Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
File:                     0xR9jSeprR3LgjR_FEsIVeBV4aA.mft (raw, json)
Hash identifier:          dzkoq48pnCNCY/hNOfL4L6Q5R9h619VEv8j/04VVvoI=
Subject key identifier:   A2:36:CD:52:20:C1:FE:48:48:B4:AF:CB:57:2D:5E:4C:F2:C0:9C:93
Authority key identifier: D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0
Certificate issuer:       /CN=A91402E0/serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
Certificate serial:       01FB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
Manifest number:          01FB
Signing time:             Sun 05 Apr 2026 02:40:18 +0000
Manifest this update:     Sun 05 Apr 2026 02:40:17 +0000
Manifest next update:     Sun 12 Apr 2026 02:40:17 +0000
Files and hashes:         1: 0xR9jSeprR3LgjR_FEsIVeBV4aA.crl (hash: bVc0MPMvZZyPrG8g4sd2WyxXb4b1Jbua10tpRlisRKg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl
                          rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:40:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 507 (0x1fb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91402E0, serialNumber=D3147D8D27A9AD1DCB82347F144B0855E055E1A0
        Validity
            Not Before: Apr  5 02:40:17 2026 GMT
            Not After : Apr 12 02:40:17 2026 GMT
        Subject: CN=69d1cb92-f5bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ab:a5:23:45:ec:c0:a9:37:52:f7:fe:3b:ac:
                    6a:e1:8d:08:94:2f:3b:08:90:b8:4b:57:5d:90:15:
                    ae:50:09:88:1f:00:c9:84:2d:e3:01:a4:83:c4:c7:
                    ae:bd:6c:aa:2a:5f:60:f1:05:c8:0d:11:d6:73:25:
                    3d:7e:ec:2a:8f:a2:b6:4c:f5:03:f7:fd:77:ea:3e:
                    ed:31:5f:85:42:70:4d:19:87:72:2c:74:8b:61:00:
                    7e:25:ec:ef:c5:d1:89:bb:6f:86:bf:20:c7:a8:e9:
                    4e:11:8e:71:3a:9b:28:47:3e:b3:8c:7b:67:6c:56:
                    bb:7e:45:54:7f:88:d0:97:81:5b:2c:02:df:49:30:
                    7c:b3:41:d9:3e:e2:b2:fa:39:f8:2a:0d:9f:5a:57:
                    75:f5:bf:2c:a1:fc:da:b7:32:62:c3:82:9b:21:c9:
                    d2:c9:a0:9c:4c:f6:e7:61:49:a1:f6:6e:b7:34:5c:
                    f0:f8:07:48:8b:1f:41:86:b1:12:3a:7d:8a:1d:a4:
                    8b:83:3f:d0:13:99:57:0e:85:0f:7f:07:5f:41:ed:
                    5c:82:bf:9c:03:fa:29:43:13:2a:c7:96:ca:9c:e8:
                    7e:c1:44:f7:b9:20:c3:b2:94:eb:fb:d1:cc:48:99:
                    0a:9c:88:f2:5d:a4:38:62:35:bc:3e:0a:fc:e8:fe:
                    d1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:36:CD:52:20:C1:FE:48:48:B4:AF:CB:57:2D:5E:4C:F2:C0:9C:93
            X509v3 Authority Key Identifier:
                keyid:D3:14:7D:8D:27:A9:AD:1D:CB:82:34:7F:14:4B:08:55:E0:55:E1:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0xR9jSeprR3LgjR_FEsIVeBV4aA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91402E0/AA6BF4402B5811EE9FD2F01EC4F9AE02/0xR9jSeprR3LgjR_FEsIVeBV4aA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:0c:a0:bf:e6:04:9f:31:bd:3a:ac:0f:d9:22:45:5e:63:dd:
         37:7c:9f:01:79:0d:7e:47:bf:15:4a:55:76:ee:65:f9:9f:c4:
         96:a9:0c:d4:92:f5:fd:ec:de:dc:e7:06:13:0b:05:dc:f8:ea:
         de:46:b1:0e:bf:ab:c5:8c:9f:68:93:cd:0e:83:1b:11:3e:86:
         84:b8:bf:1d:4f:87:fc:88:c6:9f:cb:62:a4:ef:be:37:ef:17:
         e1:d6:be:0f:a4:ed:bf:c0:ab:0c:62:5f:f1:17:66:44:c3:ac:
         01:c2:32:dd:35:d4:24:99:96:e8:13:80:98:dc:48:56:4d:84:
         e2:8b:8f:2a:0c:41:8e:34:16:26:29:ff:73:91:98:ed:8d:88:
         72:06:1f:d9:6c:92:a7:c0:e5:5e:83:f6:07:85:c8:e8:fa:1c:
         59:61:45:0a:ae:04:b8:b6:7c:b0:21:3d:be:43:60:0a:02:79:
         3a:7f:82:93:27:df:6c:17:16:f5:8b:d4:49:23:e6:5e:c8:84:
         d9:9f:e0:2c:51:a8:ba:c1:d7:90:aa:3f:e7:01:a5:92:e7:8c:
         72:41:ca:4e:63:f8:8e:44:c7:48:c7:ad:85:95:a3:5d:8f:34:
         7f:0a:0f:79:83:54:1f:df:15:52:3e:16:2e:50:4b:b2:44:93:
         f5:5a:5f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:18 2026 by rpki-client