Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
File:                     hYu8kCwHf24DE67cSds25v7yNLI.mft (raw, json)
Hash identifier:          KQWfRBFRFeWUmfzZ8vlbl740TEj7fg5IS+CfPfP3zoY=
Subject key identifier:   ED:E1:44:E6:A9:E4:7C:94:5B:4C:D0:74:3D:64:EF:47:CC:C3:DE:96
Authority key identifier: 85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2
Certificate issuer:       /CN=A91DE334/serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
Manifest number:          36
Signing time:             Sun 05 Apr 2026 07:56:48 +0000
Manifest this update:     Sun 05 Apr 2026 07:56:48 +0000
Manifest next update:     Sun 12 Apr 2026 07:56:48 +0000
Files and hashes:         1: hYu8kCwHf24DE67cSds25v7yNLI.crl (hash: NdwBfzq7Xzy1Mqrs/u9RV25AG4KFlWm3IB2wUtHuu9g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl
                          rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:56:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DE334, serialNumber=858BBC902C077F6E0313AEDC49DB36E6FEF234B2
        Validity
            Not Before: Apr  5 07:56:48 2026 GMT
            Not After : Apr 12 07:56:48 2026 GMT
        Subject: CN=69d215c0-fe7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:56:4b:63:62:1a:c1:5a:72:01:c8:3d:2a:d4:
                    1c:25:87:2c:da:a4:cb:19:f9:47:48:40:c1:40:df:
                    ba:12:a3:88:96:2e:6f:4c:97:ba:eb:4a:c9:73:c7:
                    dd:88:2a:52:af:b5:a0:14:8b:82:b5:0c:0e:05:fa:
                    d2:56:aa:13:f2:bb:f1:65:a9:c5:ce:5d:85:0b:8c:
                    93:0b:c9:0e:20:8b:33:51:7f:0d:e4:ef:fe:f9:7a:
                    95:5c:df:cb:b4:73:22:e8:96:99:c0:ca:86:2a:dc:
                    1c:24:29:64:a2:d6:80:24:4e:c7:1b:50:dd:ae:03:
                    07:fe:5d:49:14:eb:1f:05:7c:61:93:09:e5:99:11:
                    a5:5a:0f:ff:6d:9e:cb:e1:ed:d7:7e:2f:eb:44:9a:
                    09:cc:48:23:ce:33:67:3c:88:ad:41:c5:04:bb:73:
                    32:f3:42:db:30:99:24:9d:3d:61:19:b9:b7:a4:4b:
                    9d:2d:13:35:f1:d4:3e:49:21:0e:a3:bc:bc:91:4f:
                    0a:ee:7c:77:75:1f:96:d4:4a:2c:c8:b9:66:cf:11:
                    de:d5:34:4a:c2:a1:e3:19:33:27:fa:76:4c:54:07:
                    d4:f7:8d:e7:ef:00:0f:07:b6:48:5e:df:d3:b9:db:
                    e0:8a:6a:d9:b6:2d:29:9e:5d:10:2c:47:b7:df:3e:
                    dc:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E1:44:E6:A9:E4:7C:94:5B:4C:D0:74:3D:64:EF:47:CC:C3:DE:96
            X509v3 Authority Key Identifier:
                keyid:85:8B:BC:90:2C:07:7F:6E:03:13:AE:DC:49:DB:36:E6:FE:F2:34:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYu8kCwHf24DE67cSds25v7yNLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DE334/C5126CCEE57911F0836EEAA1416F56BC/hYu8kCwHf24DE67cSds25v7yNLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4b:f9:05:53:29:f1:c0:80:33:16:e3:61:4c:8a:6d:41:58:2d:
         6b:d0:54:4b:1f:5d:1b:d4:9f:62:1e:eb:60:16:9e:08:87:16:
         13:e3:3e:a2:ef:1a:eb:ab:f9:bc:e3:c5:3f:1d:da:a2:e9:5f:
         14:a8:60:53:a1:c5:9f:6e:04:2e:aa:ac:d9:ac:ac:1c:66:d7:
         ad:74:11:2e:6f:71:41:a5:4c:09:64:85:de:53:3e:69:06:62:
         bd:c5:cf:82:59:b8:9e:57:e4:5c:ae:d8:c0:8f:ab:08:f3:45:
         7e:a0:a1:ac:ab:6f:49:e8:77:6a:ca:e3:39:85:63:e1:12:bb:
         9a:13:36:91:32:27:d2:92:63:23:08:b4:4e:dd:7b:cb:27:0f:
         cb:6c:99:3d:fc:cc:ae:f9:0c:db:8a:15:19:50:8b:ec:aa:7d:
         be:ae:7a:ea:8c:1c:00:4e:1f:5e:04:69:2b:e2:4b:6b:50:72:
         2c:cb:25:9f:e9:18:68:38:a7:dd:ec:93:79:9f:86:4f:1f:00:
         10:36:1e:c5:18:02:a9:50:e8:9e:ad:81:d6:95:f4:da:1f:1d:
         68:0f:7b:b4:06:bb:34:19:03:18:01:5d:37:8f:72:94:94:00:
         16:50:b9:43:80:8e:39:d1:e8:9e:97:b4:92:4f:5a:94:51:88:
         81:ed:f4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:59 2026 by rpki-client