Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
File:                     Ae2EH7lRqvolkYDvkpnk02_ffD0.mft (raw, json)
Hash identifier:          xhqdopsT4LiSvnlNUX55QuD5WP0Z549YnHiJMda/XOw=
Subject key identifier:   06:7C:43:88:56:FB:23:53:BB:B8:73:14:3D:88:A4:D4:3E:A5:80:37
Authority key identifier: 01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D
Certificate issuer:       /CN=A913D125/serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
Certificate serial:       EC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
Manifest number:          EC
Signing time:             Sun 05 Apr 2026 05:47:59 +0000
Manifest this update:     Sun 05 Apr 2026 05:47:59 +0000
Manifest next update:     Sun 12 Apr 2026 05:47:59 +0000
Files and hashes:         1: Ae2EH7lRqvolkYDvkpnk02_ffD0.crl (hash: RX/VfP5wa54mVsGm1JmD6S5WihWohf3v2uZC/g7Asho=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl
                          rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:47:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D125, serialNumber=01ED841FB951AAFA259180EF9299E4D36FDF7C3D
        Validity
            Not Before: Apr  5 05:47:59 2026 GMT
            Not After : Apr 12 05:47:59 2026 GMT
        Subject: CN=69d1f78f-168d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:85:a9:74:e7:80:97:28:5a:d2:03:55:73:
                    59:5a:00:a9:8b:07:be:55:64:be:a2:9c:80:df:7b:
                    a5:c2:30:1a:28:a9:c0:79:26:6d:c0:cf:ca:df:0b:
                    3e:d6:0b:de:bb:c4:43:cf:54:36:b9:aa:7f:43:6e:
                    08:2d:f5:2b:7c:63:73:64:e2:92:cc:9a:23:0d:50:
                    a0:46:1a:5f:3d:c1:9b:fa:11:c9:e2:b6:fc:54:33:
                    37:40:ef:89:91:9c:3d:2e:ad:ec:6a:23:fc:6e:b8:
                    bc:d3:1d:fa:71:07:3e:75:c5:11:22:12:2d:a3:7d:
                    7c:84:da:8a:3f:3a:7f:93:20:88:43:fb:ae:c5:96:
                    c7:d3:2c:f6:1e:e3:f4:bf:91:19:f2:36:ed:84:25:
                    01:0a:f4:da:20:3b:3c:c1:f6:e4:0c:51:7c:56:52:
                    4d:04:e9:ef:5e:4a:29:06:a9:57:be:8e:6a:1b:3c:
                    39:27:01:aa:0f:31:6d:6e:6c:05:ef:05:3a:93:cc:
                    bd:73:75:f5:ab:e3:7e:29:ef:e0:80:a5:3b:c4:a9:
                    b9:78:8b:b6:8b:4b:90:3e:42:99:41:e3:ee:d7:8b:
                    06:70:01:0b:b2:b6:ef:d0:70:65:e2:4a:25:ab:4e:
                    33:04:4b:01:9f:a7:5d:de:bf:b1:57:cd:9b:94:b9:
                    13:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:7C:43:88:56:FB:23:53:BB:B8:73:14:3D:88:A4:D4:3E:A5:80:37
            X509v3 Authority Key Identifier:
                keyid:01:ED:84:1F:B9:51:AA:FA:25:91:80:EF:92:99:E4:D3:6F:DF:7C:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae2EH7lRqvolkYDvkpnk02_ffD0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D125/FE778EC8CC1011EF87396A6EC4F9AE02/Ae2EH7lRqvolkYDvkpnk02_ffD0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:cf:fa:17:08:ad:70:5b:03:6b:45:00:e8:61:30:61:fc:df:
         8d:6e:12:06:96:83:84:12:7a:57:2f:c0:69:7f:09:16:3d:ef:
         e0:d3:29:9f:d9:54:82:cb:7c:21:57:3c:68:f3:a9:0f:3d:6c:
         69:a6:30:c8:eb:ca:d5:37:fa:84:6b:41:fc:f9:47:8b:86:cd:
         b1:19:4c:6b:f0:6c:c8:cc:5e:dc:52:4d:97:0c:9d:9e:73:2e:
         b8:e0:55:d0:17:ce:9b:14:3c:43:6e:34:51:36:65:c3:d1:00:
         da:6a:81:db:4e:69:d3:10:b6:a4:d9:b0:d8:94:b3:61:74:bf:
         13:b3:88:c5:a0:f3:c8:3b:07:92:d6:c5:93:f9:81:21:c8:50:
         7b:26:09:79:37:76:74:5d:b5:0f:93:2a:0b:9b:04:d6:d3:5a:
         c7:17:fd:9a:30:11:e8:c4:6a:0b:9c:c9:78:91:1e:e4:1d:06:
         fb:b3:af:6c:47:97:09:4c:b7:14:1f:cd:06:5e:02:38:be:3e:
         1b:23:18:c7:82:eb:77:ec:35:12:a4:8c:93:89:44:63:f6:cd:
         a2:f3:f8:33:4c:de:ee:5f:c4:2a:ba:5d:1a:ec:f8:bc:37:13:
         10:65:9d:cc:e7:7e:87:37:51:6b:18:e3:3c:e6:2b:68:a8:75:
         6f:65:9a:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:49:00 2026 by rpki-client