Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          powHzOj/qjqVlPC0MXclHNsODTGtW+9+n+FuHT2YlzQ=
Subject key identifier:   CC:A1:16:D9:71:30:8B:39:74:E5:58:63:E3:EA:C9:9F:C7:B2:47:AD
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       02CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          02CE
Signing time:             Wed 25 Mar 2026 01:00:59 +0000
Manifest this update:     Wed 25 Mar 2026 01:00:58 +0000
Manifest next update:     Wed 01 Apr 2026 01:00:58 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: iIFEcRl3CMxZVRJq0AOwycDX4z+EWRTH9DEDX5Bl6vg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 01:00:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 719 (0x2cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: Mar 25 01:00:58 2026 GMT
            Not After : Apr  1 01:00:58 2026 GMT
        Subject: CN=69c333cb-4841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:b6:91:d3:7f:b2:ff:ef:8d:14:4c:70:a2:07:
                    9b:45:99:c1:30:34:6d:98:2a:60:e6:2a:8a:20:a9:
                    f1:cf:dd:ca:00:41:f5:de:7a:bd:72:b4:74:0c:6f:
                    c5:e2:1c:2c:1c:45:ab:ef:d9:9e:12:c5:c4:9e:4e:
                    e6:13:69:ce:ec:7a:e6:40:0e:17:89:d2:a1:5f:13:
                    c7:e7:78:5a:d9:3e:aa:79:29:07:1b:fd:21:99:5f:
                    09:86:03:ea:03:11:b6:fd:da:c0:9f:87:46:2b:43:
                    17:0c:5b:5a:92:7e:5f:52:9b:cf:2c:be:75:25:a8:
                    1a:f5:01:76:6a:56:a1:7f:94:f8:d1:ce:7e:c1:ca:
                    45:10:d6:21:6a:ad:10:c0:17:b8:56:98:b4:f1:7e:
                    b5:4d:3f:1d:2b:58:5f:62:19:75:cc:2c:0b:e6:b4:
                    e3:17:a5:04:ad:3d:83:30:19:38:b7:83:91:86:b9:
                    51:8b:29:47:fd:da:2d:02:62:91:21:55:50:8a:89:
                    91:b8:77:36:9e:7b:1b:92:88:f1:01:16:b0:e2:16:
                    4f:33:40:e3:f2:99:52:2e:55:4f:49:d8:af:35:fc:
                    9f:49:69:92:82:54:3b:08:0d:ed:a7:e0:ed:1a:83:
                    c0:07:61:79:3a:c9:74:55:7b:7d:3b:f2:94:a5:ff:
                    01:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A1:16:D9:71:30:8B:39:74:E5:58:63:E3:EA:C9:9F:C7:B2:47:AD
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:19:25:ca:1a:a8:cf:55:eb:4a:a0:90:de:ac:5b:91:99:aa:
         00:11:d8:a4:b8:26:f8:17:ce:74:47:a9:53:f5:aa:02:6c:03:
         37:46:46:a4:ed:87:d9:e2:ee:1d:58:7b:46:2c:df:61:5a:b4:
         e6:7e:7b:45:5b:51:48:27:44:80:fe:e0:2e:a8:61:a9:66:75:
         a0:94:cc:23:d0:a7:40:96:d2:95:7c:ad:d4:58:90:27:f2:37:
         d7:27:5c:0b:b3:32:47:fb:38:5b:34:f1:91:25:9d:39:96:13:
         55:17:43:e6:57:9a:0c:b1:5e:f7:b0:93:f1:13:f7:9e:7f:0f:
         74:90:19:62:9c:28:81:ea:f7:b2:87:71:67:0d:18:4a:f7:f6:
         ff:e3:b5:b7:98:f4:a6:74:a5:91:95:6d:42:8b:0b:ae:5c:3b:
         a4:8e:e9:40:cf:28:8f:92:82:e8:d4:2c:85:dd:6a:01:9f:2d:
         c7:ac:dd:60:fc:35:b2:7d:23:94:4a:c6:77:b1:b3:11:52:c1:
         76:3c:eb:fc:b1:1d:ee:83:8d:fe:0c:fe:a1:61:5d:8f:c7:11:
         86:3e:79:89:4b:75:93:92:14:f7:c7:27:66:26:da:cd:a2:12:
         d0:37:f9:76:0f:59:98:b1:76:c0:8b:e4:db:eb:6d:ea:e0:ac:
         b5:39:13:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:53:29 2026 by rpki-client