Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          Uxt7RyncdPWZev82KmMIULMw4CJZBur2kSpbkeNMLSo=
Subject key identifier:   D2:1C:ED:F4:B1:31:F9:D4:4D:DE:19:D9:D8:0B:D9:1B:D6:BB:B3:DB
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       0132
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          0132
Signing time:             Sun 05 Apr 2026 04:54:18 +0000
Manifest this update:     Sun 05 Apr 2026 04:54:17 +0000
Manifest next update:     Sun 12 Apr 2026 04:54:17 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: hz60Ullixk1BO3JTNYKBx0TrNgfZGg+DGLcJ8P7J/I8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:54:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 306 (0x132)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: Apr  5 04:54:17 2026 GMT
            Not After : Apr 12 04:54:17 2026 GMT
        Subject: CN=69d1eafa-8f07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:80:12:7b:4a:b2:7f:50:16:b1:cf:ca:8c:aa:
                    7d:6d:f2:d2:79:7d:97:35:c2:95:db:a0:ba:c8:16:
                    ac:b7:11:7d:9a:0a:26:8b:85:8a:31:03:3c:c2:1a:
                    7a:b9:40:dc:09:df:72:0e:f2:0a:6f:b3:8a:9d:34:
                    54:1d:f9:1c:12:66:c7:f7:08:94:a4:6c:39:f2:ac:
                    b1:f5:69:b0:fa:00:be:28:6a:eb:c0:24:0a:25:35:
                    95:91:50:b4:1e:ef:bd:3a:1e:76:4a:b8:44:45:6a:
                    c7:b5:32:52:1e:14:16:77:2f:e0:54:63:f7:df:28:
                    e0:b7:ea:d6:3c:d6:d8:5f:6d:38:01:4a:2c:43:fe:
                    5f:ae:e3:3d:b8:e5:90:da:a0:55:88:b8:00:f3:91:
                    23:2d:6d:91:ee:60:f1:21:d0:44:d6:e6:63:92:16:
                    a6:86:30:4b:93:f9:4e:c2:7a:51:04:2e:60:f7:63:
                    28:dd:4e:22:51:20:78:a3:91:d3:73:fe:82:29:f2:
                    c5:74:d2:7f:a2:17:82:f9:66:30:d6:74:9a:a9:7d:
                    af:1c:8c:d1:1a:9c:0b:09:be:8c:cd:34:db:ae:4c:
                    4b:ae:76:e9:62:5b:59:1c:34:d3:7b:50:6a:5e:a5:
                    e3:b9:37:02:de:ec:37:30:78:09:c3:04:00:23:17:
                    9d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:1C:ED:F4:B1:31:F9:D4:4D:DE:19:D9:D8:0B:D9:1B:D6:BB:B3:DB
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:fb:29:5d:ee:39:f1:ab:56:ae:aa:ea:d4:c9:68:9b:b6:3b:
         98:a3:78:5c:86:13:ab:ab:d9:6b:a3:b8:23:b1:c3:24:7b:29:
         4b:f0:b9:3a:13:63:b6:5d:5f:39:da:c7:b5:0c:cb:20:fd:6f:
         e2:e1:ad:db:4f:97:76:7f:80:e0:ef:e7:5d:4b:4e:b9:a7:d6:
         fa:dd:07:2a:98:c9:b3:0d:e3:39:79:56:c6:41:bf:8c:bc:90:
         a9:7c:1d:a0:d9:69:c3:c4:65:b2:f5:ed:e4:ec:b9:28:20:76:
         b7:1a:67:76:3a:f6:57:61:d8:02:90:0c:b1:66:14:2d:c8:bb:
         91:a5:de:9e:01:5b:1f:8d:82:f9:85:7c:42:07:30:5d:9a:3f:
         4a:3b:69:63:a8:a6:15:bd:ac:e2:ce:2a:c0:4e:3f:8a:cc:d7:
         ec:4a:6a:9d:46:4b:c0:cf:7f:95:ef:46:a9:67:af:2b:d0:84:
         14:18:35:66:9a:40:70:95:46:6d:db:10:a6:2e:9f:bd:3b:44:
         f0:58:cd:c2:73:5a:73:c0:cc:1f:ec:ed:b0:a5:4a:df:e9:71:
         17:6c:72:db:8c:2e:ab:41:38:bf:10:b1:6d:ff:d7:98:7a:d1:
         c3:52:8f:1b:4b:27:e0:22:0e:e5:ed:51:d1:bd:8a:25:3f:a6:
         fd:6a:06:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:29:37 2026 by rpki-client