Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
File:                     X322UMrENFF2rD8H3vyZGtT-3rg.mft (raw, json)
Hash identifier:          NwDEzA8IrGNdj+xx7tM1CvxLaAF9Undr/f4TJ30NASY=
Subject key identifier:   26:B6:F2:0F:9A:43:04:F5:17:29:40:97:9C:3D:7F:C7:82:42:0E:24
Authority key identifier: 5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8
Certificate issuer:       /CN=A919470F/serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
Certificate serial:       0551
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
Manifest number:          0551
Signing time:             Sat 04 Apr 2026 23:11:27 +0000
Manifest this update:     Sat 04 Apr 2026 23:11:27 +0000
Manifest next update:     Sat 11 Apr 2026 23:11:27 +0000
Files and hashes:         1: X322UMrENFF2rD8H3vyZGtT-3rg.crl (hash: DjPMqydmBPrHe6YSwWaKUWONM49nhsZ5zRxLTNa2i30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl
                          rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1361 (0x551)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919470F, serialNumber=5F7DB650CAC4345176AC3F07DEFC991AD4FEDEB8
        Validity
            Not Before: Apr  4 23:11:27 2026 GMT
            Not After : Apr 11 23:11:27 2026 GMT
        Subject: CN=69d19a9f-9ef2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:92:d3:11:d8:66:ca:15:a2:d1:1d:de:2d:49:
                    c2:d4:c8:6c:2b:3d:d5:03:11:b7:ce:cb:7a:08:9e:
                    21:85:4c:a0:cb:73:62:df:c1:45:db:25:66:af:b2:
                    ab:94:d2:b8:29:a9:1d:15:39:8a:72:ad:ee:82:cc:
                    90:62:87:ae:db:5a:98:c9:da:72:a9:47:a7:86:ca:
                    73:ef:27:10:8b:5e:c4:7a:97:75:f0:a2:64:51:c3:
                    2d:03:2e:65:b4:fd:69:46:a8:0c:28:3f:e8:5f:a8:
                    b8:2a:42:0e:9b:76:70:a6:2c:f1:78:f2:3a:42:55:
                    88:ee:ca:82:ed:89:64:97:18:c8:5e:18:97:6c:83:
                    bc:ff:9a:a0:0c:3c:a5:c3:24:c6:7f:d3:90:99:2c:
                    a7:fc:19:46:5b:e5:1b:75:80:3f:13:6a:aa:30:bd:
                    1f:36:b9:9d:73:19:e9:6d:86:24:f3:0d:eb:f0:ce:
                    76:04:77:d5:83:7b:74:05:2c:cb:db:43:94:e1:23:
                    82:77:b1:79:d3:fb:29:12:94:dd:3b:8a:e1:c1:63:
                    1b:00:f1:e8:a2:c1:fd:31:ff:fd:2c:4c:da:5e:0f:
                    be:73:80:ab:fa:bd:dd:92:21:7f:7d:89:f5:fa:14:
                    1a:5c:64:f2:0a:4b:42:fa:c1:0c:12:dc:25:a1:f8:
                    53:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:B6:F2:0F:9A:43:04:F5:17:29:40:97:9C:3D:7F:C7:82:42:0E:24
            X509v3 Authority Key Identifier:
                keyid:5F:7D:B6:50:CA:C4:34:51:76:AC:3F:07:DE:FC:99:1A:D4:FE:DE:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X322UMrENFF2rD8H3vyZGtT-3rg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919470F/D55EB5F02D0F11ECAF76E684C4F9AE02/X322UMrENFF2rD8H3vyZGtT-3rg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:f9:d2:e5:87:7e:4f:97:cb:f7:e2:2c:09:bc:4b:95:5b:0e:
         68:ba:07:c8:2c:8c:05:68:e9:0d:36:c4:1f:b8:c5:f9:24:4f:
         9d:e9:54:1d:a3:fb:86:65:c5:1f:81:a7:77:5a:14:01:ea:17:
         e9:51:2a:eb:af:18:25:b2:3c:c3:f2:95:e5:90:62:ce:bd:27:
         44:b6:09:33:3f:67:41:ac:59:b3:d8:33:a0:36:b4:43:be:b7:
         08:f8:7c:d0:a3:14:7c:c9:f8:49:a6:7d:b3:a8:83:92:36:61:
         3a:08:ae:e1:7f:87:1c:8a:5c:5c:60:1f:1b:94:25:7c:ab:8a:
         a5:3d:8b:2a:3b:ab:c7:cc:32:9e:a1:64:4a:e8:07:64:71:5e:
         79:f6:eb:b1:27:58:0d:b8:3d:21:61:ce:cb:93:b7:cf:5c:33:
         41:6b:fb:58:cc:3f:ed:b4:0b:54:67:bd:ff:0b:8f:e1:bf:83:
         3d:54:02:19:b7:9c:97:9d:59:3e:c6:75:66:4e:f6:75:22:98:
         c5:c0:72:10:48:7d:b3:62:47:b9:db:d1:6e:74:fa:50:22:e0:
         7e:48:8a:83:22:33:05:6b:91:45:2d:fe:c6:85:1c:a0:4c:20:
         65:bf:91:e9:2d:d1:ca:93:97:09:4c:97:68:5c:d0:e7:2d:45:
         f2:e8:d3:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:57:06 2026 by rpki-client