Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
File:                     hYtkVOIiRseB5RNSswVkEJhoV34.mft (raw, json)
Hash identifier:          AgqxUrCxR3IbJhqALwF0UgwkNOOmF3SVvOaS66wKRhM=
Subject key identifier:   92:04:80:C5:2E:78:B2:CB:DC:65:68:7E:F9:4F:6E:05:18:A6:D4:D0
Authority key identifier: 85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E
Certificate issuer:       /CN=A91F65C7/serialNumber=858B6454E22246C781E51352B30564109868577E
Certificate serial:       018E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
Manifest number:          018E
Signing time:             Wed 25 Mar 2026 03:39:16 +0000
Manifest this update:     Wed 25 Mar 2026 03:39:15 +0000
Manifest next update:     Wed 01 Apr 2026 03:39:15 +0000
Files and hashes:         1: hYtkVOIiRseB5RNSswVkEJhoV34.crl (hash: GhZbm77nCxAyH0/JUoQVFrLPq6yWJgbwJjE/Ny7xzMs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl
                          rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 03:39:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 398 (0x18e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F65C7, serialNumber=858B6454E22246C781E51352B30564109868577E
        Validity
            Not Before: Mar 25 03:39:15 2026 GMT
            Not After : Apr  1 03:39:15 2026 GMT
        Subject: CN=69c358e4-e31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:45:99:77:4d:05:0e:4c:95:aa:51:84:b2:17:
                    04:10:94:d1:1a:5d:c3:a8:df:4f:60:ed:e7:1a:79:
                    94:f8:b9:7d:9a:83:18:94:33:08:bb:b9:e7:09:d4:
                    a7:87:93:21:64:64:1c:75:31:bc:00:52:3b:cf:f7:
                    a8:6c:8d:3a:5d:84:e4:53:f0:8c:2b:3b:82:a4:37:
                    5c:8e:88:24:83:7c:1b:6c:ec:db:ee:40:65:56:cd:
                    3f:8b:ee:73:2a:45:c5:ca:0e:63:30:88:ab:a9:ba:
                    48:ac:49:b9:7e:54:a3:5c:17:56:37:31:48:67:10:
                    38:74:04:74:4c:27:86:3b:38:a1:53:d9:b2:50:88:
                    7d:f5:13:67:44:95:1f:c0:84:7f:40:67:e8:cf:b9:
                    a8:05:ea:0d:f5:b7:4e:89:db:44:0b:00:4e:22:5c:
                    5b:40:2c:84:bc:3d:49:f3:2c:15:fe:06:13:5c:5b:
                    95:4d:41:75:0f:36:f5:cd:13:cf:ad:e5:d3:cf:a1:
                    c2:50:53:9a:1b:1a:05:c8:88:07:23:ce:79:1d:c0:
                    4c:33:c4:aa:59:2f:c5:f4:cc:3c:b1:b1:e6:99:0e:
                    63:17:ca:2b:0f:b7:dc:c2:b6:6f:13:62:9d:74:64:
                    bd:ce:63:f5:13:00:75:35:ff:68:40:95:12:67:ba:
                    d4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:04:80:C5:2E:78:B2:CB:DC:65:68:7E:F9:4F:6E:05:18:A6:D4:D0
            X509v3 Authority Key Identifier:
                keyid:85:8B:64:54:E2:22:46:C7:81:E5:13:52:B3:05:64:10:98:68:57:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hYtkVOIiRseB5RNSswVkEJhoV34.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F65C7/ED0FB686C3E411EE9613F583C4F9AE02/hYtkVOIiRseB5RNSswVkEJhoV34.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:f6:41:75:37:ea:7b:9c:c4:9f:96:6f:6a:cb:16:f8:ab:72:
         ed:e9:b4:91:76:79:2d:f9:d5:3a:15:db:f7:05:92:2d:16:c8:
         18:04:39:80:ea:0d:74:df:f1:1c:c0:36:9d:8f:06:5f:0b:a7:
         68:ca:89:f8:42:bc:4d:6b:c0:e7:15:8a:36:c3:69:cb:40:d1:
         f0:65:72:ac:05:d2:51:31:3e:d7:60:8c:f8:89:f4:b2:6c:99:
         18:2a:39:55:8c:f5:5f:b4:35:af:9d:ed:0e:ea:cb:05:17:c1:
         ae:68:88:0e:c2:08:91:5d:fe:db:fe:f4:0f:67:a7:d5:89:6d:
         6b:28:8c:38:97:48:41:e3:b8:22:62:23:bc:26:86:29:56:67:
         7c:00:1b:2f:b8:86:d1:66:ec:66:c9:6f:c8:07:be:0e:0d:bd:
         8d:de:37:26:13:b7:d9:c3:a1:cc:f8:64:e7:8c:11:6e:55:1f:
         5b:11:a0:5d:21:4a:34:80:23:35:49:65:c4:7a:8f:45:94:6f:
         2d:5e:81:e1:99:66:ac:7b:19:cb:64:51:ba:0d:77:f7:c2:41:
         da:fe:58:b2:14:d6:62:dc:b2:5e:1b:9b:44:a6:e5:88:7d:22:
         fd:74:25:f1:13:a6:1f:3e:e9:23:b0:27:66:7a:72:14:14:58:
         0e:19:9b:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:54:05 2026 by rpki-client