Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
File:                     exEvnr7DQt_Kx3TrXCaBElxl4M8.mft (raw, json)
Hash identifier:          CF6fR8H1crlfVjly0WRvERuq1ZPBFj+oqp2j+c2bVYo=
Subject key identifier:   B2:6B:BE:17:C4:C1:E5:CF:F8:A8:D8:6F:78:61:66:34:3D:AF:A6:D6
Authority key identifier: 7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF
Certificate issuer:       /CN=A91BFCB1/serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF
Certificate serial:       1018
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
Manifest number:          100F
Signing time:             Sat 04 Apr 2026 17:19:57 +0000
Manifest this update:     Sat 04 Apr 2026 17:19:56 +0000
Manifest next update:     Sat 11 Apr 2026 17:19:56 +0000
Files and hashes:         1: exEvnr7DQt_Kx3TrXCaBElxl4M8.crl (hash: fg1c1cL1xn4czSfMY6QnCce9RF3RTIOGXTuQPj+fqSU=)
                          2: FD58613E7B7B11E99CCAAF73C4F9AE02.roa (hash: oyiwfM//j6jTxFCREO16zqCWP6KF1/ZsVC+VRbLetKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl
                          rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:19:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4120 (0x1018)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFCB1, serialNumber=7B112F9EBEC342DFCAC774EB5C2681125C65E0CF
        Validity
            Not Before: Apr  4 17:19:56 2026 GMT
            Not After : Apr 11 17:19:56 2026 GMT
        Subject: CN=69d1483d-591c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:35:76:5c:cc:94:22:cf:5d:a7:71:bd:ed:2f:
                    9b:3a:f4:16:4c:9e:a4:a1:4e:b7:88:05:8e:6d:71:
                    cb:be:ec:78:b1:b6:fd:fd:2c:3d:c6:48:62:d0:f2:
                    67:b3:da:60:a4:3e:fa:c2:f7:d2:40:5c:94:18:31:
                    3f:90:67:7e:f3:2e:8a:86:e7:85:d4:d2:b5:72:b0:
                    05:6a:e3:e3:46:01:a0:22:47:af:bf:bb:c3:c4:df:
                    c3:5f:7b:bb:45:4a:ba:67:a5:27:3f:f1:9c:a6:27:
                    9f:99:c6:6c:bc:90:08:db:6a:89:e4:6d:d1:a2:3e:
                    ea:bc:a1:09:8a:11:f1:e9:cd:68:4f:52:d7:ef:f9:
                    ea:dd:d7:fa:2e:37:52:ae:cb:04:de:ee:e9:1b:3d:
                    06:c0:9d:7b:66:e4:00:12:6c:9d:87:0b:37:bc:5b:
                    2b:5f:cb:81:f4:89:c5:55:26:b5:78:9e:5f:81:f2:
                    70:2c:f9:30:0a:ed:6d:3c:cd:a5:16:6d:c5:1c:f5:
                    fa:dd:ce:67:49:e8:33:2d:c3:25:5a:86:bc:45:ec:
                    01:dd:06:86:03:1b:79:43:17:8d:86:d7:50:67:36:
                    63:0b:89:99:a7:03:08:7c:8e:22:42:d4:b1:bd:80:
                    0a:51:29:93:59:7c:35:f7:17:22:7e:71:99:4c:c4:
                    37:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:6B:BE:17:C4:C1:E5:CF:F8:A8:D8:6F:78:61:66:34:3D:AF:A6:D6
            X509v3 Authority Key Identifier:
                keyid:7B:11:2F:9E:BE:C3:42:DF:CA:C7:74:EB:5C:26:81:12:5C:65:E0:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/exEvnr7DQt_Kx3TrXCaBElxl4M8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFCB1/6E872D5E656F11E9BBE8F724C4F9AE02/exEvnr7DQt_Kx3TrXCaBElxl4M8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:59:72:24:09:f4:85:32:16:86:eb:50:29:91:62:a6:90:a8:
         e9:fa:62:83:00:02:ec:3f:cc:86:a2:35:0f:ae:56:08:e2:fa:
         80:48:96:4f:c5:46:0d:b2:86:9e:72:cf:b5:6b:32:19:ac:d9:
         53:d2:3c:4c:b6:d7:7c:b9:05:83:c0:ff:7e:3b:9e:8c:16:4d:
         1c:5d:ee:d5:62:0d:c4:8c:90:9d:40:a0:e9:38:60:b1:f1:0c:
         2a:43:3e:d9:e7:6f:41:a9:62:4e:53:29:eb:ae:ea:14:b2:ea:
         2e:4d:1d:1e:e2:f7:24:fb:d1:86:87:c3:ee:43:7d:bc:30:41:
         fb:8d:65:d5:85:38:7e:fe:88:de:51:78:a7:13:56:d0:70:b9:
         fc:05:41:cc:a7:a4:a6:7c:5b:5c:1a:17:50:6d:a2:14:9d:a7:
         31:c1:b8:6a:d2:10:e3:8c:d0:d9:28:a4:58:6e:10:24:6d:4b:
         fb:1a:65:ca:78:7f:99:18:da:be:fc:bf:6e:4b:9f:46:0d:19:
         7e:37:37:2f:eb:c5:72:7b:55:dc:a4:b6:ed:2b:69:eb:f6:01:
         c3:4f:21:ea:d3:5b:b8:d3:7f:ee:22:29:42:f4:f7:d8:f2:cd:
         71:0f:02:b1:57:09:b5:cb:69:ae:fd:cc:3b:6d:48:21:d1:45:
         fc:df:cc:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:00 2026 by rpki-client