Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
File:                     RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json)
Hash identifier:          Npy3Yti/rZsUx6ZIFQEkOiVDpIo1gOj1T6m2OgnQmrU=
Subject key identifier:   AA:3F:3E:BE:66:4C:9A:47:47:E1:18:22:59:2C:38:52:D8:3D:48:71
Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87
Certificate issuer:       /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
Manifest number:          011E
Signing time:             Sun 05 Apr 2026 05:09:35 +0000
Manifest this update:     Sun 05 Apr 2026 05:09:34 +0000
Manifest next update:     Sun 12 Apr 2026 05:09:34 +0000
Files and hashes:         1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: q++MyOqcNSPKoYD0BSfJwu13fT5t5qgu/TxTRTtbaV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 05:09:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
        Validity
            Not Before: Apr  5 05:09:34 2026 GMT
            Not After : Apr 12 05:09:34 2026 GMT
        Subject: CN=69d1ee8f-54e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:3a:35:3a:b6:6e:99:94:be:19:ca:d0:58:61:
                    4a:49:ef:0a:c2:3a:b3:46:5c:77:92:50:4e:78:6b:
                    36:cb:dc:e0:61:29:5e:6e:56:72:f3:8e:88:ba:c0:
                    23:2b:2a:36:51:8a:3f:e4:b9:8f:9a:83:b6:d2:0f:
                    a5:1a:35:7b:3a:aa:2b:be:88:91:b4:2a:e3:42:0b:
                    b3:b4:52:58:e6:c7:79:ea:bc:19:50:94:ea:b4:6a:
                    3a:74:c4:13:67:7f:aa:f3:4b:ca:8a:74:d8:d9:b5:
                    24:bf:49:2b:5c:5b:f3:5a:45:dc:c8:be:a7:04:fd:
                    70:5f:c4:75:d5:66:e9:0a:ee:4b:5a:8a:ac:f6:8a:
                    61:f1:fa:ad:83:34:ad:fd:d3:c5:98:59:4b:cf:e0:
                    7a:bf:ff:70:f4:fc:63:e0:e1:46:3a:b7:5a:2d:d0:
                    f1:52:51:d6:5e:fa:9e:ba:17:bc:43:6d:1a:79:b4:
                    44:e4:6c:86:7f:97:28:95:0f:e7:3a:0a:ec:29:29:
                    df:2c:ea:80:25:a1:4c:09:aa:86:e1:8a:17:6b:57:
                    e1:81:7e:12:10:15:b9:8c:de:ab:35:48:36:9a:2f:
                    c8:69:57:cd:62:61:9a:d5:0c:e3:e9:21:eb:52:84:
                    07:9d:1c:46:cb:1d:6d:40:8b:9a:49:82:5e:ce:fa:
                    bf:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:3F:3E:BE:66:4C:9A:47:47:E1:18:22:59:2C:38:52:D8:3D:48:71
            X509v3 Authority Key Identifier:
                keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:5e:72:3b:4f:9e:03:9e:68:fa:d7:de:50:8b:0f:1a:81:37:
         17:3e:eb:b9:d7:33:df:0f:69:79:2b:46:79:22:2a:c5:56:58:
         7f:4a:fe:e3:b0:91:d6:37:d3:e1:12:9b:f8:a6:65:13:67:e5:
         b3:10:ed:cd:fb:f6:54:2f:af:a4:72:a5:b3:a8:cb:6e:20:b7:
         84:b3:98:57:df:2f:90:52:92:86:d0:4b:10:6e:48:d4:03:e3:
         02:7d:85:5f:54:b0:68:d2:a8:ad:2d:3a:83:e8:b6:3e:49:b2:
         8b:42:ba:24:fa:52:73:ae:c5:90:af:0c:b3:17:99:21:de:e5:
         8b:8e:5f:94:25:10:56:bd:d1:2c:77:2e:67:71:fc:7f:10:f5:
         25:3d:d7:a1:8e:72:1a:1c:75:d2:6c:35:55:8e:16:26:4b:17:
         64:76:11:1f:5a:ee:41:32:c6:38:59:c0:f5:c4:cb:64:ed:b6:
         16:f0:1a:14:c7:b7:df:95:6f:8f:cc:32:3c:6f:e7:76:4d:29:
         ff:37:6f:ad:17:97:a6:ce:24:41:a3:b5:32:29:66:4a:2f:b8:
         f8:ad:9a:c9:22:60:f4:95:9b:cb:1c:cb:db:b0:25:d9:d5:37:
         70:af:3b:0d:dc:a9:cc:99:8f:a3:ff:22:ff:2b:1d:c1:9e:f8:
         83:28:f0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:07 2026 by rpki-client