Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
File:                     72LxVcGXHVBJQfVx7t-sCvzFKFk.mft (raw, json)
Hash identifier:          cfJlGGScez0q8QnD7R/g7Bp2j84bKnrvu6A/ApybRy4=
Subject key identifier:   0B:A0:F9:E2:A5:5E:C5:F3:64:8C:96:0E:C1:1A:98:30:CF:9B:DE:35
Authority key identifier: EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59
Certificate issuer:       /CN=A91BFE6A/serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
Certificate serial:       1332
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
Manifest number:          1307
Signing time:             Tue 24 Mar 2026 16:55:37 +0000
Manifest this update:     Tue 24 Mar 2026 16:55:36 +0000
Manifest next update:     Tue 31 Mar 2026 16:55:36 +0000
Files and hashes:         1: 72LxVcGXHVBJQfVx7t-sCvzFKFk.crl (hash: o32nJfctqLDxgLSGRbJF5tvOnxhCt3JPml3pEk5m/fk=)
                          2: 5122B56A51F311E9AB54691EC4F9AE02.roa (hash: pA/9FBNMln0DoNLtOKkiTbgr8bTJzminkkAizik/o0Y=)
                          3: ED388A1840BB11E9A6718844C4F9AE02.roa (hash: BhycUplre6fTkJAbGpyBSXmycS7IRjXv3cPTzMpBNhY=)
                          4: CEBECC28D38811E8A763B462C4F9AE02.roa (hash: QFWUYSiZUJc8h7YGZVvOm14atuGAeik2TO0HfRh5JB8=)
                          5: 08DCBB24DC8011F0AB4C816E3A6F56BC.roa (hash: 96/u/vfI+bwY9VG+LkNCPlB++nMFvbH2aJWjRVlgcT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl
                          rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 16:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4914 (0x1332)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BFE6A, serialNumber=EF62F155C1971D504941F571EEDFAC0AFCC52859
        Validity
            Not Before: Mar 24 16:55:36 2026 GMT
            Not After : Mar 31 16:55:36 2026 GMT
        Subject: CN=69c2c209-40cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:ad:c0:4f:d1:5d:a9:2b:3d:c9:59:a1:df:50:
                    91:07:e2:17:f3:b4:0b:d9:7a:62:4a:b9:ce:7b:58:
                    06:fb:92:63:11:b6:24:a6:bb:47:63:f2:08:d7:40:
                    22:5f:8a:cf:4a:51:72:68:54:e2:a4:4d:ba:c0:58:
                    5e:3b:75:c2:3d:62:db:02:39:6e:6e:52:d5:c5:fc:
                    e4:96:d0:47:a7:9f:36:74:e4:f4:e2:39:af:e2:10:
                    91:78:a4:d3:6e:09:eb:a1:31:04:54:59:a3:4d:2d:
                    1a:13:c7:a3:ee:f0:14:40:a4:0b:73:54:d7:b6:89:
                    a1:cf:22:3d:89:cb:fb:93:17:3d:53:4d:2b:a6:9c:
                    da:4d:b0:ea:71:9f:f0:1c:93:ae:81:1b:56:18:ec:
                    9c:6b:81:9c:71:67:73:7a:07:72:02:5e:0e:43:33:
                    b1:0a:27:9c:ce:fb:a5:c1:b0:eb:95:e6:fc:6a:ec:
                    cb:2b:30:42:d3:eb:4c:69:5f:d1:c2:46:c5:3f:15:
                    98:b7:f5:d3:3a:ca:41:be:84:89:28:38:93:82:32:
                    73:c7:fd:28:e3:91:45:3d:89:7a:19:b9:50:b8:13:
                    26:ad:b1:75:3d:12:d5:04:3d:b5:a9:f3:a8:94:d7:
                    b9:73:bb:a3:e8:b8:99:c9:02:e6:25:ab:5a:d3:0a:
                    cf:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:A0:F9:E2:A5:5E:C5:F3:64:8C:96:0E:C1:1A:98:30:CF:9B:DE:35
            X509v3 Authority Key Identifier:
                keyid:EF:62:F1:55:C1:97:1D:50:49:41:F5:71:EE:DF:AC:0A:FC:C5:28:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/72LxVcGXHVBJQfVx7t-sCvzFKFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BFE6A/1D64328ED38711E8BD70755CC4F9AE02/72LxVcGXHVBJQfVx7t-sCvzFKFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:ab:16:fa:f8:94:27:f5:62:e5:a6:4d:98:81:9b:7c:5c:
         23:42:e9:e8:d8:bc:88:18:cb:d6:44:0d:27:34:26:ae:e6:50:
         da:bf:6f:4f:40:05:6c:b3:9b:eb:34:25:9a:eb:e2:a9:54:42:
         49:19:75:92:88:23:48:c0:90:94:a2:18:20:99:ea:00:a7:a4:
         1b:cd:20:3d:17:fe:26:0b:7e:34:b1:af:a1:2e:ff:2d:32:67:
         1a:9f:a6:e2:ab:a7:22:fb:54:cb:bd:70:37:a3:5b:f7:b0:ab:
         55:5c:04:f6:18:9b:af:ea:22:18:e2:36:11:c0:45:63:cc:88:
         cb:f4:b8:41:5a:db:eb:bb:4a:60:2c:99:76:32:dd:2a:8a:5d:
         4a:b0:36:d8:42:e3:8e:fb:2d:4a:c5:80:5e:e7:78:86:c9:f2:
         73:b7:64:53:05:89:57:55:03:8d:b3:7c:cf:c6:12:04:a1:c6:
         9d:cf:d0:f3:0e:4c:32:9c:bb:bc:47:14:9d:e2:4a:d2:d1:0e:
         7c:6d:3f:f8:d7:d2:41:0a:21:f2:3e:ec:fb:dd:07:a3:22:8a:
         9a:73:82:79:da:c7:0a:ff:c8:c8:ab:b9:94:e9:44:ee:4c:f9:
         ce:23:c3:b6:a5:31:45:79:f2:e2:d7:1a:b1:f6:5e:81:ed:43:
         ff:e8:30:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:35:09 2026 by rpki-client