Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
File:                     1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json)
Hash identifier:          qDrL/EOU5YfbA/cH9fQaxMCoiBX4AWFAE4DGi1a1AH8=
Subject key identifier:   59:BF:96:53:99:A7:84:4F:58:D3:00:C6:A4:41:A3:98:87:2C:2E:0C
Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC
Certificate issuer:       /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
Manifest number:          53
Signing time:             Fri 27 Mar 2026 07:43:10 +0000
Manifest this update:     Fri 27 Mar 2026 07:43:10 +0000
Manifest next update:     Fri 03 Apr 2026 07:43:10 +0000
Files and hashes:         1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: fU2oxH0S+JKeXuqGMvQ0a8EDDfQZwNhntyrGHPpHn6I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:43:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
        Validity
            Not Before: Mar 27 07:43:10 2026 GMT
            Not After : Apr  3 07:43:10 2026 GMT
        Subject: CN=69c6350e-2854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:fe:fa:08:26:41:b7:6d:bc:4a:5f:8e:eb:9d:
                    26:20:24:97:9d:af:02:32:a0:2f:ac:66:0e:01:22:
                    81:70:9b:07:35:84:77:ff:55:ef:f7:bb:92:ca:c3:
                    74:37:ac:f6:b9:07:e6:18:82:ec:fe:dc:57:40:77:
                    70:3c:a1:a5:60:b4:01:91:9b:c9:8d:76:52:b8:99:
                    34:ca:68:60:ad:0d:03:00:37:9f:ee:a4:82:05:5d:
                    43:51:1c:a3:2f:49:b1:80:a9:10:c6:4f:95:2e:7c:
                    e4:c7:3c:34:15:f5:e2:29:d6:6c:bc:7f:fc:fb:45:
                    44:13:e0:16:9e:cb:7d:11:ad:ec:74:3d:16:3f:5b:
                    f0:bf:4b:b8:1e:71:74:d7:be:8c:d8:c0:55:b7:53:
                    40:40:ed:93:37:c6:24:ea:66:86:16:63:d2:5d:48:
                    2b:81:53:87:b6:26:6e:dc:7e:10:0f:6c:87:a1:f9:
                    62:71:cc:92:b4:11:15:b9:3c:54:31:7c:73:95:29:
                    87:b7:e2:f4:03:d5:a5:ec:d6:55:a8:23:e8:49:44:
                    94:65:c3:13:1b:0d:47:ca:a0:53:aa:5a:16:10:0d:
                    45:d4:6f:d2:94:64:0c:f0:8d:21:42:a0:12:e4:99:
                    b0:24:c3:24:39:07:98:51:a7:90:32:33:7d:0d:9b:
                    13:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:BF:96:53:99:A7:84:4F:58:D3:00:C6:A4:41:A3:98:87:2C:2E:0C
            X509v3 Authority Key Identifier:
                keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:ff:5c:04:d6:66:b1:9f:1d:03:9a:d0:1e:ba:7c:6e:2e:71:
         38:73:fb:57:d4:f6:5a:ef:d2:c9:4c:9a:b8:27:77:c3:43:0c:
         0e:2a:b3:b0:7c:a3:7d:99:98:17:be:51:ee:5a:cb:d6:05:13:
         63:8e:40:ac:9b:46:35:75:d8:5c:e7:aa:74:c0:04:e7:bd:fb:
         0f:08:21:75:75:81:ce:05:74:f6:60:a5:3b:4d:d0:76:b2:56:
         8a:1b:c5:32:c7:c3:25:8f:e5:d9:48:a7:85:52:35:bf:15:0b:
         f0:f7:aa:7e:44:6e:a1:b3:4c:79:d5:d4:df:60:f2:a7:20:a7:
         96:03:d9:ae:31:cc:9e:df:6e:4d:4f:24:81:d8:d0:d8:8e:f9:
         58:d1:ef:a0:a3:ef:bb:cf:64:d9:a9:33:45:0b:ec:6e:d4:25:
         22:39:9c:c7:f9:07:55:64:cb:c5:8f:86:42:45:de:cb:50:9d:
         d3:8a:a0:93:b1:e1:c4:c1:9f:57:bc:2a:18:44:87:e6:50:97:
         08:a7:df:18:99:13:17:9a:fa:4d:a5:66:a6:a8:a6:f3:1b:12:
         4e:13:dc:c4:4a:62:57:b7:09:5d:c8:e5:4f:d8:df:c9:07:35:
         d8:79:f8:27:6a:5c:3c:d6:7c:f8:d6:5b:77:88:8b:9e:c9:b6:
         a4:6a:7c:09
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBUzANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE3
MTk5NjExMC8GA1UEBRMoRDZBNjAyOTM0QUNCRTQxNEIzNDlBMDE1NjlFQkI2NjYx
RTU0QTJCQzAeFw0yNjAzMjcwNzQzMTBaFw0yNjA0MDMwNzQzMTBaMBgxFjAUBgNV
BAMTDTY5YzYzNTBlLTI4NTQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDg/voIJkG3bbxKX47rnSYgJJedrwIyoC+sZg4BIoFwmwc1hHf/Ve/3u5LKw3Q3
rPa5B+YYguz+3FdAd3A8oaVgtAGRm8mNdlK4mTTKaGCtDQMAN5/upIIFXUNRHKMv
SbGAqRDGT5UufOTHPDQV9eIp1my8f/z7RUQT4Baey30Rrex0PRY/W/C/S7gecXTX
vozYwFW3U0BA7ZM3xiTqZoYWY9JdSCuBU4e2Jm7cfhAPbIeh+WJxzJK0ERW5PFQx
fHOVKYe34vQD1aXs1lWoI+hJRJRlwxMbDUfKoFOqWhYQDUXUb9KUZAzwjSFCoBLk
mbAkwyQ5B5hRp5AyM30NmxPFAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWb+WU5mn
hE9Y0wDGpEGjmIcsLgwwHwYDVR0jBBgwFoAU1qYCk0rL5BSzSaAVaeu2Zh5Uorww
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcxOTk2L0I4Q0Q3MzRFQUU2
NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJTelNhQVZhZXUyWmg1VW9y
dy5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvMXFZQ2swckw1QlN6U2FBVmFldTJaaDVVb3J3LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTcx
OTk2L0I4Q0Q3MzRFQUU2NzExRjBCNTM0RjYyNkM0RjlBRTAyLzFxWUNrMHJMNUJT
elNhQVZhZXUyWmg1VW9ydy5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAp/1wE1maxnx0DmtAeunxuLnE4c/tX1PZa79LJTJq4J3fDQwwOKrOwfKN9mZgX
vlHuWsvWBRNjjkCsm0Y1ddhc56p0wATnvfsPCCF1dYHOBXT2YKU7TdB2slaKG8Uy
x8Mlj+XZSKeFUjW/FQvw96p+RG6hs0x51dTfYPKnIKeWA9muMcye325NTySB2NDY
jvlY0e+go++7z2TZqTNFC+xu1CUiOZzH+QdVZMvFj4ZCRd7LUJ3TiqCTseHEwZ9X
vCoYRIfmUJcIp98YmRMXmvpNpWamqKbzGxJOE9zESmJXtwldyOVP2N/JBzXYefgn
alw81nz41lt3iIueybakanwJ
-----END CERTIFICATE-----
Generated at Sat Mar 28 12:14:09 2026 by rpki-client