Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
File:                     Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft (raw, json)
Hash identifier:          bGV9cQ6Njda8kqu0SkQGxlupOXu5+nC2j/K6lW5IMnw=
Subject key identifier:   DD:B4:DE:BD:3B:1F:1A:6D:FE:17:DC:27:3D:7E:1A:BF:44:CB:64:02
Authority key identifier: 0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA
Certificate issuer:       /CN=A91C8EDF/serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
Certificate serial:       027E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
Manifest number:          027A
Signing time:             Sun 05 Apr 2026 01:37:44 +0000
Manifest this update:     Sun 05 Apr 2026 01:37:44 +0000
Manifest next update:     Sun 12 Apr 2026 01:37:44 +0000
Files and hashes:         1: Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl (hash: wtvxKsEQvF/+i/+CC04Bwg+EdAbH1ZctmRJaIS2GZbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl
                          rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:37:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 638 (0x27e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8EDF, serialNumber=0A3CFC7F395A34BABE31B8CA4623D31C76A8D9FA
        Validity
            Not Before: Apr  5 01:37:44 2026 GMT
            Not After : Apr 12 01:37:44 2026 GMT
        Subject: CN=69d1bce8-33b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:25:d5:6b:92:ee:85:ab:ca:20:ae:3a:e2:
                    63:4f:52:80:4f:b0:8a:63:97:d8:e4:19:fc:1c:53:
                    77:74:fb:38:e5:c5:32:37:47:c8:4b:25:de:de:32:
                    1c:ad:3e:0c:dd:3d:87:88:83:a0:89:00:e2:8f:7e:
                    28:98:21:f8:29:91:03:11:c7:97:88:6a:ee:b4:24:
                    d2:3e:c7:ec:65:04:21:57:f5:b3:35:ee:b3:08:3d:
                    0d:d6:e3:d7:f2:f8:65:ab:af:3d:08:25:c8:51:7c:
                    3d:51:7e:6e:bd:25:b9:5c:49:e9:4d:bb:68:69:5a:
                    00:a0:50:59:d9:09:f5:8f:52:bb:b4:04:f6:2a:dc:
                    97:d2:0c:56:ec:74:aa:69:fb:2b:fe:af:99:8c:48:
                    64:f7:f8:c5:4b:a4:7d:8d:11:d6:13:98:86:2d:a1:
                    40:ce:f1:dd:2e:c2:1b:88:6f:b8:ec:a5:e7:1c:0d:
                    fe:37:2a:f7:34:0f:28:96:89:ab:2b:1d:9b:09:e9:
                    39:a3:c8:16:65:08:40:5a:63:c2:86:06:70:38:10:
                    e5:e5:72:2d:80:fc:83:78:70:6a:6c:84:2c:a0:97:
                    1d:d2:8b:c4:4f:44:c1:c4:8e:60:2a:fc:e3:fd:3f:
                    b7:77:b1:15:c6:1a:05:51:96:aa:a5:52:ed:20:71:
                    0d:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:B4:DE:BD:3B:1F:1A:6D:FE:17:DC:27:3D:7E:1A:BF:44:CB:64:02
            X509v3 Authority Key Identifier:
                keyid:0A:3C:FC:7F:39:5A:34:BA:BE:31:B8:CA:46:23:D3:1C:76:A8:D9:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cjz8fzlaNLq-MbjKRiPTHHao2fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8EDF/F46ADDE67C5711EDBF213767C4F9AE02/Cjz8fzlaNLq-MbjKRiPTHHao2fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         67:d1:bf:b0:eb:98:3b:9e:15:5a:5a:77:84:94:d4:a5:59:60:
         ef:02:0d:dc:fc:cb:64:ec:56:ec:2f:13:56:06:b0:4a:10:b7:
         ee:71:f7:6d:ae:c5:d8:0f:fe:8c:0b:0a:14:ac:03:20:bd:fb:
         60:2f:19:0c:55:f6:26:66:78:1e:87:4d:02:49:a6:4e:af:f3:
         33:15:47:c3:b1:d7:71:a4:e8:8f:76:15:3a:a0:2b:ed:48:a1:
         60:48:38:e0:d4:db:d4:9d:5f:79:3f:f9:97:0e:55:fe:cd:2a:
         6f:5c:4b:f5:fd:1f:8a:9f:0e:5b:33:f4:32:7b:b9:1f:c1:35:
         2d:28:2a:49:6e:b3:98:bf:b0:11:4a:1d:0a:c5:3e:27:c6:93:
         b6:07:a2:02:8c:23:cb:38:5e:40:c4:48:31:f1:64:6b:7f:d1:
         1c:2d:3c:a2:0f:86:be:cc:a2:a2:b2:48:88:d8:22:8d:d4:26:
         84:b1:b8:db:15:f3:e1:72:2c:45:b6:7f:1c:7c:eb:53:31:2e:
         cb:96:19:11:2d:11:88:17:d3:e3:8b:7f:f2:29:af:a0:44:1c:
         8c:14:64:37:c3:a1:7e:3c:d2:0b:b3:c1:58:66:20:58:db:b6:
         12:c8:44:63:30:97:0d:69:4c:a1:51:b4:f6:d0:23:93:98:28:
         2c:cb:88:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:04:07 2026 by rpki-client