Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
File:                     RLpWm_0uyBawaXNFE-C78tNOtwc.mft (raw, json)
Hash identifier:          tcEP58ynjGLwQzCzbvSuLQlVFyzzEkSfMZbNJWgx7f0=
Subject key identifier:   20:12:2B:01:F5:79:FE:C2:6A:E1:A1:D6:A4:CA:11:83:93:06:69:72
Authority key identifier: 44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07
Certificate issuer:       /CN=A91AD0B2/serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
Certificate serial:       0665
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
Manifest number:          0653
Signing time:             Sat 04 Apr 2026 22:29:19 +0000
Manifest this update:     Sat 04 Apr 2026 22:29:19 +0000
Manifest next update:     Sat 11 Apr 2026 22:29:19 +0000
Files and hashes:         1: RLpWm_0uyBawaXNFE-C78tNOtwc.crl (hash: /LDLn8mJz8igPLkyUBOvX3dSMlMm8yw6vZRbtfgecYI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 22:29:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1637 (0x665)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AD0B2, serialNumber=44BA569BFD2EC816B069734513E0BBF2D34EB707
        Validity
            Not Before: Apr  4 22:29:19 2026 GMT
            Not After : Apr 11 22:29:19 2026 GMT
        Subject: CN=69d190bf-f5a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:31:b1:bc:d6:1a:63:c6:33:76:01:df:0d:30:
                    eb:da:54:f3:c7:57:fc:bb:a1:06:5d:b4:0a:c9:97:
                    18:1b:de:1c:a9:8d:73:e3:0c:f5:29:b1:f1:76:98:
                    3d:80:2b:8f:0c:60:83:df:a1:b9:d4:76:c6:ab:32:
                    d1:09:22:c5:b1:ab:f5:47:98:27:91:6e:43:09:32:
                    bd:c9:20:98:e2:df:8b:e6:15:a3:ef:21:e9:4b:4c:
                    f6:c7:41:95:4e:b6:c9:e5:5e:ce:41:af:59:de:cc:
                    51:fc:db:ec:5f:68:ad:69:c8:88:14:a8:6a:d3:eb:
                    a7:ce:eb:e5:1b:51:c1:cd:61:b2:f5:45:82:b3:5b:
                    5f:00:bd:03:fd:cc:2c:5b:44:86:84:ca:f9:32:cd:
                    24:de:ff:4f:66:dc:68:89:85:e8:c3:87:bb:64:21:
                    4c:c6:0e:06:c4:65:05:3c:7f:0e:74:fa:3d:13:7f:
                    14:7f:b2:d1:a6:28:42:15:21:dc:ce:67:5b:f1:6b:
                    92:c6:2d:06:70:92:ec:89:38:7d:90:6d:05:64:d6:
                    ce:75:27:87:11:dd:df:74:27:43:0b:f5:1a:66:9e:
                    5a:67:a3:25:6c:3e:a0:7b:16:ed:d1:a7:ec:30:60:
                    df:b0:ee:29:e4:66:a5:26:0a:60:5e:7d:d8:bd:61:
                    08:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:12:2B:01:F5:79:FE:C2:6A:E1:A1:D6:A4:CA:11:83:93:06:69:72
            X509v3 Authority Key Identifier:
                keyid:44:BA:56:9B:FD:2E:C8:16:B0:69:73:45:13:E0:BB:F2:D3:4E:B7:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RLpWm_0uyBawaXNFE-C78tNOtwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AD0B2/2213E5BCCB2E11EBB2D39748C4F9AE02/RLpWm_0uyBawaXNFE-C78tNOtwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:e0:0b:fa:80:50:d6:c8:ee:ae:8d:fe:5e:25:28:92:c6:8a:
         61:f1:4d:5f:0f:8e:d1:5f:75:c4:7d:fd:24:ba:65:0d:94:d8:
         bc:3b:75:b9:a5:7e:c4:96:06:fe:10:33:00:6e:a4:31:a2:55:
         4f:a1:ac:a2:74:71:3d:3a:ea:74:25:64:81:31:08:6b:14:f9:
         68:55:a2:16:ec:18:1c:30:d1:3d:6f:5d:84:ac:fd:31:43:fc:
         1e:44:c7:ca:bc:6b:35:22:0c:8b:74:3b:67:b2:71:1d:54:08:
         46:58:93:e0:83:f9:d9:c9:d4:33:54:ec:cb:bb:09:67:94:2a:
         52:34:21:52:8d:e1:71:64:c2:1b:f9:ca:42:a7:98:2f:1b:8e:
         65:d8:ea:ac:09:d7:1a:6a:7d:9f:de:f1:5f:41:3d:3b:2c:a0:
         98:dc:0c:82:3b:08:3d:26:9c:db:7a:2a:ac:59:94:93:aa:a2:
         73:35:41:a4:a1:17:88:59:91:a1:25:c3:61:09:ee:d8:16:08:
         80:a0:91:b8:3c:00:31:40:12:e2:2c:cd:0e:b7:c4:3f:f0:f4:
         c3:18:64:81:14:e1:98:30:7d:73:76:25:73:53:19:ff:ee:54:
         3a:a0:ae:b9:f7:b2:e6:dd:11:e0:32:2a:1a:3d:72:cd:9b:ea:
         b5:57:86:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:53:18 2026 by rpki-client