Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File:                     7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier:          gtsRc0S7XSNkM31wPxpEf60wWgIv4zhVOquHhZgqJOg=
Subject key identifier:   F5:3B:99:2D:F6:3F:A7:96:64:2E:4F:C1:CA:6C:FA:9D:3D:BE:C4:BB
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer:       /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial:       01BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number:          01BA
Signing time:             Wed 25 Mar 2026 03:09:14 +0000
Manifest this update:     Wed 25 Mar 2026 03:09:13 +0000
Manifest next update:     Wed 01 Apr 2026 03:09:13 +0000
Files and hashes:         1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: Kk3X4DMAs8GcjKz7DKBkKxhQZyGGufCNtS+iy9doRR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
                          rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:09:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 442 (0x1ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
        Validity
            Not Before: Mar 25 03:09:13 2026 GMT
            Not After : Apr  1 03:09:13 2026 GMT
        Subject: CN=69c351da-8ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:65:13:95:d9:47:11:04:0f:a8:ba:b5:18:55:
                    81:46:af:1a:c2:b3:93:c6:10:0f:e5:d3:b3:79:5e:
                    45:ba:5c:fc:d7:e0:27:c0:cb:1c:24:47:ec:d4:74:
                    fd:5a:74:d9:8c:06:e4:cf:de:22:0b:72:4b:2f:34:
                    e8:99:29:ba:8a:68:9b:63:b7:48:b3:48:b9:6b:7b:
                    62:ab:21:23:f8:e2:99:d4:79:c1:32:61:b1:5b:b7:
                    0c:07:88:eb:d0:e5:a0:f8:a7:37:66:59:95:5a:7c:
                    d7:e2:19:55:99:f0:ef:7d:fb:12:52:60:c7:a2:25:
                    1b:7b:45:bb:4e:19:4a:c7:48:d7:79:47:bb:9c:37:
                    de:78:66:a2:93:3e:39:dc:79:f5:33:3f:03:98:d7:
                    24:fc:33:c6:eb:d9:ee:ee:9a:f0:1c:db:fe:1b:29:
                    31:90:6d:33:b8:a9:c9:bf:e9:21:b0:0d:72:f6:46:
                    92:ce:e5:e8:8c:aa:cb:c3:3b:89:30:d6:f0:80:22:
                    1b:98:70:2c:ea:ec:3b:0a:3d:79:3d:e1:27:87:e5:
                    4c:0e:b5:e8:a1:08:2b:67:5b:35:f3:f8:42:a7:99:
                    b3:c6:76:97:3f:37:9b:37:79:71:42:45:c1:c0:e4:
                    66:8f:38:e8:ec:13:7a:1f:4f:f3:0e:97:05:7b:16:
                    3d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:3B:99:2D:F6:3F:A7:96:64:2E:4F:C1:CA:6C:FA:9D:3D:BE:C4:BB
            X509v3 Authority Key Identifier:
                keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         56:5b:66:3f:e2:2f:ab:79:7a:41:9a:59:31:5a:c7:5c:6c:3c:
         70:54:63:66:a1:37:4a:b6:e3:ba:79:38:27:9f:d3:7f:a0:71:
         e3:54:dd:9a:78:7b:97:f7:b0:19:4d:4e:92:34:36:95:a7:36:
         77:1e:44:c9:4b:28:45:c6:a4:e5:82:c2:e1:8a:09:42:e3:ba:
         f9:f2:98:44:20:8d:a9:22:c2:b2:ce:05:10:16:fc:07:61:26:
         b0:0c:ed:f5:7b:27:52:17:51:21:85:f6:1e:23:2b:e2:0e:3b:
         54:e8:26:b1:ec:3d:eb:13:06:a6:13:7f:3f:b0:7c:d2:21:02:
         f4:c1:f4:40:e1:b8:1d:1f:60:5e:7e:4a:95:01:65:f1:10:4d:
         b6:83:19:67:be:bb:fe:9a:37:d9:fe:6e:f5:95:d7:94:47:6e:
         3f:d7:b7:b7:b9:6a:95:be:aa:eb:12:43:07:d8:e4:95:3e:2c:
         28:d8:7a:66:10:9b:61:65:b7:fb:66:9f:4c:ee:cf:64:1d:67:
         a1:c2:be:66:b6:c1:c3:34:d3:31:2f:d5:31:57:c2:22:72:28:
         dd:90:f5:33:7c:6a:61:59:3d:06:18:59:fa:a8:54:36:45:6f:
         41:69:7f:45:74:a5:b0:fe:03:c1:ad:ee:ff:67:e5:6f:02:6e:
         39:79:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 14:57:40 2026 by rpki-client