Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
File:                     4UpZOzEqmIVz16Xd-uB_kSaTyII.mft (raw, json)
Hash identifier:          lM98uDcm5YnoEXGAOaoWS4Eozp1uEdfUvsHukvZ4up0=
Subject key identifier:   8C:04:36:60:F1:72:09:21:B3:E7:FF:FC:FB:B5:57:A6:C4:53:2A:7A
Authority key identifier: E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82
Certificate issuer:       /CN=A91D4ACD/serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
Certificate serial:       0127
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
Manifest number:          0127
Signing time:             Sun 05 Apr 2026 05:06:04 +0000
Manifest this update:     Sun 05 Apr 2026 05:06:04 +0000
Manifest next update:     Sun 12 Apr 2026 05:06:04 +0000
Files and hashes:         1: 4UpZOzEqmIVz16Xd-uB_kSaTyII.crl (hash: cWrjINsaC18F2fWFNbO6K85NvaY+HMHsFQdEf/0tyiA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl
                          rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:06:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 295 (0x127)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4ACD, serialNumber=E14A593B312A988573D7A5DDFAE07F912693C882
        Validity
            Not Before: Apr  5 05:06:04 2026 GMT
            Not After : Apr 12 05:06:04 2026 GMT
        Subject: CN=69d1edbc-1014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:25:47:3f:6b:1f:92:9f:8c:3f:7e:6b:53:71:
                    6b:2e:48:15:e7:ac:ef:6f:29:ec:d8:93:cd:9c:f6:
                    59:6e:bb:75:8a:71:c0:d7:87:6d:71:8e:c7:c9:8c:
                    97:dc:dc:b8:1d:5e:7c:c1:3a:68:b1:4f:f2:7f:3d:
                    dc:2b:1c:47:c1:f6:fc:54:5e:87:25:03:f3:37:ff:
                    a9:55:19:fb:71:99:f0:5a:7e:2b:22:82:60:50:0d:
                    5a:7e:f5:d9:2e:d2:a8:2a:a8:44:a4:44:d1:a5:90:
                    a2:16:23:51:cc:1d:d9:ea:80:88:32:f3:23:c8:3d:
                    68:a8:04:5e:11:d1:60:53:49:c8:a2:b3:f5:17:fe:
                    25:48:e8:0e:92:d3:72:49:76:ed:92:c1:46:3c:c4:
                    ab:17:c0:5d:41:3b:82:08:19:d4:42:1e:96:ad:4e:
                    9f:71:5b:09:02:34:b3:cb:7e:4e:d6:e5:23:8a:bf:
                    1e:c8:d9:e7:f1:e0:29:f7:68:60:14:e6:a1:f2:40:
                    6a:dd:81:9c:ba:fc:47:f0:75:de:a9:4a:20:a5:2d:
                    18:45:01:3c:bf:bb:9d:4a:74:28:12:dc:fb:8e:27:
                    5c:c5:86:b1:6a:82:b2:10:70:20:ec:4c:aa:fc:d8:
                    80:70:da:7d:b0:b8:98:6f:0d:e7:33:20:28:2d:99:
                    12:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:04:36:60:F1:72:09:21:B3:E7:FF:FC:FB:B5:57:A6:C4:53:2A:7A
            X509v3 Authority Key Identifier:
                keyid:E1:4A:59:3B:31:2A:98:85:73:D7:A5:DD:FA:E0:7F:91:26:93:C8:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4UpZOzEqmIVz16Xd-uB_kSaTyII.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4ACD/29031A3A756E11EF9CA46E51C4F9AE02/4UpZOzEqmIVz16Xd-uB_kSaTyII.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:86:d8:ba:f9:84:e2:2f:ea:42:95:f4:64:e2:d1:b3:15:f2:
         0f:52:3d:89:03:57:c9:f8:32:9c:bd:d9:a4:05:75:8b:b5:73:
         c3:3f:22:8b:43:75:d6:25:53:5a:fb:ff:95:b0:be:a2:16:8e:
         e3:62:c7:1d:f0:ee:b0:76:70:0d:3b:c9:6b:7b:90:20:26:de:
         bc:fd:32:95:91:26:08:0a:23:80:7a:6d:b1:0f:1b:32:02:aa:
         8b:4d:ce:8b:76:f1:95:46:2f:9e:75:65:29:9c:40:bc:3e:32:
         52:7f:d5:55:48:ce:23:57:ce:f5:b2:0f:ec:8e:32:a3:40:4f:
         43:6e:94:0c:0b:5c:ad:49:f3:05:1f:d0:ff:90:6d:0d:b5:42:
         77:19:d5:c0:27:49:3c:f1:87:24:bf:51:2f:47:68:e4:97:f3:
         6d:d4:3c:06:0c:39:86:94:ef:a5:50:25:8f:40:10:3f:ef:8e:
         ae:0e:5e:1f:ab:8a:d4:53:5d:e7:24:9f:37:8c:00:c6:c6:4b:
         92:cb:00:8f:d8:f2:64:aa:1c:e1:6d:94:f6:00:7f:15:53:f4:
         52:23:d0:36:7b:85:c9:2e:4b:92:f2:f6:cc:c8:44:e0:65:cc:
         0c:6d:24:87:60:5c:1b:34:8c:bc:ad:50:8c:07:f8:e5:c5:20:
         f7:65:d7:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:39:58 2026 by rpki-client