Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
File:                     5vEsD995brDfK2AuWsQsy4OyLhg.mft (raw, json)
Hash identifier:          7A8QMfy3oEkBXdhtQav8MkHKuzfGISLBoAhcet9pnOc=
Subject key identifier:   44:67:8B:01:A9:A7:46:EA:51:1D:28:48:EE:5F:8A:B6:F1:5A:17:43
Authority key identifier: E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18
Certificate issuer:       /CN=A914E3B7/serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
Certificate serial:       3527
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
Manifest number:          3524
Signing time:             Sat 04 Apr 2026 15:06:31 +0000
Manifest this update:     Sat 04 Apr 2026 15:06:31 +0000
Manifest next update:     Sat 11 Apr 2026 15:06:31 +0000
Files and hashes:         1: 5vEsD995brDfK2AuWsQsy4OyLhg.crl (hash: BeQclIY0PPCk0MyMo14oW2XoStfNbqYplSAciz0hIpM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl
                          rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 15:06:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13607 (0x3527)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E3B7, serialNumber=E6F12C0FDF796EB0DF2B602E5AC42CCB83B22E18
        Validity
            Not Before: Apr  4 15:06:31 2026 GMT
            Not After : Apr 11 15:06:31 2026 GMT
        Subject: CN=69d128f7-b2c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:81:a5:c8:62:ef:71:1b:68:cf:72:28:dd:
                    e1:f8:4b:2b:a6:cd:b5:dd:f7:6c:04:d5:ca:02:52:
                    b9:f3:41:40:21:c5:59:fe:55:2f:f7:f0:c7:1a:7f:
                    79:0c:f5:55:87:09:f9:c9:0a:52:dd:ca:77:21:15:
                    87:aa:5a:0e:49:1c:65:e4:8f:ac:78:1e:dc:57:1d:
                    b6:34:68:44:89:5a:56:5f:de:19:25:de:18:c3:84:
                    0d:30:de:7f:87:b9:03:96:00:d3:88:30:11:31:25:
                    14:ee:46:41:86:8c:3c:9e:de:72:45:47:73:2d:19:
                    c8:15:b1:6c:75:a9:d6:57:c5:6b:22:92:e7:5b:cc:
                    c3:aa:be:e3:30:35:0d:97:19:cb:6b:b7:b5:3d:8a:
                    fd:6b:15:2f:02:0a:30:dc:dc:1d:79:f9:de:4b:f0:
                    ed:49:c5:39:f2:19:4d:06:39:ac:5b:6a:28:bb:66:
                    7c:ca:e5:5f:b1:79:00:ea:94:5d:59:37:bb:84:c6:
                    36:4a:d6:f6:cb:58:aa:fd:1f:f7:11:a2:6b:2f:c3:
                    cf:10:55:97:12:81:f7:27:27:a2:f7:81:a6:49:33:
                    ae:97:df:64:c2:41:de:bc:aa:6c:33:55:90:d5:1d:
                    26:c4:80:34:a4:64:a3:ef:81:3c:c5:a5:02:99:48:
                    96:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:67:8B:01:A9:A7:46:EA:51:1D:28:48:EE:5F:8A:B6:F1:5A:17:43
            X509v3 Authority Key Identifier:
                keyid:E6:F1:2C:0F:DF:79:6E:B0:DF:2B:60:2E:5A:C4:2C:CB:83:B2:2E:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5vEsD995brDfK2AuWsQsy4OyLhg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E3B7/9FAE84FA1DA411E2AC2BAF9A08B02CD2/5vEsD995brDfK2AuWsQsy4OyLhg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:91:e5:78:c5:30:60:44:f0:94:ad:d3:ee:7a:7d:e2:b3:6c:
         fd:db:46:6f:f5:fa:1a:60:14:0c:1a:fd:5b:5f:c7:5e:db:02:
         ec:67:a9:dd:69:34:39:19:6a:8d:b5:cc:c1:7f:95:94:08:0f:
         c7:9f:0c:a6:1f:7a:c6:37:91:42:b0:52:0e:6f:04:94:ef:2c:
         e7:d9:31:55:cd:55:30:0f:6b:e4:42:20:d8:36:29:84:72:54:
         79:10:fd:2b:59:23:58:fd:70:40:7d:cd:bc:f6:e7:88:ec:9e:
         06:b6:6c:a7:b5:d3:09:75:01:90:bd:2f:42:cf:9c:ee:3d:d5:
         e9:36:e5:f6:61:c7:25:6a:8b:6d:c7:a3:95:5a:8b:39:f4:40:
         4f:d0:37:e1:e1:c4:d4:ce:89:5a:32:bf:c9:e3:be:31:92:4f:
         82:68:c4:01:4d:78:26:88:4d:cc:dc:16:41:82:8f:7e:51:bc:
         88:79:aa:b2:e0:91:50:d4:b7:33:7a:1a:dc:3a:b1:27:05:82:
         3b:18:c6:8c:f4:86:2e:67:2a:1d:7e:91:c8:d8:47:80:1c:81:
         02:af:42:20:a6:92:9f:a3:32:82:dd:4f:ff:e9:2d:d1:8f:a4:
         66:95:7a:1e:4c:2c:cd:28:3a:2e:4a:54:6e:b3:6f:4d:b7:ae:
         e9:f2:87:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:50:35 2026 by rpki-client