Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
File:                     h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json)
Hash identifier:          vck2re4D1YT1PP+94WymoXVyNVsh0TFHEbfdQzjgirk=
Subject key identifier:   7E:D0:85:3A:3B:18:28:A6:BC:6E:CE:E7:D8:AE:DF:71:17:C2:C1:07
Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Certificate issuer:       /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Certificate serial:       0118
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
Manifest number:          0118
Signing time:             Sun 05 Apr 2026 05:13:27 +0000
Manifest this update:     Sun 05 Apr 2026 05:13:26 +0000
Manifest next update:     Sun 12 Apr 2026 05:13:26 +0000
Files and hashes:         1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: Bju76RrzrqHWOh6vjEX2ke7sZpcGJMQqwQmWLFy3Qq8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:13:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
        Validity
            Not Before: Apr  5 05:13:26 2026 GMT
            Not After : Apr 12 05:13:26 2026 GMT
        Subject: CN=69d1ef77-3c78
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:83:9c:ba:55:5f:4c:da:28:6b:f7:66:45:32:
                    16:5e:df:89:13:88:04:f0:4c:f0:19:f4:09:47:b4:
                    cc:ba:77:77:11:f0:84:2b:31:d8:31:42:43:fb:b0:
                    ba:52:78:0e:7e:18:7f:f4:dd:19:28:12:5c:06:f2:
                    3d:7c:20:27:8e:7a:20:96:27:6d:5d:1e:33:eb:17:
                    82:a1:a0:a2:8b:7a:3f:18:93:32:bd:ca:97:e5:ec:
                    3a:f2:63:8e:ca:25:c3:75:d0:35:81:46:fa:b7:2c:
                    fb:dd:cf:db:50:69:fd:36:b9:f1:88:08:02:aa:1d:
                    fb:9a:5b:42:1c:43:74:fc:e2:8e:33:97:c4:39:ca:
                    0a:ba:cc:4e:1b:3c:52:77:b0:5d:fe:17:3d:24:7a:
                    8d:a5:b8:1c:a9:57:93:0e:25:9a:00:ca:11:fa:e7:
                    66:90:53:44:6d:93:04:59:a1:f6:f1:e1:e9:7a:35:
                    74:be:ab:a8:07:55:71:2b:dd:c5:78:78:c5:1e:ff:
                    78:3e:70:7f:47:ac:51:08:dd:61:38:d8:63:dd:04:
                    1e:3d:26:6c:a5:3c:ca:3a:20:09:b2:8c:0a:9b:1c:
                    1c:9e:14:31:2e:4b:9b:89:71:d1:aa:ce:35:ac:5f:
                    bd:13:d6:79:07:b5:52:56:4f:8a:45:b3:73:62:ce:
                    6a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D0:85:3A:3B:18:28:A6:BC:6E:CE:E7:D8:AE:DF:71:17:C2:C1:07
            X509v3 Authority Key Identifier:
                keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a9:01:f4:d9:a9:95:99:f3:2a:89:c1:0b:71:92:07:14:4b:3d:
         da:4e:8a:3d:ad:eb:8a:33:80:3f:7e:3d:8f:2f:fd:dc:45:1f:
         00:f8:48:1f:2d:5a:7f:9c:0b:f6:c7:67:65:4b:8d:2e:01:fe:
         52:f7:30:6f:28:38:d9:ef:87:f8:56:c0:90:ea:e4:6b:bb:4c:
         88:1e:37:77:8b:65:7c:4a:0d:39:6a:38:1e:14:da:2e:da:e8:
         fb:b5:c1:23:7e:4f:03:25:e5:9f:e1:71:c1:c7:e8:5d:07:4b:
         d1:4d:36:8c:c7:d9:07:46:57:90:53:3e:0e:bb:8f:43:82:5d:
         2f:ae:65:ce:87:74:35:c1:93:4f:85:59:3c:62:4f:c4:ea:2e:
         e5:77:2b:26:ad:5f:cb:d7:2d:50:20:66:6c:5d:2f:39:9d:97:
         53:98:4d:c1:49:d3:87:4e:b7:77:40:27:b7:15:52:aa:f6:20:
         d1:e8:7d:ef:cb:34:96:9e:0b:74:ba:80:20:05:65:92:d7:52:
         25:ff:55:c7:c1:2c:01:71:61:48:be:55:9c:15:4b:e5:fa:bd:
         59:a7:28:9d:7e:b2:40:7e:92:b6:84:ec:89:a1:66:f5:ae:67:
         5d:52:04:05:0b:e0:af:54:cd:f0:98:b6:e3:dc:5c:8b:16:a6:
         85:9f:85:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:24:33 2026 by rpki-client