Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
File:                     62gLfeTEobRDq9eZuvUkndSw6pA.mft (raw, json)
Hash identifier:          MVsjCXG0H2Zj3ClggbhFH08NLJKOAqoHrMoU0QEQ6zQ=
Subject key identifier:   5B:D4:04:BA:BC:1C:D4:60:A2:1C:59:01:F6:36:1C:86:95:9E:A2:41
Authority key identifier: EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90
Certificate issuer:       /CN=A91DC866/serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
Certificate serial:       3551
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
Manifest number:          353C
Signing time:             Sat 04 Apr 2026 14:49:20 +0000
Manifest this update:     Sat 04 Apr 2026 14:49:19 +0000
Manifest next update:     Sat 11 Apr 2026 14:49:19 +0000
Files and hashes:         1: 62gLfeTEobRDq9eZuvUkndSw6pA.crl (hash: TtrPAbcmmSmo9Wmed8eBSH3iie5/VFy2Pk16xKpebTY=)
                          2: D55D2990561F11E7B9B5FB2CC4F9AE02.roa (hash: f/lcS6bLLjVH8wwIobnaBz8sL5pzSiGiCHWpfFVVqW0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl
                          rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:49:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13649 (0x3551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC866, serialNumber=EB680B7DE4C4A1B443ABD799BAF5249DD4B0EA90
        Validity
            Not Before: Apr  4 14:49:19 2026 GMT
            Not After : Apr 11 14:49:19 2026 GMT
        Subject: CN=69d124f0-7a55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:bb:fb:c2:77:8a:c1:16:e1:dc:b1:dc:37:5c:
                    a9:e1:6b:19:53:43:a4:b5:0f:f6:2b:5c:8b:69:01:
                    31:93:e1:33:97:a6:e2:c4:cc:e8:e3:19:b6:7b:9f:
                    24:80:3b:78:0c:e5:84:68:59:aa:4c:b9:56:8d:b4:
                    49:29:d7:3e:3c:55:d3:66:a1:39:23:29:48:81:7f:
                    1f:c0:5b:f8:be:2b:c1:6a:d4:fc:21:5d:ac:1e:6c:
                    a3:fc:6f:16:44:f2:59:00:a0:26:22:21:c1:74:2d:
                    5f:17:ea:3c:3a:fa:c6:d3:70:cb:1f:95:5f:65:9a:
                    24:88:80:75:27:9d:6e:df:e8:8b:5c:69:a7:1b:9c:
                    20:de:9c:83:e5:49:10:87:9c:a9:ce:cb:f2:b9:ed:
                    4a:68:84:84:e2:c5:96:97:1f:2f:51:34:8b:ee:33:
                    54:7e:06:fd:1f:7e:7d:3a:65:81:84:84:d8:70:35:
                    7d:bc:af:c4:93:a5:af:a6:d1:fd:c6:6c:6d:06:a9:
                    1c:59:eb:cf:db:94:a4:2c:5c:fa:67:da:eb:9b:5e:
                    fa:6b:11:67:63:6b:53:21:08:fe:9c:a4:ea:a0:41:
                    01:20:9f:be:7f:8b:ea:10:f2:da:5f:d7:aa:49:1d:
                    ec:be:ae:13:fb:c3:ae:1a:e3:9a:ce:d0:b5:1c:8a:
                    6f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:D4:04:BA:BC:1C:D4:60:A2:1C:59:01:F6:36:1C:86:95:9E:A2:41
            X509v3 Authority Key Identifier:
                keyid:EB:68:0B:7D:E4:C4:A1:B4:43:AB:D7:99:BA:F5:24:9D:D4:B0:EA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/62gLfeTEobRDq9eZuvUkndSw6pA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC866/6A0DF9BA1D9611E2B7B5057F08B02CD2/62gLfeTEobRDq9eZuvUkndSw6pA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:92:e4:1c:7b:3d:6a:26:ed:9b:39:0a:05:de:a1:00:f4:5d:
         ca:a2:ba:be:65:ac:a2:57:cf:5c:81:1a:8e:fd:8d:6f:24:26:
         7e:61:07:21:0b:d6:9a:e1:87:e3:8b:0c:f7:80:47:87:52:dc:
         9e:37:c3:9d:74:82:6d:cd:03:82:26:db:7c:a9:0d:80:0a:f5:
         b9:27:0e:89:b7:bf:a2:0d:b4:91:b7:46:40:9f:38:cc:47:8c:
         05:fd:8b:27:69:80:8f:09:df:16:06:ca:70:a3:66:06:fc:b7:
         cd:20:c1:a5:8f:db:dd:bf:74:b7:f3:a8:46:55:7a:ab:74:32:
         a2:15:36:7f:54:a5:b3:4c:bf:9d:be:97:dc:fb:12:bf:45:f6:
         eb:4c:40:a3:d7:dd:82:77:fd:6e:78:ec:a8:96:07:bd:8b:32:
         cd:c7:df:a6:e2:b1:6c:1e:88:86:c8:dd:a8:d7:90:1e:e4:21:
         68:c6:bb:32:f6:1c:eb:05:ac:97:5b:45:a8:fc:98:91:86:96:
         02:c5:ab:df:73:d1:a0:dd:30:4e:dc:6b:fb:d6:d0:fa:c5:6f:
         87:1e:4c:12:7e:96:d9:de:b3:50:72:de:3e:5b:17:d9:57:e7:
         99:7d:f3:d5:60:06:a9:a3:ce:9a:7e:46:9b:7c:05:8f:38:41:
         dc:77:c0:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:08:08 2026 by rpki-client