Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
File:                     d4SIFI464vFK1AhU96L6WVd1xXU.mft (raw, json)
Hash identifier:          I0/DIhxXOfPH3DZ0aP7qRFl440CtTpxEUyfzMeQ3mrM=
Subject key identifier:   AC:0B:95:6E:6A:B2:29:0D:12:F0:56:06:5A:D4:56:04:97:5C:A0:FB
Authority key identifier: 77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75
Certificate issuer:       /CN=A91AFEA8/serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
Certificate serial:       4B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
Manifest number:          46
Signing time:             Fri 27 Mar 2026 07:54:31 +0000
Manifest this update:     Fri 27 Mar 2026 07:54:31 +0000
Manifest next update:     Fri 03 Apr 2026 07:54:31 +0000
Files and hashes:         1: d4SIFI464vFK1AhU96L6WVd1xXU.crl (hash: Ctl3VXvrUEZZ5b6U07eE5BRUIEoirif7lvkg24eq4TI=)
                          2: 681269F8087811F19439B7C20A3D8C67.roa (hash: GfKHo2eQlYNPUrbMHKQtwwJ+sbJRJ6lCyawulNvQePo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl
                          rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:54:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 75 (0x4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AFEA8, serialNumber=778488148E3AE2F14AD40854F7A2FA595775C575
        Validity
            Not Before: Mar 27 07:54:31 2026 GMT
            Not After : Apr  3 07:54:31 2026 GMT
        Subject: CN=69c637b7-55a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:e5:74:ea:34:5c:cd:07:10:87:b2:38:40:
                    f5:0a:33:91:08:57:b7:5a:a7:a2:cd:b7:a8:f9:d0:
                    f2:da:84:9a:2c:35:21:38:a9:f3:82:42:8f:ef:f6:
                    5b:3b:a0:3e:cc:ba:e3:81:90:55:b7:d6:bb:06:9d:
                    32:27:1b:4c:49:a9:c8:e5:c8:ab:25:06:2f:f5:31:
                    78:ef:f6:49:7b:3d:96:59:68:9f:56:05:df:a6:43:
                    b3:97:dd:b2:fd:50:a4:8b:ff:76:75:92:c5:44:53:
                    12:5a:c3:ff:1c:72:7f:bb:4a:30:99:36:a3:29:41:
                    8e:58:c8:32:cf:78:ee:d5:87:3f:5d:e9:f1:76:5e:
                    59:97:00:4d:21:46:26:34:2c:ac:ac:23:9c:0a:00:
                    e0:9d:0f:2b:33:c9:94:a7:e1:af:6b:4e:ba:6f:19:
                    98:8b:bc:86:db:58:fe:be:3e:8e:4b:7d:82:a5:29:
                    db:23:46:5d:77:19:f3:32:a0:ff:22:32:a1:9e:86:
                    5e:ec:c6:d9:a6:0b:d3:44:79:f7:f3:bb:dc:75:15:
                    0f:d4:e2:88:b3:3f:76:e0:d8:2b:2d:f5:ac:f8:ab:
                    92:b5:6e:14:20:6a:55:e1:5f:51:d3:2e:0b:38:20:
                    b4:76:39:85:e6:4c:f9:fe:9e:70:73:13:f6:e1:0a:
                    1a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0B:95:6E:6A:B2:29:0D:12:F0:56:06:5A:D4:56:04:97:5C:A0:FB
            X509v3 Authority Key Identifier:
                keyid:77:84:88:14:8E:3A:E2:F1:4A:D4:08:54:F7:A2:FA:59:57:75:C5:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d4SIFI464vFK1AhU96L6WVd1xXU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AFEA8/068E767AC59F11F0B30D5D7CC4F9AE02/d4SIFI464vFK1AhU96L6WVd1xXU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:6f:a4:f2:63:c8:46:7a:2e:8c:12:38:be:e1:56:48:dd:07:
         90:4f:7e:f6:7e:60:16:36:37:c0:9c:d3:7b:f1:54:65:a8:b9:
         18:12:17:29:aa:6f:10:24:82:3b:ec:e2:31:90:cf:b6:44:c8:
         64:8c:14:b0:44:2c:48:09:d1:cf:80:de:19:ab:fd:3d:da:43:
         20:99:ef:35:be:e9:17:40:89:6e:33:77:fb:06:05:b2:93:58:
         97:0e:8a:10:ad:b5:66:21:bf:26:36:88:f4:b2:22:cb:f6:56:
         69:0a:3c:a6:ad:1b:36:95:15:29:92:dc:89:41:99:cd:9b:78:
         ee:6a:be:39:16:4a:9f:67:c2:5d:1e:8a:39:f4:12:e7:7e:c9:
         72:25:71:c3:ae:e7:a8:41:71:f6:3b:bc:54:1d:51:10:73:cd:
         78:b5:21:7a:bc:ad:df:a3:1c:54:6f:16:85:9e:c7:73:c1:82:
         86:d7:8f:73:24:ed:e2:0f:58:5f:c5:4c:a9:e0:e8:56:b5:81:
         23:35:e8:b3:f0:af:0e:45:22:9b:fd:79:4f:dd:94:29:83:36:
         76:02:fe:11:65:7a:03:06:40:e9:fc:61:f0:d2:90:01:d4:08:
         a6:fa:db:27:87:01:de:8a:aa:93:03:ba:37:12:0d:e9:83:52:
         52:22:42:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:09:36 2026 by rpki-client