Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
File:                     CO_XGTj3-dyHpp9cs_hMektyoAo.mft (raw, json)
Hash identifier:          y7AYYDyLTmcArapSgar5qgSnT3E6LxsnxJC+XJgZqTs=
Subject key identifier:   9C:00:F2:03:D7:24:54:95:B8:BA:4A:8B:FF:D6:9D:34:EE:7B:6F:C6
Authority key identifier: 08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A
Certificate issuer:       /CN=A91218BB/serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
Certificate serial:       EF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
Manifest number:          EF
Signing time:             Sun 05 Apr 2026 05:45:30 +0000
Manifest this update:     Sun 05 Apr 2026 05:45:29 +0000
Manifest next update:     Sun 12 Apr 2026 05:45:29 +0000
Files and hashes:         1: CO_XGTj3-dyHpp9cs_hMektyoAo.crl (hash: l7/ozydCrh/mHFco6mfD+BgReHVQzS/wJm/scC53GZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl
                          rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:45:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 239 (0xef)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91218BB, serialNumber=08EFD71938F7F9DC87A69F5CB3F84C7A4B72A00A
        Validity
            Not Before: Apr  5 05:45:29 2026 GMT
            Not After : Apr 12 05:45:29 2026 GMT
        Subject: CN=69d1f6f9-ddff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:78:b5:92:fb:d5:1c:34:f0:f6:89:4e:2d:3d:
                    0c:d7:27:d4:1c:91:84:24:7d:24:e8:92:2c:55:9b:
                    b9:1a:9d:3a:e2:a9:d6:dd:6d:05:e9:e8:b9:9a:55:
                    1c:46:1d:52:36:6f:5b:58:7f:c3:6e:9a:42:f2:56:
                    62:2f:e0:9f:56:5e:35:62:23:65:55:1a:02:35:95:
                    1d:3e:b4:db:ce:f8:a9:b2:a8:b9:82:00:64:75:e4:
                    49:54:d3:46:77:c2:68:50:10:d5:40:e5:76:b5:a4:
                    12:3e:cd:28:14:df:6d:8f:59:14:4f:8f:c0:2d:e0:
                    81:25:b2:72:0e:ec:75:da:45:ff:66:b5:af:ea:14:
                    39:05:b1:31:27:53:2e:ec:06:98:eb:5b:b9:74:f7:
                    2c:78:21:f9:ad:59:99:b9:31:fc:d8:3c:3c:c5:0f:
                    da:80:c9:d3:30:20:fb:b5:c4:35:5c:80:87:15:42:
                    dc:d3:fc:16:a2:97:95:91:0e:8d:cd:38:c2:68:6a:
                    c3:6b:89:45:96:08:01:33:25:0e:51:c8:d7:25:d9:
                    f7:d0:2d:82:6f:a2:88:a9:d4:62:74:f4:17:8a:29:
                    5e:a0:b5:9b:7f:41:5a:35:43:9f:4e:0a:26:60:00:
                    95:b6:bb:c5:9f:4c:a0:ed:72:f5:b5:fb:e2:eb:58:
                    9a:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:00:F2:03:D7:24:54:95:B8:BA:4A:8B:FF:D6:9D:34:EE:7B:6F:C6
            X509v3 Authority Key Identifier:
                keyid:08:EF:D7:19:38:F7:F9:DC:87:A6:9F:5C:B3:F8:4C:7A:4B:72:A0:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO_XGTj3-dyHpp9cs_hMektyoAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91218BB/71D5062EC8C511EF8EC55565C4F9AE02/CO_XGTj3-dyHpp9cs_hMektyoAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:cb:98:f2:16:4f:1f:2c:80:0f:0e:77:41:7b:6a:b9:2b:bf:
         d1:8f:9e:78:19:88:55:ad:40:5d:13:97:18:ea:c5:f7:a0:1e:
         75:fc:bb:15:f6:f5:f0:d7:87:33:da:57:bb:6c:82:4d:ba:3f:
         29:30:d5:dc:1a:24:00:c8:88:72:22:14:25:f6:3f:bf:d6:83:
         d0:c0:f2:1d:71:92:f0:fc:5a:c8:3f:63:aa:1f:7a:43:a6:62:
         79:61:28:6d:82:fa:97:14:df:ae:5e:12:06:3f:56:5f:e3:4f:
         d7:22:12:7f:fd:35:b7:43:0f:fc:e9:3d:90:e0:36:fb:ea:9a:
         1f:91:3f:4d:06:c9:1c:78:6d:2e:33:ce:25:19:16:2e:a7:fe:
         5a:35:52:3d:46:19:51:6b:08:ef:8b:34:e3:95:58:ce:29:0b:
         0b:0a:4a:0b:43:66:c4:84:5c:1d:b3:eb:30:6e:d6:bb:ea:1c:
         bc:42:d9:73:8b:c7:57:ee:00:6a:85:64:14:ad:f6:fc:a4:3e:
         9b:99:5f:be:92:aa:fb:c1:09:33:56:c6:d8:0c:33:6d:95:80:
         8c:e2:39:d5:28:9c:b7:ee:95:57:02:cb:07:a0:31:97:7f:f2:
         c0:aa:f4:03:25:0c:68:6b:da:6e:f8:61:12:01:9e:24:0a:20:
         89:46:34:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:02:51 2026 by rpki-client