Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
File:                     7uxT6tF_v4myIdm6WvzQEHkMmU0.mft (raw, json)
Hash identifier:          dWSFWOSauZ/25e1wHsdmzAI+izNSyKRc0q1yx5KnBeI=
Subject key identifier:   A9:BA:C6:CB:A9:74:BE:20:D0:ED:89:77:70:4D:DB:CE:F4:DA:37:E0
Authority key identifier: EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D
Certificate issuer:       /CN=A91CFF62/serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
Certificate serial:       01CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
Manifest number:          01CF
Signing time:             Wed 25 Mar 2026 02:56:24 +0000
Manifest this update:     Wed 25 Mar 2026 02:56:23 +0000
Manifest next update:     Wed 01 Apr 2026 02:56:23 +0000
Files and hashes:         1: 7uxT6tF_v4myIdm6WvzQEHkMmU0.crl (hash: A4eQMh1cbWow3r6qAMeVPMFf8LHScJ9JjS9hMJ1DXmI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 02:56:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 463 (0x1cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CFF62, serialNumber=EEEC53EAD17FBF89B221D9BA5AFCD010790C994D
        Validity
            Not Before: Mar 25 02:56:23 2026 GMT
            Not After : Apr  1 02:56:23 2026 GMT
        Subject: CN=69c34ed8-8c13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:77:99:81:57:c2:72:0c:69:9f:01:2c:81:a1:
                    b1:86:00:c4:27:ab:f7:8a:cb:2a:55:14:a4:90:e8:
                    c2:24:92:d7:3c:e5:fb:76:be:3e:c1:19:55:ac:b9:
                    ad:68:93:83:12:cd:74:ee:48:63:5f:47:a9:2a:8b:
                    d9:a4:22:e2:64:ed:92:b9:4d:46:da:46:ef:d8:93:
                    0a:1a:42:3b:cc:19:bd:87:c5:db:82:83:db:0f:76:
                    ea:5f:a6:93:57:12:97:ca:f1:73:b6:37:2f:50:1d:
                    14:c8:32:7a:a7:c9:f9:31:3f:35:53:34:5a:0a:11:
                    5a:fb:92:b2:64:f9:49:bf:00:4d:ce:b8:ba:d9:a9:
                    cb:1c:00:86:b7:3a:ff:7b:de:cf:35:12:99:a6:9c:
                    55:ae:ac:70:a0:70:75:ee:9d:07:a5:0a:0e:67:22:
                    50:c3:22:15:e4:4e:7f:69:81:a9:f8:4f:fe:c3:40:
                    c9:6f:66:a7:e9:e4:41:9d:4c:d0:10:ff:b8:b0:a2:
                    4f:02:42:76:76:aa:75:e5:3e:34:3e:fa:47:c2:3f:
                    0b:80:8f:11:e9:fa:ff:b1:e9:45:35:a3:d3:1c:92:
                    93:98:32:80:8b:07:b7:00:91:5d:64:ea:a7:2a:78:
                    a4:a9:20:ff:1c:32:df:e3:d8:15:ac:2f:58:26:40:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BA:C6:CB:A9:74:BE:20:D0:ED:89:77:70:4D:DB:CE:F4:DA:37:E0
            X509v3 Authority Key Identifier:
                keyid:EE:EC:53:EA:D1:7F:BF:89:B2:21:D9:BA:5A:FC:D0:10:79:0C:99:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7uxT6tF_v4myIdm6WvzQEHkMmU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CFF62/1A8A0664626211EE80BC855DC4F9AE02/7uxT6tF_v4myIdm6WvzQEHkMmU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:16:40:65:4e:57:97:23:09:25:84:a4:4e:7d:74:74:cd:1b:
         a5:9e:ab:00:6a:53:3d:36:74:31:d9:3a:69:21:e0:22:2f:18:
         94:8e:03:64:6f:c1:b8:61:08:46:9d:d6:87:3b:75:1c:fa:d7:
         91:ff:0b:7d:14:c9:54:11:ff:76:2d:1a:21:f6:23:ea:cd:7a:
         a9:29:7a:b8:7a:23:d2:1d:e3:bb:03:56:9b:aa:c9:f2:72:43:
         0e:d3:77:c0:b1:09:b8:f1:6a:9c:0b:92:60:a7:90:c8:58:fa:
         dd:76:54:f5:81:21:d4:86:52:c9:d2:1d:f9:ad:44:02:41:17:
         a3:aa:96:d8:27:24:b6:c2:b2:f8:99:eb:c7:92:0d:93:e3:95:
         03:75:58:ef:95:10:dc:7e:f7:e5:20:f7:9f:c8:4c:7e:97:91:
         1f:a6:af:53:3b:1c:ca:25:77:0e:60:37:4b:7b:38:13:ce:4b:
         cc:33:1e:c4:7a:23:b5:bf:ca:bd:da:78:40:ff:1d:2b:25:63:
         a1:1c:14:d0:b5:69:ac:e6:00:12:0f:e1:e8:8f:34:63:b2:5d:
         3b:d7:f0:8a:d6:fb:8f:94:56:e8:85:8d:ef:64:0d:87:67:0a:
         95:2d:8e:9e:8b:95:9a:b4:7b:74:30:f8:e1:79:61:cc:50:95:
         12:44:61:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:29:16 2026 by rpki-client