Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
File:                     b3tF49x2JsN_igHgq46krwVfSYo.mft (raw, json)
Hash identifier:          IbFw8f/kw5XnDxB9klB5gpcNo17KLowzkkhtHjzamCs=
Subject key identifier:   EF:11:C5:3B:24:C4:E1:19:2D:76:BD:99:0A:DB:00:56:F9:07:AB:8E
Authority key identifier: 6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A
Certificate issuer:       /CN=A91F0AF0/serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
Certificate serial:       11C1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
Manifest number:          1EC6
Signing time:             Sat 04 Apr 2026 17:04:17 +0000
Manifest this update:     Sat 04 Apr 2026 17:04:17 +0000
Manifest next update:     Sat 11 Apr 2026 17:04:17 +0000
Files and hashes:         1: b3tF49x2JsN_igHgq46krwVfSYo.crl (hash: lVgPk+3zDdD3n/bi6E9Z2/HvWuVKPU5W4Heu6pMRON4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl
                          rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:04:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4545 (0x11c1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F0AF0, serialNumber=6F7B45E3DC7626C37F8A01E0AB8EA4AF055F498A
        Validity
            Not Before: Apr  4 17:04:17 2026 GMT
            Not After : Apr 11 17:04:17 2026 GMT
        Subject: CN=69d14491-fb37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:1f:82:e9:a7:45:c4:c6:67:9f:2d:be:bf:7a:
                    bb:8b:88:51:bc:2a:b2:6e:cc:5d:b9:1a:6d:ea:40:
                    bb:13:bf:ef:9e:94:dd:f4:3f:0d:64:4b:1e:ea:36:
                    d0:fe:ea:02:0f:cf:6e:60:e9:80:49:f8:3d:b2:18:
                    9c:cd:de:18:0c:2e:7a:1b:d4:f1:f6:f7:e7:2b:12:
                    0f:3a:a6:b2:1e:2e:6b:bf:cc:95:e4:ba:2b:8f:d2:
                    d7:ac:e9:4f:b1:76:2f:a9:45:1b:97:b8:cc:cf:17:
                    8f:21:31:9d:f2:51:1c:67:ea:e8:c0:e5:8e:2f:22:
                    d4:a5:5b:f3:18:85:78:02:26:76:ca:1c:0d:2a:b8:
                    4c:21:c5:d5:d8:5d:c0:6e:c3:f3:aa:e7:95:80:83:
                    af:91:50:aa:9c:f0:f5:ac:24:29:2d:9b:69:80:b8:
                    fd:bf:df:bc:8c:eb:56:0d:c4:2a:e4:b9:a6:83:dd:
                    53:16:ce:ec:ed:d2:7e:9a:29:e7:17:75:be:10:ee:
                    32:86:d4:92:1e:5d:e1:ec:48:f9:41:d8:07:34:a4:
                    b1:77:02:65:6e:8e:41:ae:cb:ee:ee:ea:43:ad:9d:
                    7f:0c:65:a5:80:db:4c:42:0a:e0:9d:15:98:6c:a2:
                    41:51:cc:20:24:49:ec:11:a5:04:4e:5c:c0:89:22:
                    e1:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:11:C5:3B:24:C4:E1:19:2D:76:BD:99:0A:DB:00:56:F9:07:AB:8E
            X509v3 Authority Key Identifier:
                keyid:6F:7B:45:E3:DC:76:26:C3:7F:8A:01:E0:AB:8E:A4:AF:05:5F:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/b3tF49x2JsN_igHgq46krwVfSYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F0AF0/E37629500FFF11E98815AE22C4F9AE02/b3tF49x2JsN_igHgq46krwVfSYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:cc:e9:32:72:46:d4:2f:f7:f3:b8:e1:a6:f7:8e:ad:27:43:
         97:8e:bb:8d:b5:61:73:10:c9:1e:d9:6e:bb:3a:75:b6:78:98:
         31:15:f4:16:3c:4d:7c:18:c8:0e:44:ac:ca:0f:19:95:5c:00:
         73:87:a8:db:74:f1:1e:3e:b8:94:e2:02:5e:37:7f:d5:98:74:
         fb:5d:cb:da:51:2d:85:4c:00:7f:d0:2a:ad:54:0e:08:ec:a4:
         5d:44:ab:74:41:67:bc:e1:37:ef:a8:42:5c:39:5a:bb:fe:82:
         4e:79:8e:de:83:98:94:a9:d5:17:65:64:e4:3e:dc:b0:46:cf:
         7a:6f:57:13:68:9a:ea:93:21:92:ce:6b:2b:9a:6f:26:19:f3:
         b4:3c:7b:9a:56:85:b3:25:97:b5:23:27:e8:bd:47:23:e2:8f:
         fe:61:62:67:e2:f8:47:e0:e8:c7:b2:0d:ca:b4:4f:d8:73:b0:
         8d:7f:1b:98:ac:73:ca:a2:18:d8:30:97:f6:0a:42:65:52:ab:
         7c:63:7e:82:d0:eb:a2:f5:f5:04:71:84:fb:68:90:95:2b:c5:
         b5:e9:49:bf:ce:f1:c9:4f:e8:8d:34:3d:61:13:aa:81:02:98:
         3c:ae:91:10:84:ba:5a:ad:87:b7:d6:ec:cc:0a:ee:35:86:16:
         47:f1:79:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:54:00 2026 by rpki-client