Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
File:                     SGjuTp_AEUegPCaatSEKj-cnp4s.mft (raw, json)
Hash identifier:          qLk3R1KYy5IrLQNsT0nIB0nVYMZCCtmX5hsZnfKV3Vo=
Subject key identifier:   48:20:D3:BF:25:18:CA:2E:1E:49:A2:6F:CC:00:9D:20:F4:33:59:2C
Authority key identifier: 48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B
Certificate issuer:       /CN=A9131CF4/serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
Manifest number:          52
Signing time:             Sun 05 Apr 2026 07:31:47 +0000
Manifest this update:     Sun 05 Apr 2026 07:31:47 +0000
Manifest next update:     Sun 12 Apr 2026 07:31:47 +0000
Files and hashes:         1: SGjuTp_AEUegPCaatSEKj-cnp4s.crl (hash: lYEshNhFquhbqJdeGNelZIaviz+10HxdjHb17+0nXYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl
                          rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:31:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131CF4, serialNumber=4868EE4E9FC01147A03C269AB5210A8FE727A78B
        Validity
            Not Before: Apr  5 07:31:47 2026 GMT
            Not After : Apr 12 07:31:47 2026 GMT
        Subject: CN=69d20fe3-e333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:ef:7f:f7:31:44:f3:76:ec:91:8a:c5:31:
                    78:f3:eb:38:0f:cf:0a:57:42:31:75:98:43:47:d3:
                    f8:87:d5:5a:04:36:36:2b:ab:28:b1:7d:07:51:e9:
                    9d:96:b3:fe:1e:24:44:c5:76:d0:2b:68:f4:3b:7e:
                    84:2f:4b:39:96:56:01:52:35:e0:e0:d9:60:e1:d0:
                    d4:05:d4:ee:94:85:1b:0b:dc:b6:c0:2e:19:ea:1c:
                    85:45:89:7b:05:e8:06:c4:72:a2:55:bf:46:98:59:
                    5b:9d:6b:36:20:cc:c2:7b:3a:8a:fc:a3:d9:5b:38:
                    5d:06:16:a7:3e:98:87:94:e4:45:1b:d3:9a:52:9e:
                    02:ba:65:de:54:3a:58:91:fb:2e:d6:44:09:2d:54:
                    bd:36:92:55:ef:c9:99:5b:57:d1:3c:de:a9:9b:c2:
                    78:61:03:c2:27:0f:af:de:cb:ec:53:28:40:2f:85:
                    9e:d0:9c:45:46:50:7d:72:22:e6:ec:00:93:67:32:
                    e9:10:f6:13:9d:1b:c0:f4:ab:e2:cf:7d:6a:3e:c6:
                    be:91:52:63:1a:21:d1:4f:51:2b:73:d8:25:9b:50:
                    cd:2e:68:82:34:66:0f:88:a2:b8:a6:9d:ce:21:58:
                    e6:86:9f:31:b0:3a:d0:6d:09:06:d1:4b:e1:c4:0f:
                    d0:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:20:D3:BF:25:18:CA:2E:1E:49:A2:6F:CC:00:9D:20:F4:33:59:2C
            X509v3 Authority Key Identifier:
                keyid:48:68:EE:4E:9F:C0:11:47:A0:3C:26:9A:B5:21:0A:8F:E7:27:A7:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SGjuTp_AEUegPCaatSEKj-cnp4s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131CF4/47BFD4DCB71111F0A5C28073C4F9AE02/SGjuTp_AEUegPCaatSEKj-cnp4s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:08:88:87:cc:7f:96:d1:26:14:bb:d4:3f:cd:a5:bb:5d:cd:
         7e:3d:66:3d:65:47:53:2e:17:02:78:c0:c6:33:ad:2e:78:18:
         a3:03:49:d5:33:ab:a1:24:2d:1a:44:16:27:b6:83:ce:31:a7:
         7f:90:82:48:19:b4:61:90:8c:55:e8:6e:8f:fc:b5:68:f5:59:
         21:50:f9:96:4d:b1:c7:4c:86:ad:f4:f2:38:0d:0d:6f:c5:ed:
         59:fb:a3:5f:95:23:6f:04:10:f6:36:6d:89:94:f7:27:a7:b4:
         44:3b:db:41:d1:c6:e0:8f:61:3b:72:b6:61:09:5c:5d:cf:3d:
         b7:36:69:ce:4b:46:9b:ca:f9:d9:98:2c:b4:41:8e:32:1b:5b:
         0d:c6:94:7f:8c:20:5e:72:3e:91:41:f3:03:ba:d1:12:a2:74:
         df:df:3f:3e:b4:4c:fb:14:61:f2:fe:18:f8:f5:ee:07:ff:cd:
         38:24:64:89:8a:03:ab:90:b4:94:f2:ae:27:53:9f:4e:1f:22:
         7c:b3:0c:87:46:08:87:33:c0:9e:25:2c:15:0d:31:ba:7a:12:
         e6:d6:93:69:b7:36:a3:af:e1:18:75:b2:11:47:c3:5f:45:e8:
         e5:07:b1:87:d4:9c:d9:77:12:5e:c6:9a:5a:c8:55:16:72:10:
         52:1a:4c:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:40:15 2026 by rpki-client