Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
File:                     aTn8BA2lwwt2bceU-cpML0Gsruo.mft (raw, json)
Hash identifier:          Bep0vU6t9VPVoZ//+w0Uq0M8MlF4dNAveEOFXR2gMEM=
Subject key identifier:   73:A7:EE:21:B8:81:B3:A0:31:ED:B8:2B:BD:3F:22:53:C9:73:0B:48
Authority key identifier: 69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA
Certificate issuer:       /CN=A91A2A1F/serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
Certificate serial:       0507
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
Manifest number:          04E7
Signing time:             Sat 04 Apr 2026 23:38:25 +0000
Manifest this update:     Sat 04 Apr 2026 23:38:24 +0000
Manifest next update:     Sat 11 Apr 2026 23:38:24 +0000
Files and hashes:         1: aTn8BA2lwwt2bceU-cpML0Gsruo.crl (hash: 4nFlipfMMvRNYSSnUblm/MM0jaBl4SiXWtQVfWnXHog=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl
                          rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1287 (0x507)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A2A1F, serialNumber=6939FC040DA5C30B766DC794F9CA4C2F41ACAEEA
        Validity
            Not Before: Apr  4 23:38:24 2026 GMT
            Not After : Apr 11 23:38:24 2026 GMT
        Subject: CN=69d1a0f0-1247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:33:b4:76:2a:02:f9:61:fe:a3:33:b8:30:
                    db:70:6f:bf:a4:30:bf:19:91:31:17:6e:51:ef:1d:
                    b5:cd:17:86:87:84:10:e7:f0:a1:b3:16:b7:01:40:
                    ef:f8:87:f4:d1:bf:b8:cb:bd:9b:f8:e9:20:dc:64:
                    f0:ec:6a:fd:dc:84:3e:08:46:92:1a:90:94:15:a8:
                    6a:70:83:b9:b6:6a:25:8b:bb:a4:c0:14:d4:bf:12:
                    78:52:7f:ab:50:82:43:85:0f:45:f0:90:53:b4:db:
                    d9:eb:58:ba:d1:58:21:85:c5:fd:60:dd:8d:74:ca:
                    03:a3:3d:97:c8:98:b3:f0:cf:1e:9a:1d:90:50:5d:
                    42:91:58:2a:5f:db:b3:a7:53:d6:39:34:83:5a:68:
                    b2:69:af:e2:ea:bb:a8:27:1b:ef:65:36:b5:68:eb:
                    51:b1:ed:ac:c2:dd:23:1e:61:a8:fa:6b:78:ed:ef:
                    fe:64:c2:90:28:20:04:09:ef:9f:6a:b1:37:29:04:
                    5f:4a:99:4a:6b:2c:c5:18:a2:7a:3c:03:38:5a:28:
                    61:26:1f:42:09:98:df:4a:85:20:8f:0b:af:eb:f6:
                    d7:ac:c9:94:b6:73:5f:e5:63:06:8f:64:ab:bd:dc:
                    63:7c:4d:e3:8b:19:c4:0a:ed:13:a6:f5:71:2f:78:
                    1b:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:A7:EE:21:B8:81:B3:A0:31:ED:B8:2B:BD:3F:22:53:C9:73:0B:48
            X509v3 Authority Key Identifier:
                keyid:69:39:FC:04:0D:A5:C3:0B:76:6D:C7:94:F9:CA:4C:2F:41:AC:AE:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aTn8BA2lwwt2bceU-cpML0Gsruo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A2A1F/1ECFFC4C621911EC99A55F3EC4F9AE02/aTn8BA2lwwt2bceU-cpML0Gsruo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:c7:1a:9f:73:29:24:19:7e:68:ee:64:f8:94:12:41:7f:d0:
         bc:03:64:67:3e:43:60:87:1c:07:30:83:84:5c:be:75:d7:bc:
         8d:7c:fe:c0:bc:47:50:0b:2d:f2:20:8e:b0:b6:37:5a:5c:08:
         91:95:69:bb:01:2c:c3:5c:bb:0b:35:63:14:90:21:ae:88:e3:
         1e:9b:f8:58:c3:51:73:a4:df:b7:30:ff:17:df:bd:15:56:5c:
         1b:33:83:10:dd:ab:28:82:ba:e5:46:97:7b:fe:b4:76:f5:15:
         49:9f:90:3e:90:e2:eb:1f:0d:c7:b0:85:61:18:3d:d5:86:b6:
         2a:6a:89:9f:d2:96:ff:f9:38:f8:f0:70:f1:e7:d0:ba:b5:45:
         22:e1:fe:6f:82:8d:15:b7:d1:c5:69:e9:a8:1c:af:a0:42:6a:
         39:1c:5a:35:df:08:57:4c:67:78:37:07:af:bc:dc:a3:9d:c5:
         00:e6:a9:90:32:54:1d:b8:70:56:85:b3:d8:f8:ed:7c:7e:19:
         e5:e1:cf:c1:e0:54:5f:a2:c9:dd:d6:df:e7:a1:48:ee:9f:dd:
         96:82:95:c0:3e:87:b8:78:a4:6b:31:d2:e5:16:7a:6b:f0:13:
         66:77:4b:62:0f:00:36:2b:b3:c6:bb:e7:9d:88:0a:f5:fd:6d:
         05:40:b2:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:38:22 2026 by rpki-client