Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
File:                     x5ESx8WsNlgyIdH5RnUZbCE26r4.mft (raw, json)
Hash identifier:          xJVkFzKPzASoZJl4f34mTrGzH0Y+ZIHn1xlAuG4y7p4=
Subject key identifier:   16:0A:FB:C5:13:A9:BB:55:8A:0A:CF:37:90:B9:87:45:E8:7B:FA:0D
Authority key identifier: C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE
Certificate issuer:       /CN=A91C6BB9/serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
Certificate serial:       07DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
Manifest number:          07CE
Signing time:             Sat 04 Apr 2026 21:12:16 +0000
Manifest this update:     Sat 04 Apr 2026 21:12:16 +0000
Manifest next update:     Sat 11 Apr 2026 21:12:16 +0000
Files and hashes:         1: x5ESx8WsNlgyIdH5RnUZbCE26r4.crl (hash: 0L2kVJrYOdVQsHyLTcZ0nYRDwDiIOaI27VatyYhs+M4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl
                          rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 21:12:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2014 (0x7de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C6BB9, serialNumber=C79112C7C5AC36583221D1F94675196C2136EABE
        Validity
            Not Before: Apr  4 21:12:16 2026 GMT
            Not After : Apr 11 21:12:16 2026 GMT
        Subject: CN=69d17eb0-c8aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ea:9d:e2:c6:86:f9:6c:cb:b7:5c:0d:86:27:
                    21:87:26:72:09:47:e4:a7:09:1a:2e:91:43:e3:3b:
                    0c:ad:3b:10:5e:07:bc:c6:b9:91:0e:95:07:5a:2b:
                    f3:4d:e4:dc:ca:65:ef:46:9b:3f:df:fc:d7:5a:28:
                    08:8a:0f:79:37:8e:d6:7c:77:7b:5d:8c:ca:c4:9f:
                    25:3d:33:c6:c3:f1:d3:91:48:f9:bc:48:2d:a3:18:
                    9b:b3:87:32:a4:af:18:15:9f:69:ab:c2:e7:b3:f1:
                    0a:d4:76:50:da:c8:62:ab:53:a2:4d:ca:53:69:8a:
                    95:91:bd:96:d8:97:31:0b:e3:39:27:b7:56:98:c7:
                    c6:46:2c:ed:d8:2b:d2:ea:02:dd:b8:c4:f5:c7:44:
                    31:e7:00:01:12:2c:5a:07:37:ba:f5:23:f7:c2:cf:
                    b8:3a:76:74:d0:87:6c:85:48:cd:20:20:17:44:e4:
                    ae:56:55:5f:ed:bc:dd:6e:59:e0:82:bf:34:7d:9e:
                    9c:66:e1:02:46:56:48:95:ca:79:83:b8:35:27:cd:
                    e7:b1:e1:2d:9d:a0:ea:02:4b:6b:07:86:11:97:0d:
                    4a:fe:e0:85:8c:56:ac:8e:1e:1d:17:db:87:c6:51:
                    51:ba:58:8e:24:66:d5:2e:e6:eb:5e:56:ad:ef:18:
                    9e:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:0A:FB:C5:13:A9:BB:55:8A:0A:CF:37:90:B9:87:45:E8:7B:FA:0D
            X509v3 Authority Key Identifier:
                keyid:C7:91:12:C7:C5:AC:36:58:32:21:D1:F9:46:75:19:6C:21:36:EA:BE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5ESx8WsNlgyIdH5RnUZbCE26r4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C6BB9/6BDEAA7E390C11EBB2181D63C4F9AE02/x5ESx8WsNlgyIdH5RnUZbCE26r4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:4a:44:29:6c:51:9b:a2:c3:45:56:89:d7:8f:86:08:0f:72:
         30:d4:16:b4:68:52:36:4e:65:83:2a:1a:8f:74:31:b6:e9:52:
         21:7a:06:ed:25:bc:12:87:a8:88:2f:76:0f:3a:89:5f:77:45:
         c2:15:0d:c6:d0:70:b6:d8:6d:71:4b:42:77:1c:d8:66:03:a9:
         48:30:e3:fb:c0:88:71:53:d0:34:18:85:c7:70:1c:be:b7:08:
         c0:f2:32:eb:4b:9f:0d:9b:c4:08:1d:a4:5c:6e:43:31:63:02:
         8f:45:09:61:8e:84:54:9b:da:95:b7:40:05:73:0d:e7:27:42:
         d7:ad:38:bb:b5:03:ff:96:c0:01:e8:97:b0:20:82:26:e8:43:
         a9:8d:48:40:40:98:bd:3e:be:d8:d7:ec:cf:aa:2e:c7:ec:1c:
         a4:ec:60:d3:5b:b9:88:47:72:c7:e0:f8:55:39:a3:43:8a:3d:
         46:8f:d0:90:02:f5:b9:92:40:db:a7:5a:92:67:92:7c:56:a5:
         c7:6d:b0:67:b8:b6:0b:34:74:3e:c3:69:32:63:59:02:89:af:
         1d:5f:23:82:da:4f:36:f0:af:1c:d6:20:6a:11:a1:af:f4:f4:
         2a:57:04:81:5a:76:ce:d2:90:65:99:8f:84:03:6f:a0:dc:b8:
         19:29:d1:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:43:43 2026 by rpki-client