Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File:                     -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier:          pj0JUzybpBfMqCxJtejMvpTASKeRRvTEvX9buPWqI1E=
Subject key identifier:   4B:83:E8:CA:89:B7:C6:9F:35:6A:AA:28:34:68:30:0C:FD:8C:56:AC
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer:       /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial:       48
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number:          48
Signing time:             Sun 05 Apr 2026 07:38:25 +0000
Manifest this update:     Sun 05 Apr 2026 07:38:25 +0000
Manifest next update:     Sun 12 Apr 2026 07:38:25 +0000
Files and hashes:         1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: nmutO1EP61r82fJMIlECPUe8TE/WU22H6/fMPWQmewQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:38:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
        Validity
            Not Before: Apr  5 07:38:25 2026 GMT
            Not After : Apr 12 07:38:25 2026 GMT
        Subject: CN=69d21171-fc3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:af:66:64:3c:3e:ef:cf:a7:b2:89:8d:49:1b:
                    dc:92:a2:2e:ca:a1:82:9d:0f:6e:dd:5f:d4:d0:d4:
                    cf:80:95:a0:e5:7a:0d:bb:03:46:08:47:88:d5:b4:
                    d4:d2:24:fa:ae:e3:8a:02:a6:08:08:ef:1a:db:b8:
                    fa:7b:e5:33:5f:ea:10:63:c9:17:18:55:e8:53:90:
                    80:9c:df:d7:cc:83:c5:fc:c1:54:a4:d7:e3:dc:b5:
                    3a:21:e2:67:b1:a9:6b:73:f3:46:01:5e:78:15:b1:
                    fc:0b:c3:fc:77:d3:a2:9a:c1:83:ae:f4:19:b5:64:
                    8c:52:f2:7f:a8:69:e4:e9:53:d8:04:e3:4d:72:1a:
                    aa:75:6b:a4:5a:c8:f9:d6:a7:1a:46:50:f1:cd:ff:
                    43:45:1b:71:1e:f0:ca:9c:b4:9b:c8:7a:5f:09:e8:
                    c6:63:29:9a:c7:1f:3d:03:e3:ed:7f:22:82:be:ae:
                    55:1e:09:e7:b3:12:16:83:57:04:96:97:96:c9:e0:
                    1d:62:aa:90:73:26:f7:4e:2d:b6:23:78:45:9b:19:
                    68:0e:54:8c:b4:1c:33:d8:da:10:8a:a5:13:ae:29:
                    2f:35:93:a2:e8:23:3a:6d:09:1b:db:59:5f:b0:8f:
                    25:b6:c4:21:95:d7:8b:96:d5:11:a4:a8:d2:cb:24:
                    25:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:83:E8:CA:89:B7:C6:9F:35:6A:AA:28:34:68:30:0C:FD:8C:56:AC
            X509v3 Authority Key Identifier:
                keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:e4:5a:f6:cb:1c:21:67:40:40:1d:f4:39:57:d6:d8:10:48:
         26:0e:2f:0e:be:fc:0c:da:63:88:02:53:5d:6e:d1:cb:57:6d:
         fb:f6:3f:f2:d7:3d:55:bd:2b:18:13:f7:ff:df:84:4f:37:00:
         77:41:d2:7a:22:18:ca:f6:ea:15:9f:90:1a:a5:15:15:c3:46:
         a8:ff:54:7f:a3:85:ab:b9:e5:7c:a3:da:70:6a:7a:f2:3e:1a:
         7f:65:da:7f:64:94:c2:00:97:df:9a:d2:cf:bc:ac:38:1c:4e:
         98:96:43:e8:95:62:54:a9:0c:a1:fc:45:92:ba:aa:b2:17:c0:
         a4:36:0a:a5:1f:f5:2c:20:2a:65:c3:d2:3f:97:5d:5c:6b:57:
         e9:8f:66:4f:35:5d:4a:3c:7b:6b:c0:f9:9a:6e:98:82:46:bb:
         84:d5:5b:07:0c:1e:1c:00:8b:66:ad:5b:56:fa:33:1e:ce:b2:
         ef:69:3b:57:d4:db:b4:e8:f4:88:49:8f:a2:da:03:c7:da:3d:
         22:7d:52:db:f0:a0:ed:f8:00:10:b9:37:d6:db:f3:2b:db:23:
         c0:72:5d:1c:c3:be:f9:62:1d:dd:e8:60:20:eb:18:8c:1c:d1:
         13:ff:e8:ae:ff:f0:60:8a:f8:22:3f:2d:93:1d:4f:fb:ff:1d:
         68:ed:b2:a8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBSDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFC
MkQ1NjExMC8GA1UEBRMoRkE3MkY5RUM3MzE0NkI0RDYwNThDODhBNjA2QUZBMDMz
MzBFMDM1MTAeFw0yNjA0MDUwNzM4MjVaFw0yNjA0MTIwNzM4MjVaMBgxFjAUBgNV
BAMTDTY5ZDIxMTcxLWZjM2EwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDOr2ZkPD7vz6eyiY1JG9ySoi7KoYKdD27dX9TQ1M+AlaDleg27A0YIR4jVtNTS
JPqu44oCpggI7xrbuPp75TNf6hBjyRcYVehTkICc39fMg8X8wVSk1+PctToh4mex
qWtz80YBXngVsfwLw/x306KawYOu9Bm1ZIxS8n+oaeTpU9gE401yGqp1a6RayPnW
pxpGUPHN/0NFG3Ee8MqctJvIel8J6MZjKZrHHz0D4+1/IoK+rlUeCeezEhaDVwSW
l5bJ4B1iqpBzJvdOLbYjeEWbGWgOVIy0HDPY2hCKpROuKS81k6LoIzptCRvbWV+w
jyW2xCGV14uW1RGkqNLLJCVrAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUS4Poyom3
xp81aqooNGgwDP2MVqwwHwYDVR0jBBgwFoAU+nL57HMUa01gWMiKYGr6AzMOA1Ew
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIyRDU2L0Y2OTIzNjdBQzUy
MjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAxZ1dNaUtZR3I2QXpNT0Ex
RS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvLW5MNTdITVVhMDFnV01pS1lHcjZBek1PQTFFLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUIy
RDU2L0Y2OTIzNjdBQzUyMjExRjA5NUQxQjIxN0M0RjlBRTAyLy1uTDU3SE1VYTAx
Z1dNaUtZR3I2QXpNT0ExRS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQBH5Fr2yxwhZ0BAHfQ5V9bYEEgmDi8OvvwM2mOIAlNdbtHLV2379j/y1z1VvSsY
E/f/34RPNwB3QdJ6IhjK9uoVn5AapRUVw0ao/1R/o4WrueV8o9pwanryPhp/Zdp/
ZJTCAJffmtLPvKw4HE6YlkPolWJUqQyh/EWSuqqyF8CkNgqlH/UsICplw9I/l11c
a1fpj2ZPNV1KPHtrwPmabpiCRruE1VsHDB4cAItmrVtW+jMezrLvaTtX1Nu06PSI
SY+i2gPH2j0ifVLb8KDt+AAQuTfW2/Mr2yPAcl0cw775Yh3d6GAg6xiMHNET/+iu
//BgivgiPy2THU/7/x1o7bKo
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:25 2026 by rpki-client