Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
File:                     kIDbUP8LdD_6MredDdXDGQIdbiQ.mft (raw, json)
Hash identifier:          PTu33fcnv56noUSjbOPtU+Sh678pklBAQ4DXf8qxvmk=
Subject key identifier:   D1:BB:53:95:80:F1:31:7D:B5:16:F9:24:F3:42:E1:1F:89:71:B2:57
Authority key identifier: 90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24
Certificate issuer:       /CN=A91B5377/serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
Certificate serial:       EA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
Manifest number:          EA
Signing time:             Sun 05 Apr 2026 05:48:13 +0000
Manifest this update:     Sun 05 Apr 2026 05:48:13 +0000
Manifest next update:     Sun 12 Apr 2026 05:48:13 +0000
Files and hashes:         1: kIDbUP8LdD_6MredDdXDGQIdbiQ.crl (hash: Q1SvqrRqAG6WH48X7eWAoudlchihw+i4LQgKdg48LM4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl
                          rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:48:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 234 (0xea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5377, serialNumber=9080DB50FF0B743FFA32B79D0DD5C319021D6E24
        Validity
            Not Before: Apr  5 05:48:13 2026 GMT
            Not After : Apr 12 05:48:13 2026 GMT
        Subject: CN=69d1f79d-92f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:94:66:d8:06:03:54:4e:b8:80:11:65:95:2f:
                    9f:fd:ba:f7:03:77:c6:68:23:28:86:8c:c4:ab:27:
                    57:c7:40:d0:af:c0:94:c7:42:39:4d:20:a8:2b:70:
                    7f:04:ac:18:59:79:da:cb:d2:f0:a4:76:2c:a5:84:
                    b0:1b:46:10:ce:a0:1d:21:78:e8:e3:fc:06:84:a4:
                    82:2c:ec:34:4d:fa:d6:68:87:fd:fa:9b:5b:e6:64:
                    fb:81:4d:d4:a8:d5:5f:be:fb:8d:73:3a:1f:e7:f7:
                    35:7d:0c:09:26:ef:99:05:08:ed:ae:c1:df:e0:73:
                    1b:93:c0:a0:86:09:56:4b:6a:86:c4:f4:91:10:12:
                    55:aa:5c:17:dc:d4:8e:e1:f4:4c:97:28:83:d6:80:
                    cc:72:e7:ea:73:83:1d:ed:af:56:00:4b:cc:c5:7f:
                    da:7f:31:e9:67:e2:78:8f:4f:4d:49:23:68:69:b1:
                    5b:f1:d8:ed:49:35:e3:b1:3d:40:b4:b5:31:1f:9e:
                    e5:8d:55:bb:46:f0:5a:9d:3a:99:00:3d:ef:54:87:
                    eb:f4:50:d3:28:fe:a1:1c:6c:01:8c:ee:23:ce:15:
                    4f:c6:02:81:e7:23:9a:ae:b4:9e:31:4f:69:0e:55:
                    8d:c4:3d:e5:80:5e:ed:e6:bf:39:6e:44:64:73:74:
                    a7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:BB:53:95:80:F1:31:7D:B5:16:F9:24:F3:42:E1:1F:89:71:B2:57
            X509v3 Authority Key Identifier:
                keyid:90:80:DB:50:FF:0B:74:3F:FA:32:B7:9D:0D:D5:C3:19:02:1D:6E:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kIDbUP8LdD_6MredDdXDGQIdbiQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5377/F3C44A78CC5811EF99985D86C4F9AE02/kIDbUP8LdD_6MredDdXDGQIdbiQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d7:c0:d1:8f:71:0e:5b:70:d6:05:d6:10:f9:1c:34:6e:c6:b8:
         60:79:40:0b:36:9e:00:ba:f9:a7:34:46:40:72:02:7f:67:4e:
         b9:57:40:b6:97:8d:07:00:2e:c1:b6:dd:8c:5d:e8:7b:30:08:
         78:88:ae:80:01:f3:a8:e5:19:5b:42:46:2a:cb:07:5e:54:5d:
         77:14:7b:0e:09:ea:45:d5:73:51:3e:a6:1c:e7:72:47:5d:34:
         20:5b:a6:6e:b8:15:08:44:e2:14:2b:74:bf:f4:5d:52:6a:e2:
         61:1b:6d:29:a4:09:ad:72:29:d6:e3:ad:a1:b4:5e:3d:33:1b:
         e3:6b:e4:3d:d8:43:3a:9f:29:20:ac:c8:83:8a:8d:8a:05:af:
         eb:30:70:30:93:d5:2e:6c:28:cf:d1:fa:7d:15:51:0d:0b:4e:
         32:ec:67:18:11:9d:cb:77:3d:c4:3a:38:8e:eb:fc:b7:14:3e:
         4d:9f:af:97:b1:ee:d6:c5:2b:fc:46:a7:c1:c4:95:19:5d:57:
         b0:34:ba:ea:7a:ec:35:7c:30:5a:38:07:74:50:04:e1:2b:9c:
         f8:1f:c0:3e:f8:7f:1c:ec:f4:71:a3:ee:14:52:b8:51:0c:37:
         26:b0:61:47:3a:e8:fa:69:ad:b4:fe:4b:e0:24:0b:68:e9:f9:
         ab:fd:1f:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:01:21 2026 by rpki-client