Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
File:                     d6ZVRx-6dn5r39z-zejQR3AQCW0.mft (raw, json)
Hash identifier:          8nB2Gdo5bJElksBOcOpIguUPuTkVb3R/o0w2tI8LboQ=
Subject key identifier:   B7:6E:D5:48:D6:3F:B0:56:78:B7:1B:EE:8A:73:F4:82:25:22:D6:FD
Authority key identifier: 77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D
Certificate issuer:       /CN=A91CCF26/serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
Certificate serial:       09DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
Manifest number:          09DE
Signing time:             Tue 24 Mar 2026 19:39:11 +0000
Manifest this update:     Tue 24 Mar 2026 19:39:10 +0000
Manifest next update:     Tue 31 Mar 2026 19:39:10 +0000
Files and hashes:         1: d6ZVRx-6dn5r39z-zejQR3AQCW0.crl (hash: FTL8EHLqnF54evp6RQ8nRLKTYVcrk/Mgx5wlK09y8WY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl
                          rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 19:39:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2526 (0x9de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CCF26, serialNumber=77A655471FBA767E6BDFDCFECDE8D0477010096D
        Validity
            Not Before: Mar 24 19:39:10 2026 GMT
            Not After : Mar 31 19:39:10 2026 GMT
        Subject: CN=69c2e85f-0098
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:62:14:ff:30:f3:16:f0:49:b8:25:6d:66:9c:
                    55:39:7a:ec:1f:65:79:85:4c:9c:bd:d3:9d:e8:2c:
                    2c:48:ca:44:a2:ae:45:12:2a:93:5e:54:4b:ed:b7:
                    b2:84:a1:aa:a1:d4:22:06:78:d0:58:5e:b3:80:61:
                    a8:7c:9e:2a:a0:c7:69:31:66:21:b3:c4:f6:ff:1c:
                    45:95:3c:00:42:0e:51:68:07:67:06:83:1d:ba:cf:
                    8a:d6:41:74:a8:bd:76:1f:f1:d1:13:d6:ab:ae:45:
                    cb:09:fd:e2:57:40:da:a9:0b:3d:60:de:c3:c3:8f:
                    2a:b2:cb:45:5e:76:83:cc:49:a3:ee:d1:84:29:69:
                    ff:05:dc:eb:a7:a5:f0:e3:2d:1a:ae:82:6f:c4:d1:
                    85:dd:07:97:9b:8d:3e:6d:76:fb:a8:d3:8f:69:a9:
                    bc:c4:dc:08:b3:6f:6d:ac:99:0b:de:59:51:50:6b:
                    ed:9d:11:fc:9d:58:0d:43:45:ee:0b:b0:ec:b2:bb:
                    c5:13:68:f6:d6:a3:70:92:33:f0:90:9e:67:65:84:
                    2b:b0:78:ba:59:eb:29:cf:04:be:4a:7c:cc:95:b2:
                    03:22:ee:e6:3b:37:24:c3:18:ee:ae:ef:09:c5:d6:
                    da:8b:d1:c8:54:43:61:c6:54:be:e4:bf:b8:cf:55:
                    9f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:6E:D5:48:D6:3F:B0:56:78:B7:1B:EE:8A:73:F4:82:25:22:D6:FD
            X509v3 Authority Key Identifier:
                keyid:77:A6:55:47:1F:BA:76:7E:6B:DF:DC:FE:CD:E8:D0:47:70:10:09:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d6ZVRx-6dn5r39z-zejQR3AQCW0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CCF26/72C19B06997C11EA8F098961C4F9AE02/d6ZVRx-6dn5r39z-zejQR3AQCW0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:44:50:19:48:c6:46:0a:5c:37:d8:47:2a:0c:83:2f:ae:01:
         15:c3:40:5c:29:66:1b:90:e4:9b:6f:46:a4:89:e6:88:63:0f:
         70:1b:04:e9:7d:e8:40:77:fb:86:1d:62:4c:55:68:5b:dc:71:
         23:f4:43:ce:f1:49:04:17:17:49:62:fb:db:07:c9:af:2c:33:
         96:d4:2a:7c:8c:5a:31:5e:6e:fb:8e:4d:ef:67:47:fd:43:18:
         b2:b6:d9:2a:ff:51:4f:35:bd:30:f4:3d:71:4c:0d:a1:da:f0:
         f6:ce:a1:b2:28:f2:6e:55:e4:a8:08:b6:27:0e:86:5f:b3:63:
         fe:04:d2:cc:0e:b9:90:32:2a:a0:d6:41:12:95:02:34:93:1c:
         e6:d0:af:91:c0:a0:cf:2c:85:3f:b3:46:32:e5:7f:a6:ce:3c:
         35:b8:91:50:a8:b9:72:10:80:e1:22:f0:61:8c:9c:d8:0c:a3:
         04:4c:57:11:a9:52:7b:0c:63:92:d8:71:6a:27:01:5f:12:24:
         63:e4:d5:97:e8:49:92:91:05:2e:27:41:8a:3c:a5:05:87:c3:
         78:8f:71:2c:ad:d8:ac:cb:d3:f0:07:74:41:22:dc:13:28:26:
         86:e3:b1:67:2a:e5:fc:03:dc:25:0e:09:a4:14:9d:59:72:24:
         ec:26:d5:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 07:58:50 2026 by rpki-client