Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
File:                     aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft (raw, json)
Hash identifier:          xwnHV6sDgjHrnY9I773e+36+m+IL9UJZWUGevP6+njE=
Subject key identifier:   B1:16:60:B2:86:77:40:EF:10:91:5D:2C:01:F5:58:2E:50:44:65:9D
Authority key identifier: 68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03
Certificate issuer:       /CN=A915AF7A/serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
Certificate serial:       06AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
Manifest number:          0870
Signing time:             Sat 04 Apr 2026 22:20:35 +0000
Manifest this update:     Sat 04 Apr 2026 22:20:35 +0000
Manifest next update:     Sat 11 Apr 2026 22:20:35 +0000
Files and hashes:         1: aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl (hash: 5GcYHYq9kNeu1mLHYPAqgjd00S3q0tMO4Q8EV9B2Aoc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl
                          rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:20:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1709 (0x6ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915AF7A, serialNumber=6880D323AA3F2D5146050640F321A6129000DF03
        Validity
            Not Before: Apr  4 22:20:35 2026 GMT
            Not After : Apr 11 22:20:35 2026 GMT
        Subject: CN=69d18eb3-2ecd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9e:8b:67:4d:bf:10:3b:50:85:cd:0a:0a:da:
                    50:55:68:87:62:16:4e:f6:77:71:3d:af:9a:31:b6:
                    de:35:fa:97:94:8c:f3:5a:cb:d6:3f:89:5b:72:12:
                    c0:47:83:1e:d3:79:e4:a3:2f:bb:9c:25:5e:ae:b7:
                    6b:96:c8:f9:29:a2:aa:aa:aa:2d:b6:3e:ff:8d:51:
                    77:6d:0d:ae:0d:9f:bf:a6:ad:2a:60:53:b0:cc:58:
                    87:ce:78:33:39:f8:a3:c4:69:d0:69:e4:52:be:9c:
                    e4:11:20:ed:f1:1e:0e:5f:81:2c:b5:11:da:f6:76:
                    2b:51:98:dd:80:91:3e:4f:18:c4:18:16:ba:09:15:
                    5e:e8:23:7a:db:b6:f4:62:c1:95:a9:e6:00:48:c2:
                    c5:5d:29:0f:f1:bf:89:a2:49:37:e7:a5:53:03:83:
                    67:b3:cc:51:7f:7d:60:ef:56:a0:96:83:3d:ba:26:
                    90:da:74:71:56:d8:62:c7:ab:34:93:9a:e0:5d:9d:
                    dc:d7:23:31:1c:f6:04:ca:91:61:3b:ea:37:cd:1b:
                    93:52:12:bf:8a:7b:40:6e:c1:9d:22:a5:60:9c:47:
                    3c:28:83:9d:d3:ca:27:3a:65:13:95:88:27:2c:42:
                    2d:8c:0d:7d:0b:49:84:90:48:08:e6:ca:55:f9:0e:
                    df:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:16:60:B2:86:77:40:EF:10:91:5D:2C:01:F5:58:2E:50:44:65:9D
            X509v3 Authority Key Identifier:
                keyid:68:80:D3:23:AA:3F:2D:51:46:05:06:40:F3:21:A6:12:90:00:DF:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aIDTI6o_LVFGBQZA8yGmEpAA3wM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915AF7A/E0533336BAC911EBB807D51CC4F9AE02/aIDTI6o_LVFGBQZA8yGmEpAA3wM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3f:64:95:2c:d7:08:67:96:95:43:25:d1:bd:85:5d:76:3a:af:
         4d:46:bb:9d:cb:33:fe:04:1f:7a:69:05:e5:26:06:3a:ae:d7:
         15:ba:ba:77:3a:6b:a1:ca:6d:34:18:dc:ce:98:c7:31:23:49:
         60:11:ac:75:34:df:8d:0c:3c:ca:f5:e0:0c:e7:73:3f:e8:10:
         04:25:f9:a1:0e:d1:ca:ec:57:7f:01:0b:c6:41:5e:08:ff:8e:
         e9:8b:41:ab:4d:24:45:b0:a3:17:c5:b5:e3:af:81:99:7b:62:
         0a:d2:28:00:f3:03:90:27:11:45:43:b6:b7:95:c5:1e:d0:ee:
         25:71:1f:01:04:79:49:9a:59:75:79:7b:65:65:28:2b:61:07:
         8f:05:89:92:5b:3b:6f:a9:bc:8f:6d:51:09:65:bd:eb:e9:ca:
         a4:20:1f:d9:d3:73:ba:4f:35:63:8f:41:16:28:a0:b3:c3:db:
         a6:2e:fe:1f:43:e9:04:61:f3:20:e3:fb:d0:af:99:95:0b:6d:
         d5:ba:11:70:0e:0f:f0:53:85:8b:ac:0d:c5:1f:5c:3e:0b:b1:
         bc:73:29:c5:b0:f2:d9:9b:66:9e:25:69:c8:f3:5c:91:44:7c:
         63:8d:f6:c2:77:fe:91:19:01:50:0d:b2:2c:53:f8:2b:cb:fe:
         eb:3e:e3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:17 2026 by rpki-client