Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
File:                     9US5wrG96hw7N0NIuNFeNn5qD0I.mft (raw, json)
Hash identifier:          UoEedasDJeGUd74Xbirqw4+OxXTcqnc+ELf1VYXXPIs=
Subject key identifier:   C2:E7:5F:68:25:DC:2D:BE:57:00:C2:98:07:56:92:25:A0:8E:0E:07
Authority key identifier: F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42
Certificate issuer:       /CN=A91139AB/serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
Certificate serial:       07FD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
Manifest number:          0A33
Signing time:             Thu 16 Apr 2026 21:07:13 +0000
Manifest this update:     Thu 16 Apr 2026 21:07:13 +0000
Manifest next update:     Thu 23 Apr 2026 21:07:13 +0000
Files and hashes:         1: 9US5wrG96hw7N0NIuNFeNn5qD0I.crl (hash: ZSpp2qhwaqyz+jP4xfDoZ6Il09TzpvDJ0P8FeKTFC8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl
                          rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 21:07:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2045 (0x7fd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91139AB, serialNumber=F544B9C2B1BDEA1C3B374348B8D15E367E6A0F42
        Validity
            Not Before: Apr 16 21:07:13 2026 GMT
            Not After : Apr 23 21:07:13 2026 GMT
        Subject: CN=69e14f81-e53d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f2:84:37:cd:6e:dd:1d:f8:86:0c:bc:d6:73:
                    bd:5c:d4:c8:e3:44:5c:08:06:2f:8d:2c:18:18:96:
                    6f:d5:ad:1c:84:bc:6d:56:82:c8:4c:36:b4:4c:56:
                    fb:7b:69:7b:6c:f8:a8:a4:cb:78:c2:bb:19:08:83:
                    1d:6d:07:05:a7:8e:55:07:11:95:86:a4:ec:61:ce:
                    44:97:3e:6c:7b:9d:6c:28:2d:d4:1e:ee:71:11:94:
                    33:48:db:3d:78:51:0f:3e:c7:89:62:29:5f:be:71:
                    b5:57:9e:3f:a2:21:8a:4f:73:cb:99:7d:f0:76:b6:
                    7d:98:df:3d:d3:6f:47:d0:89:89:2b:2a:62:de:46:
                    dc:c9:d1:59:05:62:79:5c:1e:70:f6:c9:a9:7f:29:
                    6f:7a:03:b2:c2:0a:70:ed:df:83:bc:42:f7:bf:ba:
                    52:ed:ae:81:25:60:fb:b2:25:74:a8:2d:cd:08:56:
                    8c:9a:11:c3:af:9d:46:07:7e:b5:f7:31:b4:14:20:
                    1e:07:be:8f:94:65:23:50:01:8e:48:71:d7:13:a2:
                    d1:7e:7a:d4:a6:0e:3b:a6:6e:4f:a4:99:ab:23:54:
                    c6:70:d4:47:a0:ba:f6:86:a9:19:de:c7:fe:e2:70:
                    ab:ea:bc:94:9e:bb:33:ac:ae:56:f4:87:42:71:8b:
                    0c:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E7:5F:68:25:DC:2D:BE:57:00:C2:98:07:56:92:25:A0:8E:0E:07
            X509v3 Authority Key Identifier:
                keyid:F5:44:B9:C2:B1:BD:EA:1C:3B:37:43:48:B8:D1:5E:36:7E:6A:0F:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9US5wrG96hw7N0NIuNFeNn5qD0I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91139AB/158D4906255B11EBA9F5601AC4F9AE02/9US5wrG96hw7N0NIuNFeNn5qD0I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5f:3a:92:ba:14:03:97:32:64:95:c8:fe:9e:90:1c:4f:b6:7a:
         15:fe:fd:7a:9a:ca:57:d5:42:e4:af:49:d7:90:24:d2:9a:a4:
         c4:a8:6d:e6:36:09:31:08:71:7c:bd:ef:c2:22:70:3c:c1:30:
         5d:1c:c5:12:9c:be:96:ab:bf:c9:63:99:4a:0a:be:e6:be:10:
         e6:3f:31:b5:fb:e8:2a:68:84:bc:22:90:f2:80:31:33:64:63:
         13:8f:5f:82:8f:35:c5:59:be:0c:da:be:1d:9e:b5:52:36:1f:
         40:4f:8f:09:37:71:83:d1:48:9b:c3:42:94:da:16:c7:4a:08:
         64:d0:4c:00:ff:6e:ca:38:98:cd:fc:64:40:91:73:3b:94:56:
         cb:cc:14:64:9c:b1:5d:39:62:c8:91:75:26:bb:31:91:e5:f2:
         2d:b8:67:01:be:28:3d:0d:48:50:2b:66:8f:07:e2:dc:37:91:
         96:2d:59:14:ec:35:a0:62:15:97:85:d8:18:69:68:9c:6b:b8:
         28:86:79:d0:da:f7:44:32:b4:ce:a8:58:49:d1:f7:87:00:ba:
         ce:d1:c7:0b:8b:9e:5e:c2:5f:7f:5e:fc:80:10:32:13:be:67:
         a3:8e:c7:ff:5f:53:d1:ad:ca:cd:1a:b0:e1:b0:fd:9d:8a:9b:
         8b:9d:d4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:56:24 2026 by rpki-client