Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
File:                     ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft (raw, json)
Hash identifier:          amM/PPJMxnhRxloLbGIBLfwswsw8zrONFvEmuEJWwRg=
Subject key identifier:   3F:21:73:43:37:1B:50:E3:AB:84:07:93:B6:15:20:CC:EC:74:24:6B
Authority key identifier: 13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77
Certificate issuer:       /CN=A91F89D9/serialNumber=131570B4535F840302530DD1317442316309C177
Certificate serial:       0137
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
Manifest number:          012B
Signing time:             Sun 05 Apr 2026 05:03:37 +0000
Manifest this update:     Sun 05 Apr 2026 05:03:37 +0000
Manifest next update:     Sun 12 Apr 2026 05:03:37 +0000
Files and hashes:         1: ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl (hash: LWKM2+3eWJiFBRfvEeSGfpzMqXnyLUxQ6uSPdSXZKqc=)
                          2: CDD43C182FFB11F099B57A7CC4F9AE02.roa (hash: M+cyWKbUFQNlRI1m90KUe0FaVezt/HgotqvoprldJAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl
                          rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:03:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 311 (0x137)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F89D9, serialNumber=131570B4535F840302530DD1317442316309C177
        Validity
            Not Before: Apr  5 05:03:37 2026 GMT
            Not After : Apr 12 05:03:37 2026 GMT
        Subject: CN=69d1ed29-b259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:72:2b:75:df:b6:00:36:8f:d1:78:41:05:0b:
                    ed:ad:75:8b:e8:0b:8b:d1:c6:fd:27:c7:d3:9a:53:
                    a2:56:7c:40:71:ac:2a:2a:43:70:25:e7:86:53:49:
                    0c:3a:be:3b:2b:65:2a:50:b9:16:cd:e4:dd:f1:aa:
                    11:c5:39:7e:0b:25:a0:a9:a3:d4:f2:37:51:e8:c8:
                    45:ca:f1:1d:ab:bd:90:0a:19:3e:0b:7f:3f:9a:06:
                    cc:ec:a6:17:26:e5:ce:33:d4:53:6f:09:69:2e:c4:
                    87:4d:8e:12:a0:aa:ff:cc:54:e9:44:25:14:97:cb:
                    1c:c0:76:62:c8:0b:84:9c:50:63:2a:ea:ef:45:fd:
                    eb:17:79:42:b6:ff:f3:ab:f7:bc:9a:f3:cd:ae:9b:
                    d8:6b:ae:43:72:67:dd:9e:ff:86:10:c6:a0:2d:b8:
                    46:a8:ee:e8:85:cf:a1:0f:50:3e:26:19:77:9d:f4:
                    87:0d:88:62:38:66:f0:47:e9:4f:70:aa:b7:4e:3f:
                    ee:2f:95:a0:8d:22:b9:bf:20:da:f2:4a:46:da:38:
                    ea:f2:c9:bf:f9:df:2f:3a:5b:46:c2:0c:5a:73:88:
                    3f:45:9a:69:c5:52:6f:9b:d7:02:fd:a1:9f:03:d8:
                    da:aa:8b:bc:f9:05:d2:db:f1:b1:b2:d6:ee:3d:f9:
                    db:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:21:73:43:37:1B:50:E3:AB:84:07:93:B6:15:20:CC:EC:74:24:6B
            X509v3 Authority Key Identifier:
                keyid:13:15:70:B4:53:5F:84:03:02:53:0D:D1:31:74:42:31:63:09:C1:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ExVwtFNfhAMCUw3RMXRCMWMJwXc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F89D9/F56037A66F5C11EF835A7B66C4F9AE02/ExVwtFNfhAMCUw3RMXRCMWMJwXc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ce:57:3e:aa:6e:b8:ed:db:cc:36:d0:2d:ea:ec:41:7c:d6:16:
         17:c5:7a:42:94:4b:45:45:9e:ab:50:a1:af:a4:0d:7e:ce:7c:
         e7:0b:2f:c8:d9:74:ed:ef:b5:94:d2:0b:89:29:62:cb:6a:87:
         83:76:9e:be:49:37:c7:78:c8:78:b3:32:45:4e:84:ed:33:09:
         00:16:d7:b6:b7:6d:22:f0:c1:f1:93:33:b8:dc:f3:b8:83:e5:
         3d:7a:7c:58:5e:47:0a:ba:de:e9:2b:d6:a7:9c:9c:0d:ea:76:
         bc:a7:b4:b5:ff:ee:20:17:6e:a5:e6:d3:2b:51:81:c8:24:e2:
         38:65:9f:4c:fe:b8:c5:b6:30:80:dc:4e:81:32:3f:72:d4:82:
         52:2f:b0:bc:eb:ba:10:04:fd:f4:e3:19:52:ca:07:a1:2f:1c:
         0f:1d:16:2f:a9:7c:9c:c4:be:74:fb:a9:a8:f3:a4:0c:69:66:
         0e:cc:6b:b1:c1:8a:15:31:d4:77:83:35:12:5e:c5:bd:82:93:
         88:16:89:44:44:df:70:b7:e3:e7:61:a7:44:72:e1:0c:49:3d:
         e9:50:49:0f:d3:12:bd:95:75:39:c9:e4:8e:3e:ab:de:1d:3c:
         9f:dd:1e:39:ea:15:20:af:37:40:c5:c9:89:0b:94:3c:ca:2d:
         5c:63:06:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 10:34:09 2026 by rpki-client