Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
File:                     4-snntAeg57yRYBuBFH8FVAJJqI.mft (raw, json)
Hash identifier:          YuGwc1Nw6QvCJhiqoFJ8M6Plpb9fBdMPcbT2Zvbg3K4=
Subject key identifier:   D8:F4:94:1E:7E:EA:70:00:CB:EC:8A:F9:C3:77:8B:65:03:4C:F4:1C
Authority key identifier: E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2
Certificate issuer:       /CN=A91B2C53/serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
Certificate serial:       0852
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
Manifest number:          0845
Signing time:             Tue 24 Mar 2026 20:37:41 +0000
Manifest this update:     Tue 24 Mar 2026 20:37:40 +0000
Manifest next update:     Tue 31 Mar 2026 20:37:40 +0000
Files and hashes:         1: 4-snntAeg57yRYBuBFH8FVAJJqI.crl (hash: 6szxhLiTCONimP9NZ5vI2aEOYnYyE325aUqfFkv2e+w=)
                          2: EBD94A14049A11EBB73A8663C4F9AE02.roa (hash: ni9ao10d4UmmhoPNh6i+p9dI8Um3irz51op9fJ5uVas=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl
                          rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 20:37:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2130 (0x852)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2C53, serialNumber=E3EB279ED01E839EF245806E0451FC15500926A2
        Validity
            Not Before: Mar 24 20:37:40 2026 GMT
            Not After : Mar 31 20:37:40 2026 GMT
        Subject: CN=69c2f615-efc6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:01:1b:f2:94:06:5c:ad:fd:b1:db:6a:41:
                    5d:44:12:20:a2:86:03:de:31:58:62:e8:46:4a:ef:
                    4b:1c:43:40:8f:94:b1:04:3f:62:8d:43:5b:61:33:
                    df:ca:12:6e:6b:c6:69:1e:e4:cb:a4:eb:57:e5:d4:
                    4a:fa:48:8f:c1:e9:29:ae:4f:52:a9:bd:c2:14:ad:
                    99:0a:b6:fe:d1:ee:ba:25:dd:8f:f9:74:71:13:58:
                    40:03:68:ae:33:d6:bf:d0:77:7e:b1:38:80:12:8b:
                    1a:8c:c0:31:3f:a5:05:5c:1d:b6:07:1e:2b:a8:65:
                    1f:85:66:f9:47:b5:eb:5e:ed:c3:de:c7:51:b9:79:
                    dc:37:1d:67:99:b5:f4:32:0e:57:10:a2:20:d9:38:
                    0e:7c:27:74:cb:2b:88:8e:c4:ef:ce:74:f0:65:d1:
                    d0:68:a0:fd:1f:1a:f9:d2:11:d3:2a:76:f3:36:71:
                    16:26:eb:dc:0e:f2:9d:b8:91:4d:7c:8f:a9:33:fd:
                    f5:41:5b:cb:59:4c:a4:a3:28:cc:6a:cc:32:5d:8c:
                    3a:39:d3:af:48:ab:4b:3b:7c:da:be:cc:4f:51:68:
                    a9:cf:f0:19:f0:fe:3c:3a:3e:06:8e:aa:d1:d1:72:
                    6e:e9:05:86:cd:ff:37:58:f5:ed:ae:63:d9:8c:f5:
                    14:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:F4:94:1E:7E:EA:70:00:CB:EC:8A:F9:C3:77:8B:65:03:4C:F4:1C
            X509v3 Authority Key Identifier:
                keyid:E3:EB:27:9E:D0:1E:83:9E:F2:45:80:6E:04:51:FC:15:50:09:26:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4-snntAeg57yRYBuBFH8FVAJJqI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2C53/E78E416E049811EBB1FEE85DC4F9AE02/4-snntAeg57yRYBuBFH8FVAJJqI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:86:35:b7:d7:2e:56:da:23:77:88:65:77:a6:01:f5:07:c9:
         6d:3d:45:ff:d1:56:75:80:29:b8:5f:63:6a:00:20:86:a8:e0:
         90:b4:94:9b:30:12:6e:ed:dc:03:f3:2b:99:76:0f:9f:48:51:
         4b:3c:5a:0b:72:a1:ee:c0:84:74:87:e0:7e:47:01:df:33:af:
         d7:25:9e:90:db:32:40:15:61:bf:68:be:13:a6:d3:70:9c:85:
         3e:aa:e4:42:ee:37:6b:19:22:40:fd:35:e2:8b:3f:3e:61:4c:
         9e:89:24:b8:a4:30:2b:9e:a0:4e:1e:44:df:0b:ba:45:25:63:
         71:02:a7:44:a5:9c:0a:c1:3e:5a:9b:2c:b1:2c:db:ec:a9:be:
         27:4f:11:7e:58:88:65:94:d0:38:34:d2:a5:83:27:06:ff:6b:
         7c:14:fc:d1:a9:0b:aa:43:21:61:be:9e:93:9f:b6:31:b3:6a:
         79:2c:43:b7:b5:38:26:d2:63:7b:42:c8:cf:98:65:11:c5:d3:
         f3:d1:b9:12:05:84:f7:b6:c9:aa:e9:e7:a9:79:a1:15:34:3b:
         73:d0:34:3b:d7:8c:cc:f2:dc:da:9f:2a:35:c4:9f:9f:49:ad:
         04:cd:75:c9:91:a3:63:d6:70:09:df:77:2e:06:db:fa:c0:b3:
         d1:c0:ac:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:05:26 2026 by rpki-client