d3:f4:87:6c:5a:4e:ed:
                    5b:2d:f4:29:a6:61:81:17:ad:75:ff:88:7e:f6:1f:
                    de:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A4:6B:BD:12:73:73:73:A4:33:BE:22:3A:21:55:35:CC:B9:90:D1
            X509v3 Authority Key Identifier:
                keyid:44:EC:AF:3C:F3:0D:92:04:41:7E:75:BB:36:57:E2:F7:21:01:A4:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D3B0/F79D16A6E48B11F092BBAF6E446F56BC/ROyvPPMNkgRBfnW7Nlfi9yEBpFE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:a2:50:ad:e4:f4:39:87:3b:40:12:2a:cf:55:e9:73:f6:8a:
         35:5f:d4:d1:fb:07:60:68:16:36:14:7a:75:58:93:25:28:c6:
         81:8f:2b:80:7f:9f:65:3f:c4:34:1e:16:59:4d:4c:24:e3:b0:
         95:71:4f:39:61:ab:8f:ef:0f:92:93:ac:37:95:7b:bc:e3:04:
         43:65:81:af:07:c0:bb:c2:db:aa:32:fa:f3:61:fb:ed:b3:d9:
         36:82:32:2f:5f:4f:9f:2b:b5:b5:a9:a4:45:60:68:f5:a5:20:
         98:24:4d:6f:bd:41:05:fd:fc:c2:04:7c:73:48:7f:ba:0b:07:
         64:47:93:3e:5b:70:b7:de:be:3f:a1:2b:fd:97:45:aa:70:3e:
         44:f0:d6:70:22:37:6f:11:55:4e:2f:71:43:74:fc:30:24:9f:
         49:e4:c2:07:cd:11:f2:b4:4a:7b:c8:3e:de:9f:06:cd:97:31:
         a5:e1:55:16:af:46:3a:a9:dd:e4:18:63:7a:94:48:0e:8f:ee:
         3d:99:e0:49:a8:da:84:5f:c2:a8:42:31:cf:64:88:0e:fc:3a:
         91:44:d7:98:f1:64:fb:9a:b3:ac:57:7e:0c:97:d4:5d:dd:f2:
         8b:83:4e:d7:62:72:1a:de:29:76:77:50:09:89:2f:11:90:a7:
         6f:6e:ae:bf
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBNjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RDNCMDExMC8GA1UEBRMoNDRFQ0FGM0NGMzBEOTIwNDQxN0U3NUJCMzY1N0UyRjcy
MTAxQTQ1MTAeFw0yNjA0MDUwNzU2MTBaFw0yNjA0MTIwNzU2MTBaMBgxFjAUBgNV
BAMTDTY5ZDIxNTlhLWQyNWMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDmbDAIjcj8Ej1fXjI0iCTcXMitJVZyCMq1Ttdfk6p1Kw5tT3LpR3BKEnA9ZDvm
/cE/2eb7/jH58vS2ttaKEDXEDDQFyLNKJROMZ5mKIrY9wdJ/UmijP0inpV/E7m4C
NLfsm9UksO6B3/I7/fihgQHXbPo0ryadXz3pB/m4kM3RICle98dMP/vhklZrAfqu
6RkZXzm4Ide88K9JZCVqlKYRofNjEyA21aPp2yXaoQ9C3JwD0OqlE+LycEG8ULjm
wOm6TugtM3FrbX6WDUduI5YF1gWp95dmVoXYAN2r90vQ8M6L8Z/bSayl0/SHbFpO
7Vst9CmmYYEXrXX/iH72H94vAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQURKRrvRJz
c3OkM74iOiFVNcy5kNEwHwYDVR0jBBgwFoAUROyvPPMNkgRBfnW7Nlfi9yEBpFEw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTREM0IwL0Y3OUQxNkE2RTQ4
QjExRjA5MkJCQUY2RTQ0NkY1NkJDL1JPeXZQUE1Oa2dSQmZuVzdObGZpOXlFQnBG
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUk95dlBQTU5rZ1JCZm5XN05sZmk5eUVCcEZFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRE
M0IwL0Y3OUQxNkE2RTQ4QjExRjA5MkJCQUY2RTQ0NkY1NkJDL1JPeXZQUE1Oa2dS
QmZuVzdObGZpOXlFQnBGRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAjolCt5PQ5hztAEirPVelz9oo1X9TR+wdgaBY2FHp1WJMlKMaBjyuAf59lP8Q0
HhZZTUwk47CVcU85YauP7w+Sk6w3lXu84wRDZYGvB8C7wtuqMvrzYfvts9k2gjIv
X0+fK7W1qaRFYGj1pSCYJE1vvUEF/fzCBHxzSH+6CwdkR5M+W3C33r4/oSv9l0Wq
cD5E8NZwIjdvEVVOL3FDdPwwJJ9J5MIHzRHytEp7yD7enwbNlzGl4VUWr0Y6qd3k
GGN6lEgOj+49meBJqNqEX8KoQjHPZIgO/DqRRNeY8WT7mrOsV34Ml9Rd3fKLg07X
YnIa3il2d1AJiS8RkKdvbq6/
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:32 2026 by rpki-client