Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
File:                     1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft (raw, json)
Hash identifier:          LP6690iEgpOWKIx3lHxMhji+t3tm6mDtUCklkfUFuWY=
Subject key identifier:   B4:1F:82:1B:D1:F5:F4:08:68:64:AC:9B:9C:72:32:16:BB:7F:AD:28
Authority key identifier: D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
Certificate issuer:       /CN=A91FBC9F/serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Certificate serial:       20
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
Manifest number:          20
Signing time:             Sun 05 Apr 2026 08:16:40 +0000
Manifest this update:     Sun 05 Apr 2026 08:16:40 +0000
Manifest next update:     Sun 12 Apr 2026 08:16:40 +0000
Files and hashes:         1: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl (hash: TzIvVxLSCITOU58gucsfke7NhG+6SkT7b9N8Dqu5xCg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:16:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
        Validity
            Not Before: Apr  5 08:16:40 2026 GMT
            Not After : Apr 12 08:16:40 2026 GMT
        Subject: CN=69d21a68-c417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:9e:61:01:18:02:4f:9a:17:4a:45:68:2f:54:
                    d7:07:d2:31:0d:32:dd:02:cc:b4:22:d2:81:41:95:
                    54:87:2a:ce:fb:b1:d9:f4:69:07:30:6c:5f:5d:f4:
                    aa:b5:ca:be:d9:3f:f6:c9:a3:e1:27:40:d3:1f:79:
                    c0:8a:c6:c5:2c:6d:80:60:d4:9d:77:80:dd:f1:e4:
                    e7:4c:70:0a:6e:5d:96:46:e3:72:cc:0c:73:9d:7c:
                    4a:cc:dd:85:63:4b:24:8a:0f:cc:ed:2f:1e:1e:39:
                    2d:c9:16:5d:15:4c:58:03:87:2a:c5:17:11:47:3f:
                    ec:9b:7a:dd:e7:2a:62:5b:47:34:f6:f8:d3:09:05:
                    d7:ac:c5:c1:26:bb:1a:75:16:f3:6a:73:dd:33:1b:
                    b6:81:0d:40:1a:18:76:38:85:43:4e:34:79:65:24:
                    28:13:41:49:36:7d:be:42:63:c7:23:30:de:49:0a:
                    b3:e0:e8:ad:b4:2e:ed:7b:bd:22:ff:8d:5d:be:6f:
                    8f:62:62:40:e4:cc:0c:fb:45:0f:2b:8a:0f:f0:a5:
                    b5:85:fc:26:a3:7d:12:c1:41:b8:1a:00:ae:67:5d:
                    31:87:ac:c1:8e:97:f2:a4:f7:9c:91:f7:ac:18:6b:
                    9b:72:9e:31:f8:b3:08:50:59:a6:e6:02:4d:c4:e4:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:1F:82:1B:D1:F5:F4:08:68:64:AC:9B:9C:72:32:16:BB:7F:AD:28
            X509v3 Authority Key Identifier:
                keyid:D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:09:7f:46:39:23:ba:2c:01:39:a9:5a:9c:23:52:bf:3d:98:
         6a:ea:61:3d:3c:1f:8c:ea:a5:8d:a5:dd:d5:1c:74:2a:dc:ab:
         dd:3a:9f:04:e5:59:8e:7c:0b:13:da:47:da:d1:ec:fa:d9:0e:
         b9:22:ae:91:a1:eb:88:a0:db:f7:e1:19:76:4e:e0:da:0f:9c:
         19:72:68:64:f8:ef:d2:ba:df:77:e0:ec:ac:16:ad:e3:c0:41:
         38:83:fe:9a:34:81:2f:9c:2a:fe:f4:da:eb:82:db:23:f2:c6:
         4c:e8:53:99:95:eb:85:c1:b8:cc:b6:81:ca:24:2e:d4:d2:b4:
         01:0d:a4:67:5f:19:bc:f7:da:40:14:33:73:6c:62:79:86:36:
         6b:c1:9f:49:23:34:31:ba:44:20:57:0f:0c:30:1a:0a:c2:67:
         dc:5a:fb:99:24:dc:d0:43:55:76:ef:d0:88:be:23:cb:09:48:
         07:a4:21:a9:fa:47:72:9e:83:02:ca:25:b4:f4:2f:0f:aa:28:
         3c:b3:bc:8c:0b:71:47:c7:22:7c:3e:ce:c7:8e:74:ff:b4:a0:
         e7:dc:db:16:bf:42:e7:b2:53:5d:17:48:d4:25:22:01:d1:3a:
         80:52:cb:f2:ea:4b:2f:26:67:be:a3:be:cc:ab:40:c0:ab:df:
         e5:45:13:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:51:06 2026 by rpki-client