Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
File:                     KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft (raw, json)
Hash identifier:          oDicxgothZ5Twxa8rHl2Ry3A8elp5xsMXKN3za5mIFo=
Subject key identifier:   B4:3C:10:29:BC:68:A8:49:4B:CE:8F:47:37:A2:9B:13:23:97:69:86
Authority key identifier: 29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38
Certificate issuer:       /CN=A91B72D6/serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
Certificate serial:       0D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
Manifest number:          0D
Signing time:             Wed 25 Mar 2026 08:16:53 +0000
Manifest this update:     Wed 25 Mar 2026 08:16:52 +0000
Manifest next update:     Wed 01 Apr 2026 08:16:52 +0000
Files and hashes:         1: KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl (hash: ZHmDZk+3Dp0H0ej8RCkflG0SynZvJJp9Std3OLj6im0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl
                          rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 08:16:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B72D6, serialNumber=29EA9D81A2AF5F8285AC071B1E6E79A309C9F438
        Validity
            Not Before: Mar 25 08:16:52 2026 GMT
            Not After : Apr  1 08:16:52 2026 GMT
        Subject: CN=69c399f5-d5a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:cf:91:fe:2f:8b:f1:fc:85:88:84:e2:64:e1:
                    16:77:81:40:db:e4:df:6e:ab:67:7f:0f:bb:e3:93:
                    a9:ea:0f:5b:fb:51:e5:e2:d7:d7:a2:0a:49:b4:c2:
                    18:e9:2b:b9:8e:39:89:04:ce:d9:85:3b:d1:ff:a1:
                    a0:4f:57:fe:85:e4:88:b3:18:28:38:68:7a:3d:4a:
                    9a:19:83:c5:90:33:bb:83:8d:97:1a:0d:60:63:43:
                    50:9b:ef:7d:a1:61:1f:05:6e:4e:d7:ff:6e:b3:0c:
                    69:f0:64:65:81:1c:20:1a:d1:aa:f6:c3:22:d3:38:
                    52:50:ab:a0:3b:d5:35:8f:18:35:b9:e9:4c:84:76:
                    7b:ef:2c:8f:11:85:5a:95:e1:77:73:73:6c:10:6a:
                    0e:9d:7e:32:ad:02:f3:2b:5d:73:59:eb:8d:77:57:
                    f2:8b:96:44:be:9b:f2:70:12:25:32:6e:bd:f7:17:
                    ba:bc:1b:39:7f:c7:99:d4:2a:07:7c:42:87:a5:01:
                    b5:b4:11:e4:fe:e2:86:6b:9b:02:f2:fc:53:f1:71:
                    f2:c9:8e:4a:e0:5f:54:1c:ff:e3:3b:3d:13:68:78:
                    d1:68:81:ef:87:8b:96:46:5c:ff:db:0b:f1:d9:d5:
                    3f:bb:57:ec:cf:2e:5f:81:94:f5:a2:8f:7a:22:bb:
                    85:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:3C:10:29:BC:68:A8:49:4B:CE:8F:47:37:A2:9B:13:23:97:69:86
            X509v3 Authority Key Identifier:
                keyid:29:EA:9D:81:A2:AF:5F:82:85:AC:07:1B:1E:6E:79:A3:09:C9:F4:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KeqdgaKvX4KFrAcbHm55ownJ9Dg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B72D6/9748C022171F11F1A3A8F2FB093D8C67/KeqdgaKvX4KFrAcbHm55ownJ9Dg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:f2:04:d4:bc:fd:58:a0:e1:07:97:95:54:da:a3:c9:e4:21:
         3b:0f:a7:f3:a1:42:5b:eb:2a:f6:3f:e0:e6:fb:80:1f:5a:14:
         b2:00:30:42:7e:79:27:38:77:17:22:5e:ce:6e:7a:71:3f:53:
         dc:f3:df:47:b9:b0:40:e8:f4:9b:38:30:5b:3a:d9:33:9d:c3:
         33:ca:c0:4d:b8:d8:8c:8d:7f:1c:52:21:f6:22:9b:11:c3:5e:
         c0:23:a4:ed:13:0f:9a:7f:66:89:cd:ad:10:75:c7:8c:58:c6:
         c1:9b:b9:47:31:02:d7:90:13:26:32:54:0e:0b:c4:89:bf:15:
         b4:1b:91:75:38:58:74:34:bb:b7:9a:bd:fa:ac:11:ea:5e:73:
         d8:63:03:c2:e6:40:8f:cf:91:fd:8e:ee:19:14:92:72:c0:4b:
         c3:5c:21:37:a3:ae:b3:ae:5a:c6:c5:1f:7f:08:e2:a8:7d:f0:
         6c:dd:bc:96:0f:8d:8b:d0:98:5f:74:ce:08:54:ec:57:08:0c:
         9b:8c:b1:14:ed:9c:49:79:de:f3:cf:39:d2:dd:c5:70:41:f9:
         21:8c:bc:27:71:8c:c3:04:55:60:6f:ef:24:0a:7e:ca:60:32:
         7d:a7:07:f4:a3:48:49:2b:bf:23:d8:01:19:b5:a2:4a:ac:80:
         99:a1:45:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 04:48:16 2026 by rpki-client