Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File:                     5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier:          0e9ttK2QwZ4ntXV6aBhHnbjtmPpzzRj34d7r3uaBdjc=
Subject key identifier:   47:4E:99:47:FA:A9:CD:DB:DB:12:47:A0:CC:22:50:BF:29:E1:54:AE
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer:       /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial:       014B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number:          014B
Signing time:             Wed 25 Mar 2026 04:21:20 +0000
Manifest this update:     Wed 25 Mar 2026 04:21:19 +0000
Manifest next update:     Wed 01 Apr 2026 04:21:19 +0000
Files and hashes:         1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: D3t6M6vHbXiRzsFIWZvT/G7KXMXDrPABz7p8Wv+NPGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 04:21:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 331 (0x14b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
        Validity
            Not Before: Mar 25 04:21:19 2026 GMT
            Not After : Apr  1 04:21:19 2026 GMT
        Subject: CN=69c362c0-70e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b9:21:af:8e:63:20:23:1e:f5:30:7a:7d:27:
                    0d:f6:99:44:c8:b7:9b:92:9e:63:ef:09:83:62:80:
                    db:0a:1b:06:89:e2:b3:ce:33:ef:36:5e:1b:04:fc:
                    0f:8d:d0:3b:55:5e:ea:40:ca:e1:02:34:82:df:0f:
                    87:d3:df:5a:de:90:f9:62:1a:25:41:ec:d9:2f:be:
                    ba:53:d0:e9:c5:46:17:cc:d2:ce:ed:36:97:98:f0:
                    e9:7c:91:2f:52:eb:aa:71:2f:b6:7d:b0:eb:5f:74:
                    c7:cc:de:d8:e8:8c:71:2d:8b:dd:d8:1d:73:7f:66:
                    08:da:4e:44:f2:18:29:ec:e9:c8:95:ea:b8:0c:34:
                    19:1f:38:cf:6c:c9:7b:38:fe:42:b1:18:0f:8d:95:
                    a1:00:8c:32:59:1d:e7:83:36:0a:ba:bf:57:55:91:
                    91:f3:2f:87:8b:52:98:a8:74:a6:11:f3:5e:6e:68:
                    a4:21:5a:79:09:d9:71:1f:59:1d:76:bc:bc:c7:92:
                    83:4d:df:32:a5:81:d5:55:d9:5b:6c:35:c3:49:eb:
                    97:5e:6e:ab:38:40:f9:64:ad:14:e8:0a:4f:b0:5c:
                    ca:2e:1b:d7:cb:ba:8a:24:c6:00:65:50:27:db:ab:
                    bc:9c:a1:6d:41:11:dc:11:18:fa:6c:4a:f9:33:d4:
                    e1:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:4E:99:47:FA:A9:CD:DB:DB:12:47:A0:CC:22:50:BF:29:E1:54:AE
            X509v3 Authority Key Identifier:
                keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:85:5d:4d:c6:71:a4:e4:e2:b5:5d:8c:69:64:e0:77:60:fa:
         c6:0c:07:30:01:33:d8:c7:6e:18:12:7f:dc:86:3c:bc:19:47:
         11:78:d8:6d:3e:10:66:33:b6:e6:e9:fc:02:82:27:6b:91:5b:
         11:59:3d:4a:88:79:e8:dd:f4:11:46:26:eb:91:c2:d9:0d:f0:
         e1:d7:72:4d:fd:26:0a:d4:06:0d:5f:6b:31:4f:b3:d3:91:16:
         6e:c7:e6:08:6b:a3:44:af:97:80:25:61:a0:d9:64:92:54:1e:
         1b:8d:c2:71:91:f9:37:ed:4d:56:6b:5c:1b:7f:6d:02:c0:c4:
         93:24:00:3b:5f:26:ca:8e:fc:1a:9c:d7:71:ae:24:dc:1b:77:
         e7:de:2f:72:ce:8d:77:99:52:e4:7f:79:9b:7f:f6:b2:ec:ca:
         67:f8:2b:1e:a9:1d:02:07:f4:5a:23:f1:43:76:6d:0e:bf:0a:
         40:0c:9f:f0:7b:6b:58:cd:ad:29:44:d5:26:92:b4:b0:03:ad:
         d5:3b:a8:32:12:35:22:2d:0a:64:7d:59:e8:af:eb:27:89:54:
         1a:d5:57:e7:e0:1d:f8:19:12:de:d9:77:62:3d:2f:49:e3:7e:
         c0:6c:b9:75:4b:6b:c1:9d:10:b0:76:7b:0f:f3:78:78:1d:ce:
         16:d5:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:58:28 2026 by rpki-client