Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
File:                     stpsovF-3e60xFAzYfTYgigLyog.mft (raw, json)
Hash identifier:          JN3kkHiEbCAckT5tOdKr7QHzKpcCgdmwi23+naxqK2U=
Subject key identifier:   58:47:5E:A8:76:76:8B:BA:EB:02:B7:AC:2E:E3:7E:A0:88:35:DE:1E
Authority key identifier: B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88
Certificate issuer:       /CN=A9122FD2/serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
Certificate serial:       088B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
Manifest number:          088B
Signing time:             Sat 04 Apr 2026 20:20:39 +0000
Manifest this update:     Sat 04 Apr 2026 20:20:39 +0000
Manifest next update:     Sat 11 Apr 2026 20:20:39 +0000
Files and hashes:         1: stpsovF-3e60xFAzYfTYgigLyog.crl (hash: 04s3Oqq2m4/Gl4WVQ2uGF521NIZOMQFgGmbSNZRAVuo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl
                          rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 20:20:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2187 (0x88b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9122FD2, serialNumber=B2DA6CA2F17EDDEEB4C4503361F4D882280BCA88
        Validity
            Not Before: Apr  4 20:20:39 2026 GMT
            Not After : Apr 11 20:20:39 2026 GMT
        Subject: CN=69d17297-6905
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:17:18:3c:3f:eb:81:40:6a:4f:b1:38:d1:7e:
                    7b:20:f3:94:07:fe:4a:e4:f3:11:8e:e1:e1:aa:5a:
                    4f:a8:32:58:31:3e:4e:ae:34:7d:cb:80:4c:6d:94:
                    81:b0:18:7a:12:63:7c:4c:5e:e6:62:26:71:18:61:
                    c7:e1:05:e8:a5:ef:e7:9b:cc:d9:66:c5:21:29:bd:
                    c5:90:6c:02:9b:7a:e4:07:3d:27:f6:c4:38:2f:37:
                    df:92:65:21:eb:ea:b5:a4:2b:ef:70:af:66:4d:6d:
                    e6:fa:44:ab:ba:81:1a:55:97:bc:97:b4:b5:11:84:
                    ef:bb:eb:fc:9a:de:b6:84:a2:89:c7:30:f2:78:a0:
                    82:4c:18:a5:9a:bb:03:c7:30:65:50:2d:f2:ab:77:
                    bf:29:b8:6f:de:72:6f:23:ba:5e:a3:5f:a4:63:6b:
                    93:76:e5:cf:fc:44:ca:6e:89:0a:76:40:ba:a1:96:
                    6e:41:54:d3:8f:16:ed:d6:3e:77:d0:05:4d:50:2a:
                    35:b5:d2:4b:d0:69:96:26:c2:15:b5:26:1d:75:fc:
                    1d:d1:9f:3a:c2:b2:68:9b:4e:31:af:d8:29:d0:ad:
                    7f:c7:2c:56:21:fc:a3:2a:54:ab:69:40:8a:fc:45:
                    d9:c0:93:9f:d1:25:78:f8:63:fe:61:4d:bb:0b:b5:
                    d7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:47:5E:A8:76:76:8B:BA:EB:02:B7:AC:2E:E3:7E:A0:88:35:DE:1E
            X509v3 Authority Key Identifier:
                keyid:B2:DA:6C:A2:F1:7E:DD:EE:B4:C4:50:33:61:F4:D8:82:28:0B:CA:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/stpsovF-3e60xFAzYfTYgigLyog.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9122FD2/C81B2628E5FB11EA84544A74C4F9AE02/stpsovF-3e60xFAzYfTYgigLyog.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:cf:5b:80:13:72:0a:5a:72:f8:cf:dc:55:0a:18:8d:80:c6:
         77:9a:8a:97:09:b3:ac:40:4c:53:cb:1c:cc:7c:48:b5:83:e3:
         3f:a1:df:6e:7d:66:91:c1:1e:01:89:1a:29:1c:a9:7a:99:62:
         2d:18:c4:13:6f:0b:fa:13:63:2a:54:3e:5f:3e:7a:99:d0:01:
         6a:d0:0e:05:dc:a8:73:56:b3:6b:fb:bb:1b:59:da:bb:c9:cf:
         1c:38:c2:6a:1f:2c:68:7a:f7:34:e1:31:62:95:7e:73:67:d1:
         38:5a:75:cc:d7:79:76:b5:8b:20:ce:46:a9:3e:59:23:78:85:
         ad:8d:31:78:dd:19:d0:73:91:03:1f:14:d2:e2:4b:b6:25:96:
         ca:d4:45:2d:25:f5:c7:1f:85:15:01:8d:78:b1:c0:76:fd:4c:
         04:c1:77:cd:cc:31:7a:9d:9a:14:9d:c2:83:f5:60:f1:12:52:
         d0:e2:58:c1:f3:36:4d:19:91:e8:4b:da:f2:75:7f:dd:61:87:
         de:d3:8e:88:15:38:27:ed:63:23:e8:8e:5b:6e:b5:09:f1:b8:
         b9:5a:6e:b6:ee:8f:23:0b:62:f3:93:23:4e:7b:ca:81:64:62:
         bf:1b:11:76:7a:07:28:ab:00:f6:75:b2:56:a4:7f:62:82:55:
         bc:48:41:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:59:05 2026 by rpki-client