Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
File:                     Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft (raw, json)
Hash identifier:          TYzrxeQXCrLHYBh78taz69jWfXxuTUjbakZqISzcBVI=
Subject key identifier:   A0:2D:C8:F2:6E:13:81:6A:DD:2E:76:4B:E8:B9:25:51:04:75:BB:23
Authority key identifier: 09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB
Certificate issuer:       /CN=A91CBF47/serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
Certificate serial:       22
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
Manifest number:          22
Signing time:             Fri 06 Mar 2026 14:31:58 +0000
Manifest this update:     Fri 06 Mar 2026 14:31:58 +0000
Manifest next update:     Fri 13 Mar 2026 14:31:58 +0000
Files and hashes:         1: Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl (hash: fTu1evkUpwmGTonS+VW1ZRGf6aSnZ+fKHaV1Pog2hEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl
                          rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 13 Mar 2026 14:31:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBF47, serialNumber=09DD0EA2D20311F793E4743F0865C84A02473FDB
        Validity
            Not Before: Mar  6 14:31:58 2026 GMT
            Not After : Mar 13 14:31:58 2026 GMT
        Subject: CN=69aae55e-ca5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fc:53:79:28:c6:0f:d0:d2:1c:ca:2c:a5:9a:
                    5e:c6:9e:d6:5d:1d:6e:46:b1:83:b7:a1:0f:f0:ee:
                    ad:08:ed:0c:be:9f:3f:e3:dc:64:a6:f3:23:c9:be:
                    2a:de:dd:fe:db:e4:b0:4e:5b:49:06:14:ca:fc:cb:
                    f9:e4:f7:ad:df:56:41:1b:e5:bf:b0:41:00:01:98:
                    73:92:98:78:e6:1c:9b:e9:36:8a:41:b1:6b:a5:6b:
                    81:32:cb:54:f9:68:7e:32:0f:86:bb:6b:4e:89:09:
                    f1:4e:af:cc:68:54:ef:4c:1c:ee:37:3d:a6:f2:a4:
                    2d:72:01:94:ee:00:74:f7:d9:f2:66:1f:d6:20:c7:
                    6f:33:bd:33:ea:75:c5:12:8c:39:c8:e2:cc:9a:7a:
                    52:87:22:47:51:64:1e:78:3c:86:a1:af:ec:5c:1e:
                    9e:bb:f3:a7:58:73:9f:6a:2e:61:c5:7f:8f:92:54:
                    b8:39:16:79:60:ec:d5:a0:7a:c2:92:3f:8d:0b:1c:
                    36:01:33:93:c6:09:7f:9f:09:f1:58:47:61:0e:63:
                    af:45:52:6c:c0:3f:9c:a7:1d:36:aa:e4:68:5e:89:
                    1d:e8:72:65:48:2e:41:b3:86:19:cd:33:4e:5f:ff:
                    31:73:83:82:c8:2c:fa:31:9b:89:0e:94:17:fa:90:
                    00:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2D:C8:F2:6E:13:81:6A:DD:2E:76:4B:E8:B9:25:51:04:75:BB:23
            X509v3 Authority Key Identifier:
                keyid:09:DD:0E:A2:D2:03:11:F7:93:E4:74:3F:08:65:C8:4A:02:47:3F:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/Cd0OotIDEfeT5HQ_CGXISgJHP9s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/0DFAEE48F28B11F0B3FDFE426B6F56BC/Cd0OotIDEfeT5HQ_CGXISgJHP9s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:5c:8d:52:a0:c0:43:52:9b:4c:2a:c5:6a:4c:63:29:8e:84:
         10:b0:c5:a6:3f:a3:04:6c:ef:96:b0:b8:14:1f:95:53:6d:7d:
         5f:c0:21:94:fa:5d:9f:19:dc:fa:39:64:52:d3:4d:e6:c7:69:
         54:26:4b:6c:00:a4:da:2d:9a:87:87:81:9c:80:b2:df:a2:85:
         97:c2:93:f7:2d:35:37:f7:3e:2a:29:d6:9e:ea:13:2c:81:43:
         7f:9c:61:5d:ea:90:c6:62:25:ff:67:79:d5:1e:5a:76:aa:8f:
         ba:e7:d7:49:31:93:0f:04:72:5f:40:a6:03:57:03:1c:6f:4a:
         75:98:fa:fd:47:29:4c:f6:bd:fd:d2:21:05:85:13:48:4a:ea:
         e5:10:54:fb:b2:6f:af:fb:b1:f0:ba:cd:1d:f9:3f:5b:8b:1d:
         77:fb:35:4a:b7:a6:a6:89:a3:9a:73:ee:b0:d4:df:bb:da:10:
         cc:eb:17:a2:1e:2b:42:67:b4:2f:eb:bb:34:6f:1b:b9:f8:56:
         69:85:9d:20:2b:cf:80:98:7c:26:10:60:9f:f7:b9:e9:6d:40:
         96:70:cf:2f:aa:7d:7c:0d:7e:0b:35:7e:c1:bb:e2:a1:71:4c:
         e1:50:ac:96:f1:18:fe:58:97:75:de:d8:82:f5:58:d3:54:c9:
         f2:74:45:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:34:35 2026 by rpki-client