Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
File:                     13OnYxe8qx7vA29fbkx7NMSra3s.mft (raw, json)
Hash identifier:          OE68ip8lirWsnQLiKv5AC/GO04u0nnPOM4HO38LPyM0=
Subject key identifier:   91:6A:EC:F7:AD:E8:CC:3C:FA:10:80:09:6C:04:B2:39:F4:62:54:12
Authority key identifier: D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B
Certificate issuer:       /CN=A917AE24/serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
Certificate serial:       054F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
Manifest number:          054F
Signing time:             Sat 04 Apr 2026 23:12:53 +0000
Manifest this update:     Sat 04 Apr 2026 23:12:52 +0000
Manifest next update:     Sat 11 Apr 2026 23:12:52 +0000
Files and hashes:         1: 13OnYxe8qx7vA29fbkx7NMSra3s.crl (hash: q2ZDMkLm2E7eyUtwkjppPcEpWTaSFcoqS/Nm3/nKwRE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl
                          rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 23:12:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1359 (0x54f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AE24, serialNumber=D773A76317BCAB1EEF036F5F6E4C7B34C4AB6B7B
        Validity
            Not Before: Apr  4 23:12:52 2026 GMT
            Not After : Apr 11 23:12:52 2026 GMT
        Subject: CN=69d19af5-c899
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:e7:ab:c1:78:ab:86:7e:26:98:52:f0:1a:
                    5e:b7:eb:2c:e1:12:2c:86:53:60:a3:6e:9f:5e:9e:
                    a3:9b:5f:0f:0c:a0:f2:cd:0c:d3:06:85:1e:24:71:
                    cd:90:e5:40:c2:c8:b1:a9:d3:87:65:6f:37:dc:35:
                    32:be:ef:d9:fc:32:54:6e:09:a7:ba:e2:34:02:e5:
                    1f:d9:ce:11:df:a2:db:cc:08:8c:96:8f:86:3c:31:
                    74:89:37:c4:d9:8c:c3:8b:6d:93:b7:1b:53:39:b5:
                    82:5b:0e:6e:18:f1:b2:ec:11:eb:a1:9c:2b:47:66:
                    64:e5:2f:cf:98:56:6c:36:98:f5:37:35:7a:52:98:
                    5e:a2:84:7c:0e:93:7c:fb:fc:a3:59:39:78:fd:54:
                    5d:b1:5a:16:45:8f:ca:30:1a:ca:7b:78:a5:c2:17:
                    a7:75:fd:71:4c:aa:47:16:89:00:a8:00:b5:94:fd:
                    9e:9b:bf:c1:4a:f0:ef:fb:e1:8a:58:73:48:b3:82:
                    64:f3:d8:67:62:e0:f1:5b:75:04:44:61:92:4c:3a:
                    4b:ec:f9:95:cb:0e:91:a3:4e:16:16:98:f3:da:d1:
                    e7:2b:73:91:a9:b4:28:5a:25:59:c4:ed:7d:17:3b:
                    da:ec:55:4a:ae:b7:e5:7c:93:e0:d7:14:39:19:a7:
                    f0:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:6A:EC:F7:AD:E8:CC:3C:FA:10:80:09:6C:04:B2:39:F4:62:54:12
            X509v3 Authority Key Identifier:
                keyid:D7:73:A7:63:17:BC:AB:1E:EF:03:6F:5F:6E:4C:7B:34:C4:AB:6B:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/13OnYxe8qx7vA29fbkx7NMSra3s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AE24/8EC4009430A411EC8BEDB82DC4F9AE02/13OnYxe8qx7vA29fbkx7NMSra3s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:eb:ca:6c:55:24:4a:a6:ad:a8:60:f7:d2:ba:43:e9:1f:79:
         ac:6a:5d:59:f0:2d:a2:25:4e:80:71:ca:88:f2:fe:17:c9:33:
         67:97:2a:05:b5:9c:fa:6f:8c:b6:dd:ba:25:33:bf:7b:7e:07:
         b7:04:3a:f3:56:83:4f:59:d7:c0:cf:f1:13:c8:8d:28:d1:b0:
         16:f6:5f:f2:14:69:97:dc:dd:f1:57:9c:7c:87:31:46:0e:9f:
         1c:09:04:49:3f:7f:1a:d4:02:49:16:1b:25:98:55:50:96:44:
         66:45:e3:0b:a5:fd:71:2c:9b:07:07:67:e2:94:53:db:ab:4d:
         60:bf:e8:12:f6:db:09:c9:84:be:65:db:f5:78:d3:57:a2:e8:
         51:6f:cc:d1:41:00:03:c9:a1:f3:4d:48:22:8c:1d:d6:73:78:
         b2:12:04:68:1c:36:7f:97:b8:79:c2:cd:6c:fb:bb:eb:00:d4:
         e5:19:cf:c1:08:b4:5f:0b:a2:c9:ec:19:37:8b:7e:43:34:e4:
         17:c3:8f:05:5b:99:99:fd:bc:f6:2b:20:d3:6d:c6:f3:40:81:
         d5:c6:5b:8b:a5:e5:81:b0:9a:c9:e4:18:8f:c8:a4:54:16:46:
         1f:b6:6b:0b:e8:65:be:1b:93:03:c6:db:13:27:5d:c9:06:e4:
         b4:c4:2b:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 09:53:51 2026 by rpki-client