Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File:                     Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier:          NEWB+Jy/SsK5L/obktxXSjlfiW4I9AVznXrevHQxegQ=
Subject key identifier:   FC:AE:06:70:0D:47:D1:40:F0:0F:EB:45:AC:10:37:95:98:B2:81:7E
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer:       /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial:       014A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number:          014A
Signing time:             Sun 05 Apr 2026 04:34:50 +0000
Manifest this update:     Sun 05 Apr 2026 04:34:49 +0000
Manifest next update:     Sun 12 Apr 2026 04:34:49 +0000
Files and hashes:         1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: 5rb5yuMCceGunWQGm8y9FuuD3E9LW0mnTPBkjTimHzU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 04:34:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
        Validity
            Not Before: Apr  5 04:34:49 2026 GMT
            Not After : Apr 12 04:34:49 2026 GMT
        Subject: CN=69d1e66a-0a33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:3c:f9:79:27:fc:95:ec:4b:3e:15:05:43:82:
                    1b:30:b9:db:a5:46:c0:82:00:68:b2:fa:30:f2:5a:
                    d9:e6:60:b4:89:ee:df:ad:99:f0:ed:55:1d:a6:15:
                    df:e1:42:58:1f:be:60:f7:f2:60:bb:d2:1c:6d:4f:
                    40:f3:45:ad:d7:22:ce:63:4b:ef:05:0d:45:1a:95:
                    f7:f2:31:95:9d:57:92:13:02:42:69:b4:55:10:8a:
                    f7:3d:0c:99:77:e3:a6:3e:99:d5:1e:cc:c8:9d:cb:
                    f2:cf:ee:1d:38:e0:3c:f5:d7:53:df:38:f7:2f:13:
                    15:eb:77:70:40:62:e1:a0:53:18:fc:eb:7f:a8:69:
                    e6:aa:a0:b1:d9:5c:ee:84:65:3b:ab:0f:fe:39:be:
                    ea:90:52:6d:a1:d5:8e:23:3c:d7:e4:5a:87:f6:5e:
                    1d:0d:0f:77:ee:7f:16:94:47:f7:66:44:7b:01:6f:
                    95:b9:90:0a:d3:9e:24:73:b9:20:5b:a4:3b:4d:65:
                    2e:6c:70:2f:a4:c8:c2:bb:da:0c:7a:77:21:82:91:
                    01:2f:7f:d1:e1:81:dc:f4:87:49:75:b5:97:cd:22:
                    08:31:ba:0e:a8:c9:4a:f3:4a:03:39:7b:51:1f:12:
                    be:c6:77:95:6b:a5:cb:fe:56:6c:9b:94:9d:35:f0:
                    1c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AE:06:70:0D:47:D1:40:F0:0F:EB:45:AC:10:37:95:98:B2:81:7E
            X509v3 Authority Key Identifier:
                keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:77:71:ce:6e:3d:32:a2:66:c1:4b:6d:82:be:98:0a:31:33:
         ee:f9:3a:29:61:48:b6:8d:6c:0c:e9:32:ad:13:a0:c5:23:bb:
         e4:96:b2:85:7b:6b:27:f7:6e:b7:7a:41:7c:6e:53:cc:db:1a:
         45:e2:66:1b:af:2c:fb:36:c5:56:58:2c:c6:c1:1c:5e:33:b2:
         cb:61:b3:3a:c6:8e:2e:92:4d:62:18:32:d8:18:b6:4e:20:d4:
         b8:29:48:1d:be:d1:d0:23:3c:fd:07:36:c2:8a:73:1a:fd:b6:
         23:17:ea:f8:35:92:57:ca:dc:33:f8:5c:9f:82:fd:82:51:12:
         fd:7b:34:b1:39:f9:fa:ba:59:04:5b:6b:a8:86:a4:3e:a5:2e:
         2b:fc:a7:9f:2b:b6:35:3a:d7:32:61:48:6d:79:96:76:d8:2a:
         c1:c9:87:75:e0:cf:6f:ed:5e:7f:a9:85:9e:da:e5:ca:dd:f0:
         df:e2:14:18:10:6f:97:f3:cb:82:d1:80:27:f5:89:ae:f8:b6:
         3e:96:0d:0c:e3:fc:20:18:5a:e0:95:de:24:99:e8:a7:a0:f2:
         cc:95:b6:28:32:48:67:cf:6e:84:90:bf:f3:c5:a1:42:7a:52:
         45:b2:d8:8a:6a:31:08:42:76:0f:b8:48:cf:af:8a:e7:8e:90:
         8c:be:e0:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:33:13 2026 by rpki-client