Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          Onp/zw9DT47dRNIFohaY+QDxtshz/OaNXLXY/zqB130=
Subject key identifier:   ED:80:D5:16:8B:7D:30:A2:20:41:3D:22:85:33:C3:0C:46:CE:5E:04
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          352A
Signing time:             Sat 04 Apr 2026 15:13:36 +0000
Manifest this update:     Sat 04 Apr 2026 15:13:36 +0000
Manifest next update:     Sat 11 Apr 2026 15:13:36 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: xoLB8JtDI5uOqhseBW7DvESTDp7H8226T2M8I/EOALc=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:13:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13616 (0x3530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: Apr  4 15:13:36 2026 GMT
            Not After : Apr 11 15:13:36 2026 GMT
        Subject: CN=69d12aa0-e99f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:97:bc:f1:5c:8e:eb:f2:06:73:8b:55:6b:d0:
                    75:59:f7:ac:7c:8f:54:e4:db:bf:4a:d9:46:86:02:
                    5f:28:ea:c9:3a:22:5f:76:00:8a:2a:82:8a:42:7c:
                    59:64:cb:05:ff:a7:2b:52:62:b8:79:31:3b:cd:bf:
                    54:88:dc:87:e2:65:b6:b7:f4:3c:18:11:f4:b6:84:
                    85:cb:d9:6c:18:9a:14:7e:62:a6:b8:43:be:b6:a6:
                    ea:34:64:31:a2:34:fd:60:c6:3a:95:96:ff:b8:22:
                    5f:11:9a:49:14:1f:6c:f8:1f:d3:14:31:71:4d:bf:
                    82:cf:17:63:51:72:06:f3:c4:b1:4a:e8:22:f7:7f:
                    44:84:37:5d:3b:16:d8:7c:8c:cd:22:ff:72:25:ff:
                    85:c1:07:eb:9a:e9:69:ff:be:d2:b1:0a:7b:f7:cc:
                    f1:fa:39:2a:e8:1c:9d:0b:8a:01:d5:60:c2:be:a8:
                    0c:a5:b2:6d:3c:18:fd:d0:44:c1:2a:09:6e:13:55:
                    3e:ec:73:73:09:46:0d:5e:2a:60:b3:a5:95:7f:a7:
                    d8:75:9d:d2:07:f7:4e:84:cc:6b:07:4b:b4:f1:34:
                    1b:aa:5b:fc:3a:74:f0:6d:22:ba:04:b3:e3:3e:38:
                    4d:f5:7f:e8:e9:9e:57:f0:5f:f5:e5:73:b3:57:bf:
                    09:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:80:D5:16:8B:7D:30:A2:20:41:3D:22:85:33:C3:0C:46:CE:5E:04
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         64:f6:72:48:6f:5a:ad:ee:0d:6b:ee:1e:15:ca:82:e3:fb:08:
         54:32:f1:3c:46:c1:81:58:39:dc:79:46:f5:d8:e3:c1:5b:d9:
         d8:78:90:37:0a:5a:9a:24:c7:e5:af:88:27:dc:17:2c:86:f8:
         f0:f1:04:4e:5b:de:d8:9c:a4:4e:39:c7:99:33:be:cc:ea:89:
         05:20:f9:de:82:63:e7:83:dc:b5:0d:38:50:f8:20:51:87:ba:
         6f:66:aa:be:83:66:5f:c6:54:28:3b:cf:2d:08:b2:ce:b1:3a:
         83:a7:cb:2f:b4:d2:97:d3:61:e4:05:aa:9f:6f:20:cd:14:0f:
         cc:92:f6:1d:2b:9d:24:d6:c4:89:5a:58:91:83:45:bb:ab:3b:
         63:f4:d9:79:69:85:06:d7:44:00:1d:55:79:3c:76:8c:33:aa:
         6c:eb:e2:98:6d:a9:c9:96:f0:16:31:17:43:9d:83:45:80:1e:
         15:6e:58:09:0c:11:f0:eb:ea:b4:cf:f6:01:9e:b9:08:e6:97:
         1e:34:f5:65:a3:a0:c6:93:88:88:e8:fe:16:c8:39:58:04:d1:
         15:72:b5:e2:dd:de:53:c0:3d:e9:3e:ba:bf:af:a9:bf:d8:24:
         b7:19:77:8c:a2:62:d8:46:22:da:59:c1:20:cb:cf:0a:eb:f2:
         f5:2b:c7:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:36 2026 by rpki-client