Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json)
Hash identifier:          of/PQ5RAb43uNltk5Podj5Cz0mEOnNpv5YMapSZQw/U=
Subject key identifier:   10:18:6B:6C:03:DF:03:AF:E5:79:E5:1F:92:FE:4F:7B:CF:ED:0B:F5
Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Certificate issuer:       /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
Certificate serial:       352C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
Manifest number:          352B
Signing time:             Sat 04 Apr 2026 15:13:56 +0000
Manifest this update:     Sat 04 Apr 2026 15:13:56 +0000
Manifest next update:     Sat 11 Apr 2026 15:13:56 +0000
Files and hashes:         1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: jQRkT/NWUJguQunzJ9XsPfuKovaic8n9g2NTea0Nf3I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl
                          rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:13:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
        Validity
            Not Before: Apr  4 15:13:56 2026 GMT
            Not After : Apr 11 15:13:56 2026 GMT
        Subject: CN=69d12ab4-c1d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d7:cf:47:77:3a:a2:10:48:c7:22:bc:f2:03:
                    e8:c1:c2:d9:65:bc:e5:25:34:9e:d0:25:3f:43:45:
                    32:69:ff:04:35:c5:94:b3:76:2b:54:b2:b3:cb:1b:
                    96:a5:7e:c4:fd:ed:57:69:21:50:26:b4:75:8b:c3:
                    a9:65:fd:ce:bd:7f:70:50:30:1d:b1:fb:b7:99:6e:
                    be:02:62:9b:dc:f8:5e:97:23:fe:37:b8:e8:df:b9:
                    af:36:46:4c:89:87:fa:1c:1d:e3:d3:b5:a8:0f:f5:
                    7c:7d:bc:8d:3e:54:06:e4:f1:50:b6:bc:30:1c:d0:
                    10:5f:98:a3:c8:5b:29:0e:8b:b8:fe:5b:7b:4c:e5:
                    59:64:05:c9:99:b9:e6:5a:5b:d5:b3:92:0e:78:8a:
                    11:1e:fd:34:3e:a7:05:6c:27:de:f5:39:4a:10:af:
                    b4:3d:06:e3:18:d6:87:fd:79:2a:37:e6:51:82:fd:
                    91:92:c2:c5:44:02:25:f5:79:1f:b8:f9:a1:35:c7:
                    f7:fe:3f:ba:95:b3:bf:ac:14:44:4a:3e:b9:23:66:
                    59:69:7a:17:9d:3c:13:fb:c9:6c:9d:21:c6:46:ab:
                    22:2d:e6:5d:48:b9:f2:c5:13:92:55:42:b7:65:77:
                    41:08:e2:38:5a:46:95:76:25:55:cb:67:c0:d0:1c:
                    4e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:6B:6C:03:DF:03:AF:E5:79:E5:1F:92:FE:4F:7B:CF:ED:0B:F5
            X509v3 Authority Key Identifier:
                keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:db:5a:7d:2f:a6:b4:b4:eb:0a:d0:4f:d0:30:45:d8:ae:d2:
         e7:86:46:a1:14:cf:31:1c:58:49:30:e0:86:7c:75:0a:e2:d9:
         d0:2d:50:ac:20:8f:03:5e:44:6d:29:24:8b:20:6d:44:53:a0:
         e0:7e:36:0e:87:8a:1b:1f:a6:6f:a2:af:37:21:cb:e1:40:5f:
         71:9d:3b:8c:06:b1:3d:c1:ff:e9:3f:a2:0c:f7:de:d0:2c:73:
         b1:b8:da:6a:ad:1a:c9:70:31:65:40:68:ff:93:b5:f0:43:17:
         17:6a:da:c7:da:4f:b0:fd:62:a9:ea:9a:05:24:7b:ba:0b:74:
         ef:6e:7f:70:4a:dc:e7:7e:db:50:7d:0b:d6:8a:95:36:72:3e:
         f1:73:8c:a0:b2:da:b5:f7:e1:fd:a8:c0:7e:13:f7:f2:62:97:
         2b:70:d0:0c:aa:31:c8:2d:02:e0:be:f8:24:92:31:de:f3:87:
         78:1b:7d:3e:4d:99:31:ea:0d:12:c3:95:31:6e:0c:5e:47:b6:
         d9:89:0c:a4:64:7c:45:50:0c:e1:dd:0d:7f:07:1a:de:2e:2f:
         ce:a2:1c:2c:62:44:aa:4d:ac:3f:79:b4:a6:ce:08:ff:05:a4:
         82:ee:bd:e2:cf:4c:44:d2:e1:3a:20:ff:2b:d3:cd:c6:1d:ba:
         c2:09:3e:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:44:07 2026 by rpki-client