Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
File:                     mFpmWpz7T1ygDsqL_rgGML9PSBY.mft (raw, json)
Hash identifier:          ZaAxiegbkUqS6HGoIhMwiZEDrsnO0gYMC8rPN/wrWn8=
Subject key identifier:   36:59:DC:3E:4E:AF:82:08:27:AF:1F:DC:C6:F1:31:CA:54:1E:FF:FE
Authority key identifier: 98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16
Certificate issuer:       /CN=A91E6D5D/serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
Certificate serial:       25DA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
Manifest number:          A1C7
Signing time:             Sat 04 Apr 2026 14:30:31 +0000
Manifest this update:     Sat 04 Apr 2026 14:30:31 +0000
Manifest next update:     Sat 11 Apr 2026 14:30:31 +0000
Files and hashes:         1: mFpmWpz7T1ygDsqL_rgGML9PSBY.crl (hash: YXDcUC4lp0OzLYBwA1RmKFIYUYR8463GSFU9lMCV/Zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 14:30:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9690 (0x25da)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=985A665A9CFB4F5CA00ECA8BFEB80630BF4F4816
        Validity
            Not Before: Apr  4 14:30:31 2026 GMT
            Not After : Apr 11 14:30:31 2026 GMT
        Subject: CN=69d12087-35c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:3d:52:e5:c3:42:aa:53:b1:f4:5f:51:8f:
                    fa:8e:a7:1f:a6:99:ba:fc:48:a4:e8:65:18:b4:ca:
                    28:fc:15:b9:fa:b0:c1:8b:c5:02:dd:c7:d3:9e:b8:
                    39:90:6e:c2:72:fd:e6:af:c8:27:cb:49:a1:e0:3f:
                    3a:e3:4c:d1:3d:be:b2:c6:9f:24:10:8f:11:5e:31:
                    aa:d4:32:04:76:67:8b:94:1f:b3:a6:16:46:15:0f:
                    9d:61:1f:5d:3a:c6:bc:aa:22:2f:8f:d2:bf:51:a7:
                    f4:b1:57:0a:e6:77:6c:24:30:07:62:83:c0:55:95:
                    13:ce:3f:77:64:f2:b1:29:25:21:66:3f:4c:72:f5:
                    80:90:ac:c6:91:b1:75:f8:32:f3:34:55:f8:93:c6:
                    77:d6:64:79:1b:be:52:12:24:b3:2f:25:a0:5c:16:
                    23:da:b9:5d:3d:61:94:fa:2c:7e:f2:c9:f6:aa:8a:
                    fd:50:c6:d7:18:de:73:1d:96:c4:9c:e5:dc:89:11:
                    46:ea:d5:6c:6e:08:79:40:2e:19:d3:f4:e3:a7:97:
                    02:91:51:ad:84:45:d6:b7:0f:c6:af:4c:87:80:3e:
                    da:e8:e0:5d:2f:3b:23:12:6f:1c:34:97:b5:c5:f3:
                    25:dd:57:33:1d:13:9d:75:83:5f:d7:cf:38:b1:fd:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:59:DC:3E:4E:AF:82:08:27:AF:1F:DC:C6:F1:31:CA:54:1E:FF:FE
            X509v3 Authority Key Identifier:
                keyid:98:5A:66:5A:9C:FB:4F:5C:A0:0E:CA:8B:FE:B8:06:30:BF:4F:48:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFpmWpz7T1ygDsqL_rgGML9PSBY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/mFpmWpz7T1ygDsqL_rgGML9PSBY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         dd:aa:18:52:6f:e2:25:ee:4c:46:82:2a:1c:72:2a:86:e8:8a:
         b5:4a:e9:be:15:4b:7f:78:5f:63:90:9c:84:d1:ce:08:58:c4:
         cf:6e:6a:45:5b:48:a7:02:cb:57:e5:72:a6:96:c2:b7:0b:65:
         fc:b7:f3:14:68:e2:00:ce:53:b6:59:49:fb:47:d9:09:39:1c:
         ba:98:ec:e4:57:8b:2b:72:7f:c9:8b:57:db:9d:ac:55:84:5d:
         14:45:86:7d:95:05:e5:d0:81:7d:9d:31:21:d5:5d:bd:ef:bd:
         ce:55:d6:23:0e:f3:fa:ee:06:6e:63:50:68:89:4c:d9:59:fb:
         91:e5:60:93:86:ef:1b:e6:44:f3:51:31:fe:ca:3b:13:e7:85:
         7a:5b:4d:fc:9d:3d:44:6c:39:6e:ac:77:a6:a0:38:59:5c:be:
         1e:75:ff:c2:01:56:80:89:19:9a:9f:99:06:7a:85:30:e1:f7:
         3e:8c:6f:e6:d5:fd:d5:e2:fd:08:48:0f:cb:76:b1:ba:23:b5:
         4f:7e:cd:8c:b6:b4:83:cf:a9:b0:30:57:9e:dc:05:fc:e3:72:
         01:15:4d:27:53:df:20:08:b9:9e:34:0f:2b:03:76:ad:b2:b4:
         3f:33:6b:ed:bd:a9:95:16:49:b4:52:4d:1d:0d:38:b7:a7:28:
         58:a9:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 21:07:56 2026 by rpki-client