Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          RyFjih0SquqnEzpzODjNRlFQyY/zyKtU8FLAAhqWfow=
Subject key identifier:   6B:DC:64:7F:EB:09:49:28:50:3E:92:CD:76:38:BD:01:4A:54:40:C6
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       02D5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          02D4
Signing time:             Sun 05 Apr 2026 01:06:32 +0000
Manifest this update:     Sun 05 Apr 2026 01:06:31 +0000
Manifest next update:     Sun 12 Apr 2026 01:06:31 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: Xfs8brBMGwWCMYUL0krMqKrdKZUS/7VciKS3Fqx7tAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 01:06:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 725 (0x2d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: Apr  5 01:06:31 2026 GMT
            Not After : Apr 12 01:06:31 2026 GMT
        Subject: CN=69d1b598-825e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:30:32:9c:44:81:d9:46:29:0f:70:0f:92:5f:
                    98:cd:33:ff:30:bd:d1:1e:01:25:41:74:8a:66:43:
                    a8:22:b8:99:28:a2:c8:02:de:1b:9c:60:3f:e7:81:
                    92:d4:62:38:a5:9d:88:95:8b:de:ad:60:9b:23:8a:
                    22:eb:80:e1:64:a4:78:60:57:26:3e:56:6b:71:03:
                    ee:97:11:8d:05:38:99:63:05:5f:76:c1:99:0a:fa:
                    3c:52:4a:00:04:8f:ae:72:c2:4d:5a:51:7f:dc:c0:
                    19:68:fc:36:84:3b:63:2f:95:1e:02:6c:66:24:b9:
                    80:94:f0:65:eb:20:5b:8e:99:5c:8f:f2:5f:e6:b8:
                    bd:60:3a:5e:7e:36:c2:ba:7f:cb:98:10:13:a0:01:
                    b4:27:7a:6a:5c:1f:5d:af:4e:8f:c3:5e:92:75:7f:
                    1f:25:ec:da:53:7c:51:18:86:64:08:64:45:ee:91:
                    78:84:c6:c5:c3:10:67:e7:16:4c:d0:da:39:3d:3e:
                    45:f8:b8:b0:17:9a:c7:a3:83:8a:e0:3f:d0:0d:27:
                    18:7b:1c:24:9f:8f:fe:88:9d:de:ea:9d:bf:03:28:
                    e2:f1:ca:7d:cf:4a:c9:ee:59:00:ff:74:8f:3d:26:
                    ca:2c:bd:37:03:b8:de:09:af:7a:3b:28:c5:17:31:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DC:64:7F:EB:09:49:28:50:3E:92:CD:76:38:BD:01:4A:54:40:C6
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:1c:2c:77:64:63:8d:28:98:d8:8c:cc:9e:5b:b9:a6:9f:ce:
         64:f4:80:78:3a:ae:dd:85:1e:41:f6:c3:69:ed:33:59:17:bc:
         64:fc:6f:69:72:4d:b2:b9:d9:f4:e6:26:5b:1f:95:76:8b:05:
         dd:0c:ae:b9:bc:90:ce:8e:3a:3d:aa:b6:ba:fc:71:f8:38:ba:
         c2:7a:b6:c9:3f:d0:76:66:14:92:2d:73:32:9b:88:94:67:af:
         80:95:10:00:54:c9:31:46:36:be:8d:ae:fa:f7:08:78:1a:43:
         ca:77:86:d0:fd:4f:3e:75:b6:c6:2f:6b:e5:c1:cb:53:25:3d:
         90:09:c5:fd:0a:38:04:b5:e8:dc:e2:33:ce:44:bc:f4:b6:26:
         af:65:9a:6e:2e:af:42:27:e7:ac:9b:81:08:d7:75:ee:94:40:
         67:2f:e6:c0:3c:7a:00:0b:a4:2a:84:35:5f:e3:5c:ed:2e:88:
         1e:ca:b8:aa:20:bc:c0:17:b7:16:c5:9a:90:00:6a:31:b5:79:
         d5:0e:d0:bc:cd:8a:ad:e6:4f:48:82:60:f7:b8:34:69:a1:29:
         0e:7b:b5:f2:d9:0f:34:24:44:c6:a0:0a:a5:60:04:e9:b9:53:
         c0:b9:28:ba:b4:6d:13:e8:fa:33:b1:6a:28:9f:f0:21:c8:d4:
         fc:c3:ee:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 6 08:32:06 2026 by rpki-client