Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
File:                     F4xrtHazfF8V5ulTq-TLzwhhCCs.mft (raw, json)
Hash identifier:          /zD8Hjy7q7gH5qQ9AcNCYVIFeIJ/jMCjqG9Qg3ft3dU=
Subject key identifier:   7D:32:33:AA:C7:4E:13:27:07:DF:BD:F8:EF:DD:D7:D3:E2:56:11:42
Authority key identifier: 17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B
Certificate issuer:       /CN=A91709F5/serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
Certificate serial:       DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
Manifest number:          DD
Signing time:             Sun 05 Apr 2026 05:58:05 +0000
Manifest this update:     Sun 05 Apr 2026 05:58:04 +0000
Manifest next update:     Sun 12 Apr 2026 05:58:04 +0000
Files and hashes:         1: F4xrtHazfF8V5ulTq-TLzwhhCCs.crl (hash: xJATVRm5GZY2kDa7NTp2ER0/r8kcfIGIXjVQnnMeaxE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:58:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=178C6BB476B37C5F15E6E953ABE4CBCF0861082B
        Validity
            Not Before: Apr  5 05:58:04 2026 GMT
            Not After : Apr 12 05:58:04 2026 GMT
        Subject: CN=69d1f9ec-7cfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:1b:c2:4c:a0:8e:e6:58:9b:d0:03:18:b0:33:
                    51:3f:30:10:84:5e:83:11:63:ce:b3:4c:17:80:58:
                    2f:40:76:c0:e8:43:44:86:d8:cc:ee:d6:e6:f0:f3:
                    0a:e5:ea:dc:0f:e5:3d:6f:c0:50:bb:0a:be:2a:c2:
                    1a:d8:5b:26:3a:36:a2:93:80:95:7f:4d:8e:f3:3e:
                    a8:59:fb:bc:16:b2:af:e8:7b:2c:9a:71:a0:32:44:
                    30:5a:df:27:4f:e8:8a:49:7e:66:3d:cf:17:6f:eb:
                    d2:8f:a0:26:35:89:b1:2b:86:0f:3b:bb:52:bc:5a:
                    cc:a7:e1:20:d9:24:24:1f:b9:83:95:99:69:48:fc:
                    ce:15:42:a3:a7:af:d3:91:60:ec:df:35:5e:2d:8f:
                    17:6e:9b:91:73:97:b1:f5:66:55:bc:e3:43:ce:c7:
                    a6:fb:b6:54:35:77:b7:5d:2b:d3:90:a0:b0:db:0e:
                    f1:d0:1c:71:72:c4:e0:58:6b:cf:84:57:bd:7a:43:
                    7f:c7:fd:31:71:c3:33:55:5c:10:bb:db:04:c7:b9:
                    31:fe:8e:87:1f:be:50:de:18:16:d7:af:4c:6b:2a:
                    f5:92:e9:95:c3:34:8b:54:b1:fd:83:fb:8c:d1:5c:
                    fd:80:94:b3:b4:a4:26:38:da:f6:f2:d1:9b:77:ed:
                    de:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:32:33:AA:C7:4E:13:27:07:DF:BD:F8:EF:DD:D7:D3:E2:56:11:42
            X509v3 Authority Key Identifier:
                keyid:17:8C:6B:B4:76:B3:7C:5F:15:E6:E9:53:AB:E4:CB:CF:08:61:08:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F4xrtHazfF8V5ulTq-TLzwhhCCs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3A8290E8DFDA11EF8B478624C4F9AE02/F4xrtHazfF8V5ulTq-TLzwhhCCs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         61:51:a2:f3:ca:e3:1b:01:39:18:4c:47:cf:43:f1:ee:6c:a5:
         4d:dd:17:32:5e:9e:c3:63:22:82:6a:e1:8c:f1:27:2c:87:b1:
         1c:16:2c:79:9b:81:b6:17:20:71:24:b9:de:d7:04:d5:13:08:
         be:90:58:ed:97:d3:cb:8b:79:02:d0:46:68:f0:bb:69:8b:bd:
         fe:82:5c:51:90:97:4f:61:9f:90:13:5b:7f:d9:fe:ff:38:e4:
         0b:48:ef:07:eb:73:57:33:d2:bc:1d:fa:03:37:a9:5a:b8:2c:
         91:83:80:6d:01:6d:63:65:5b:6b:3c:8f:0d:cb:de:ce:28:a9:
         25:4f:d8:88:4e:7c:bb:ed:8b:a1:c4:e1:c1:42:ee:0d:02:ac:
         f2:a3:07:bf:74:78:ef:a4:00:35:84:5e:a7:2b:de:fd:4d:a3:
         1b:09:d7:0c:e9:52:31:88:74:ed:0a:28:c9:20:a9:81:81:15:
         c4:5d:45:eb:7f:64:5c:8a:30:9b:e5:f8:1e:40:33:fb:1b:4c:
         d0:be:77:90:10:f5:c4:1d:47:28:f2:19:74:5c:91:e6:c6:3f:
         a1:29:9f:35:a6:7f:f4:fa:68:f5:90:d2:75:0e:b8:a2:d6:42:
         c6:0e:2f:14:e9:6d:63:af:71:69:0f:a4:bc:89:df:be:b9:d6:
         6a:95:af:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:48:53 2026 by rpki-client