Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
File:                     h81xgndjHgvdtrTzot8esxEio4E.mft (raw, json)
Hash identifier:          gFHcFhX7ee5Nmfmjq5/XkQ38NzQCnJVbuDf4e4a6Ozs=
Subject key identifier:   29:A0:AD:30:D2:03:38:86:E4:9B:38:D8:CF:BD:B1:E8:DB:1C:08:9A
Authority key identifier: 87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81
Certificate issuer:       /CN=A91F2DDD/serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
Certificate serial:       0EF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
Manifest number:          129E
Signing time:             Sat 04 Apr 2026 17:30:04 +0000
Manifest this update:     Sat 04 Apr 2026 17:30:04 +0000
Manifest next update:     Sat 11 Apr 2026 17:30:04 +0000
Files and hashes:         1: h81xgndjHgvdtrTzot8esxEio4E.crl (hash: 8QNjzrdjjgW8q+owkpBfP+FdUkng+f+hzQkqX/JNVKs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl
                          rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 Apr 2026 17:30:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3828 (0xef4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F2DDD, serialNumber=87CD718277631E0BDDB6B4F3A2DF1EB31122A381
        Validity
            Not Before: Apr  4 17:30:04 2026 GMT
            Not After : Apr 11 17:30:04 2026 GMT
        Subject: CN=69d14a9c-7434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d2:f8:31:26:e9:a8:68:4f:be:c6:52:27:71:
                    6b:0e:c3:34:08:61:a1:7d:3e:97:3b:de:4f:73:71:
                    71:cf:e0:08:d1:0a:c8:73:db:ba:a7:79:d5:66:f5:
                    6f:75:9f:b1:b4:8a:ba:1e:57:0f:f3:85:af:71:7d:
                    d4:6b:01:bd:b6:d3:9c:b1:0e:6b:09:0c:80:64:51:
                    bb:39:f5:32:37:d8:7c:29:fc:d3:29:94:92:ea:17:
                    90:3f:2a:ee:8e:52:f5:de:d8:a4:d7:68:19:5b:e5:
                    75:ba:2c:56:f6:1a:8e:e0:66:3d:e0:41:1a:e8:d9:
                    7f:03:a6:c0:0a:70:36:5b:bd:e5:fe:9f:42:53:2f:
                    7f:61:97:66:66:e0:2b:33:98:3a:dc:73:5d:9a:b5:
                    4a:3c:29:18:84:9e:fb:95:28:f7:13:2b:e9:b3:3e:
                    c3:b8:27:df:29:a3:15:f3:06:92:0c:cd:4f:1b:da:
                    a4:ca:61:ad:24:99:7c:a2:d6:a9:85:e7:c7:c5:72:
                    12:74:94:fe:60:cf:cd:8e:03:c1:63:0f:67:3a:94:
                    c5:1c:5d:22:71:b9:1a:7e:9d:ea:db:4d:90:29:1d:
                    b1:a9:c5:fb:49:93:1c:80:32:51:c3:9b:07:39:a8:
                    f9:a4:b9:c2:3e:b4:f6:fe:6f:76:6f:db:ae:60:5b:
                    8c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:A0:AD:30:D2:03:38:86:E4:9B:38:D8:CF:BD:B1:E8:DB:1C:08:9A
            X509v3 Authority Key Identifier:
                keyid:87:CD:71:82:77:63:1E:0B:DD:B6:B4:F3:A2:DF:1E:B3:11:22:A3:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h81xgndjHgvdtrTzot8esxEio4E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F2DDD/B4A283629E1B11E98E1E4E5EC4F9AE02/h81xgndjHgvdtrTzot8esxEio4E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:fc:d2:41:a9:12:96:0e:9e:42:8a:b8:8f:ad:c3:67:22:0d:
         f5:13:1a:74:30:f5:85:8c:7c:d8:70:11:f3:53:14:00:44:eb:
         56:45:34:b9:39:b3:ab:e8:24:a5:43:89:3b:39:e6:60:1e:ba:
         b1:8a:2d:4d:a8:5e:6b:01:55:01:ec:9f:64:fa:04:d4:5d:ce:
         62:1c:71:24:13:62:ca:9e:68:05:b5:85:7a:bf:4b:5c:2b:37:
         29:ce:55:6b:e8:65:a3:e0:39:71:d5:7e:f2:bb:e1:83:d5:28:
         e9:bb:6d:25:c4:26:70:f8:07:03:2e:79:d5:0e:d9:5c:67:57:
         4c:f4:19:e0:94:8a:a1:6f:0b:aa:ac:d4:f7:69:d7:65:b1:57:
         fd:53:98:e1:08:f0:74:cd:6f:db:88:79:e9:21:40:7f:dc:92:
         e0:c0:82:80:ec:20:16:67:64:52:35:0e:52:77:34:8d:17:d6:
         0c:dd:d6:4e:28:e8:01:08:59:45:30:93:d6:ff:02:79:87:a4:
         98:74:5e:1e:a6:d4:e4:f4:e4:5a:54:22:7a:46:29:06:86:d8:
         76:5d:5a:88:e6:a9:a6:9c:7d:a6:20:ae:65:cc:a8:f9:f3:04:
         22:b0:7c:53:dd:fa:0f:54:5a:17:9d:54:b4:62:72:3f:d9:58:
         d1:57:f9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:52:49 2026 by rpki-client