Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91965C6/1B824AF2178E11F1BA3FA3192B3D8C67/SYL5nGbjqV4IwPyDZUkBSKhYrbw.mft
File:                     SYL5nGbjqV4IwPyDZUkBSKhYrbw.mft (raw, json)
Hash identifier:          AzZ6M/X3puATYk9shg61YD4eN4gyYWFqa2tOxs4xzlI=
Subject key identifier:   57:C4:5F:3C:29:77:65:44:EC:D1:E8:5B:4D:FA:80:65:12:DB:D9:11
Authority key identifier: 49:82:F9:9C:66:E3:A9:5E:08:C0:FC:83:65:49:01:48:A8:58:AD:BC
Certificate issuer:       /CN=A91965C6/serialNumber=4982F99C66E3A95E08C0FC8365490148A858ADBC
Certificate serial:       13
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYL5nGbjqV4IwPyDZUkBSKhYrbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91965C6/1B824AF2178E11F1BA3FA3192B3D8C67/SYL5nGbjqV4IwPyDZUkBSKhYrbw.mft
Manifest number:          13
Signing time:             Sun 05 Apr 2026 08:21:27 +0000
Manifest this update:     Sun 05 Apr 2026 08:21:26 +0000
Manifest next update:     Sun 12 Apr 2026 08:21:26 +0000
Files and hashes:         1: SYL5nGbjqV4IwPyDZUkBSKhYrbw.crl (hash: GdpOcWHjQm3qVfFhIve5Rgs6zyZH4wvnUGPq9vHJsRY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91965C6/1B824AF2178E11F1BA3FA3192B3D8C67/SYL5nGbjqV4IwPyDZUkBSKhYrbw.crl
                          rsync://rpki.apnic.net/member_repository/A91965C6/1B824AF2178E11F1BA3FA3192B3D8C67/SYL5nGbjqV4IwPyDZUkBSKhYrbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYL5nGbjqV4IwPyDZUkBSKhYrbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 08:21:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91965C6, serialNumber=4982F99C66E3A95E08C0FC8365490148A858ADBC
        Validity
            Not Before: Apr  5 08:21:26 2026 GMT
            Not After : Apr 12 08:21:26 2026 GMT
        Subject: CN=69d21b87-de84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d4:19:8e:f7:d4:a2:26:54:1d:74:49:a2:5f:
                    38:c4:86:d9:94:b8:a3:d0:31:76:db:0b:db:30:34:
                    64:f4:33:7c:34:65:25:ba:8d:47:21:40:24:bc:7d:
                    fc:6c:d4:a5:b5:ce:05:7c:13:6c:eb:63:ce:71:e4:
                    62:b3:f7:7c:32:52:9a:41:d3:7e:0b:98:51:b5:7a:
                    e2:06:ef:71:17:4c:96:a9:b0:1f:88:9c:8a:ad:ba:
                    d9:55:10:86:30:13:a9:2c:84:69:90:58:75:36:a7:
                    eb:3e:62:83:45:25:ea:f8:f9:22:2e:a8:73:74:03:
                    0a:4e:b0:76:eb:b5:c4:12:00:ff:60:08:a1:e3:09:
                    9f:6a:f5:0c:e0:df:44:0d:ec:a6:0d:9d:7d:66:e5:
                    fa:51:5a:ea:88:5f:88:06:09:1b:2c:ad:b9:c5:89:
                    70:70:e6:14:e4:c1:a6:ee:84:78:de:05:95:63:5b:
                    06:83:a7:74:e7:01:cf:6a:26:43:fe:83:05:fc:5a:
                    ad:62:60:bd:df:7d:55:92:79:ea:f6:da:b1:a0:09:
                    0b:d9:fc:ce:ef:bb:8b:41:d9:d2:5a:f1:c4:30:af:
                    32:53:36:83:19:62:2d:1e:b8:1c:8b:d8:ea:98:86:
                    1a:f5:3b:f7:62:4a:7e:59:ed:92:fd:11:1f:28:19:
                    b6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:C4:5F:3C:29:77:65:44:EC:D1:E8:5B:4D:FA:80:65:12:DB:D9:11
            X509v3 Authority Key Identifier:
                keyid:49:82:F9:9C:66:E3:A9:5E:08:C0:FC:83:65:49:01:48:A8:58:AD:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91965C6/1B824AF2178E11F1BA3FA3192B3D8C67/SYL5nGbjqV4IwPyDZUkBSKhYrbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SYL5nGbjqV4IwPyDZUkBSKhYrbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91965C6/1B824AF2178E11F1BA3FA3192B3D8C67/SYL5nGbjqV4IwPyDZUkBSKhYrbw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:99:4e:4d:dd:bd:03:20:73:78:06:28:de:49:57:b9:54:f5:
         62:3b:78:e6:70:ad:de:34:85:79:ad:55:76:bf:37:5f:a7:41:
         b3:52:9e:2b:48:14:24:89:6a:b6:52:87:fb:7e:15:10:41:de:
         69:26:c8:f7:b0:d2:57:73:a2:28:04:93:df:5e:89:91:8b:ca:
         89:d1:d3:8a:e8:33:37:d4:b0:da:b4:04:8c:58:45:84:ff:d6:
         d6:59:d1:f6:ef:16:43:4e:ee:14:09:91:27:76:51:38:c5:06:
         c7:b9:84:31:22:7c:56:c8:74:d3:28:68:e2:44:66:bb:78:55:
         99:87:50:b7:bc:da:4c:d3:17:ca:47:f2:62:63:5e:a5:15:20:
         29:10:9c:e3:9a:04:d6:22:28:6f:69:cd:e2:75:0a:88:6f:d2:
         c8:ee:f4:53:1c:40:df:67:fc:ec:4a:fb:5c:54:d7:d1:c7:44:
         00:b1:2e:5c:a0:54:bd:f6:d8:87:36:26:90:98:66:13:ad:0d:
         68:c3:bf:9f:f5:8a:37:b6:70:8b:86:60:a7:54:38:72:10:8e:
         9d:d0:4a:73:e9:ea:62:18:b8:2f:34:7f:63:ea:82:26:db:1f:
         3a:9e:99:43:c8:e3:e9:e3:1b:05:58:ee:5c:22:4c:33:56:e6:
         c2:6b:c0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 20:57:46 2026 by rpki-client