Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          JZxTYz/+GLIr2uiwzuXmLkj6u8cR1FYeNnCPEeQtXZA=
Subject key identifier:   DC:49:1D:AF:41:82:4B:27:F0:AF:96:4E:06:42:55:80:E3:90:40:1E
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       D7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          D7
Signing time:             Wed 25 Mar 2026 05:50:45 +0000
Manifest this update:     Wed 25 Mar 2026 05:50:44 +0000
Manifest next update:     Wed 01 Apr 2026 05:50:44 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: lDI+92Vpjy1DLe6hOG/MCsrUNc9bJ62m9n5JMrtteHk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 05:50:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 215 (0xd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Mar 25 05:50:44 2026 GMT
            Not After : Apr  1 05:50:44 2026 GMT
        Subject: CN=69c377b5-0bf5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:41:6b:82:09:0a:9f:ed:db:cb:63:e3:da:73:
                    30:f4:66:c0:82:c1:a6:9a:11:8a:ee:db:17:60:5e:
                    d5:b7:22:49:ce:4f:21:a0:a3:3d:ce:d3:1b:dd:85:
                    05:4e:06:7f:b8:b9:de:8b:b1:84:f6:a0:2c:43:39:
                    e8:8d:53:a2:ea:51:03:c9:58:ad:d3:a4:80:ec:e8:
                    0d:f0:8a:14:ee:62:27:d8:49:9a:18:61:ba:a1:89:
                    cf:8e:11:a5:4d:c6:1a:0c:d5:57:7f:5a:16:5f:f3:
                    89:b7:f6:71:08:c5:e4:64:89:fb:dc:51:dd:bb:3b:
                    8a:6c:7b:bf:d0:ea:dc:85:65:dc:92:b6:4b:69:44:
                    1c:f3:d6:11:f4:8e:a1:c9:9a:5e:8c:ad:00:9b:56:
                    40:75:98:e2:5e:1b:f9:29:38:ee:45:6b:2b:38:77:
                    9e:22:4d:e5:e3:a2:bf:f1:cf:b4:0a:3e:33:dd:69:
                    e3:5f:99:f5:78:fa:38:77:71:b3:7e:73:df:a7:17:
                    9e:9b:f2:db:f8:f1:e9:70:19:2b:4c:94:9a:91:2e:
                    7f:ec:ed:83:d3:ca:96:ba:1f:99:b7:75:7f:cc:5d:
                    5e:45:e7:88:2e:5e:cd:52:79:7e:c7:ad:27:f8:b1:
                    41:45:45:94:90:36:1b:7d:98:84:35:8b:17:db:5d:
                    ff:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:49:1D:AF:41:82:4B:27:F0:AF:96:4E:06:42:55:80:E3:90:40:1E
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:77:12:0e:2a:52:f1:94:d5:b2:68:46:04:f6:f9:84:73:eb:
         c2:a9:95:ab:8c:f8:36:d7:41:a8:79:0d:75:69:83:e8:14:99:
         29:dd:70:a7:f1:7a:90:d5:10:9c:67:f8:fd:31:3d:8b:f1:41:
         da:a5:1f:1f:f1:e5:d6:22:3e:40:46:cd:cd:c8:79:64:57:c3:
         23:7d:ab:ba:ff:ce:7d:a2:36:07:d4:ae:f7:3a:c7:a8:65:99:
         e5:44:1c:9d:fb:c4:1c:4c:48:e1:39:a6:b3:4c:da:81:4e:47:
         b5:16:8d:13:5d:b3:57:a9:38:6b:0f:97:a2:52:ca:63:f5:41:
         1a:4f:f0:8b:2c:1a:5f:a2:eb:e4:d7:f2:eb:9f:1c:08:d0:21:
         dc:92:de:68:a9:46:d0:e6:13:e1:21:67:ba:43:eb:ac:32:0c:
         82:17:07:66:1a:93:75:3a:f0:17:56:ab:6f:e2:a3:62:3c:bd:
         10:58:e1:a3:a1:c0:6a:54:20:1d:96:62:06:ef:57:b4:db:19:
         dc:14:8e:8a:01:9a:70:fc:1b:2c:d9:90:53:ba:98:60:96:6f:
         3b:00:83:72:52:5d:2c:e8:6b:b5:51:2e:ca:63:0f:e0:f5:f8:
         57:e5:c7:f4:3a:29:e6:f2:17:13:d4:e4:c2:5a:16:e0:20:87:
         ca:8a:c1:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 11:28:44 2026 by rpki-client