Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
File:                     s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft (raw, json)
Hash identifier:          Qty0iOUcHaeIiiTvzGbuzs/iPMHTl/73Dh3C21O56us=
Subject key identifier:   F2:2A:85:2F:24:4C:81:96:CF:61:ED:64:5E:F5:D8:A0:FA:73:DF:D9
Authority key identifier: B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33
Certificate issuer:       /CN=A91A05BF/serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33
Certificate serial:       50
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
Manifest number:          50
Signing time:             Fri 27 Mar 2026 07:45:00 +0000
Manifest this update:     Fri 27 Mar 2026 07:45:00 +0000
Manifest next update:     Fri 03 Apr 2026 07:45:00 +0000
Files and hashes:         1: s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl (hash: a33P3c2zpO+hrhdOTaX1bGMH3u+otoXqqhW46mhPHfw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl
                          rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:44:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A05BF, serialNumber=B360DB149D55C18E0371E0428757CAF1FDD42C33
        Validity
            Not Before: Mar 27 07:45:00 2026 GMT
            Not After : Apr  3 07:45:00 2026 GMT
        Subject: CN=69c6357c-5362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f4:32:40:b7:a6:61:f0:c0:d1:7a:a6:e7:0a:
                    c5:8a:93:0f:d2:8f:41:4f:c9:be:22:92:fc:df:71:
                    4a:01:82:94:c2:2c:0a:a1:64:6f:41:bf:6e:26:fb:
                    a2:a9:90:6c:07:cc:a6:2d:98:c9:e2:b3:af:f1:3e:
                    f3:37:05:52:ee:a4:c5:08:ee:ee:c4:6e:b6:cb:e6:
                    1b:5a:69:38:da:f6:0a:6f:43:60:e4:bd:cb:fa:f3:
                    77:b9:83:b6:5f:d8:80:03:11:94:64:bf:77:a5:a0:
                    d2:fa:48:db:73:fd:26:55:b3:21:a6:b5:9e:7d:bf:
                    ac:57:82:f5:17:94:f5:f7:18:0a:e3:4d:9f:55:6d:
                    6c:d0:10:c2:9c:b3:a2:62:6b:9e:dc:f2:22:ee:5c:
                    8d:96:aa:1b:da:8a:67:09:ba:45:2e:94:9c:ed:ea:
                    44:79:3c:db:c0:58:a5:10:09:0d:35:35:c1:c0:20:
                    4f:fa:5b:d6:b6:2e:cc:37:f5:60:dd:f0:4b:80:c2:
                    b1:e2:76:f3:22:3c:72:c3:ea:c9:0a:70:c4:4a:76:
                    be:17:b5:cc:7d:08:d9:7a:9e:79:34:f9:37:92:d1:
                    9b:13:26:6a:7f:0c:05:81:62:79:0c:8c:a4:85:ab:
                    34:0b:d7:5e:aa:9f:85:32:c0:d1:ab:c3:2e:28:fb:
                    ef:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:2A:85:2F:24:4C:81:96:CF:61:ED:64:5E:F5:D8:A0:FA:73:DF:D9
            X509v3 Authority Key Identifier:
                keyid:B3:60:DB:14:9D:55:C1:8E:03:71:E0:42:87:57:CA:F1:FD:D4:2C:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s2DbFJ1VwY4DceBCh1fK8f3ULDM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A05BF/21BCD678B3B411F0B6917F0EC4F9AE02/s2DbFJ1VwY4DceBCh1fK8f3ULDM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:73:51:6d:0d:f4:29:76:6c:7a:b7:62:4d:e9:75:8c:a6:
         6c:54:31:62:0b:e0:7f:22:83:3a:46:41:7a:b8:3d:d3:0a:f1:
         fe:54:9e:bf:94:be:e5:e0:c3:78:40:8d:eb:58:4b:39:2f:ec:
         99:13:cd:2c:13:39:c0:1c:f9:cc:1d:cf:0c:96:00:a9:84:1d:
         9d:bb:0d:a5:2e:96:59:81:92:ab:56:51:68:bb:fa:46:a5:1e:
         6f:59:d9:fe:f6:4b:3c:03:63:a4:38:ab:36:58:9d:38:db:3e:
         cf:dd:5d:86:b4:49:2a:1b:bd:33:ab:d4:bd:ea:ff:39:ed:5c:
         11:b4:b1:05:07:e5:98:7b:4c:5d:ac:30:ee:3a:05:9a:f7:f7:
         d4:1d:c1:45:c6:0a:0e:65:19:fc:90:26:a6:e7:41:b8:50:5a:
         06:d4:2b:f9:64:5e:d7:94:67:1f:92:a8:9f:74:aa:38:82:c1:
         9b:7c:98:83:67:71:ed:42:eb:80:09:35:a9:32:9b:16:48:6c:
         ea:2c:5a:1d:95:be:1c:24:56:1d:1a:60:cd:20:13:1a:16:df:
         a8:ce:51:bc:5f:57:3c:24:e7:4d:ff:69:a7:40:23:94:e0:50:
         4d:b7:dc:7b:06:fa:1d:a9:68:db:3c:ce:a8:03:a7:11:c0:72:
         a7:83:08:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:49:00 2026 by rpki-client