Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
File:                     tIPaBfgQj61WuWetrdJRxslpwlI.mft (raw, json)
Hash identifier:          rpecp8ZAhkCAytOAIL+GlKwZ4h3JXuz7QUJAVrqwgBY=
Subject key identifier:   59:92:10:F6:49:EA:CC:9A:BD:1C:45:50:A3:11:6F:FE:5D:FF:71:1A
Authority key identifier: B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52
Certificate issuer:       /CN=A91178F4/serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
Certificate serial:       022D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
Manifest number:          022D
Signing time:             Thu 16 Apr 2026 18:36:43 +0000
Manifest this update:     Thu 16 Apr 2026 18:36:43 +0000
Manifest next update:     Thu 23 Apr 2026 18:36:43 +0000
Files and hashes:         1: tIPaBfgQj61WuWetrdJRxslpwlI.crl (hash: ZBVOBRxMBPzJJKjG7O3A5njoZy5WQxI2T5TobX4mWSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl
                          rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 557 (0x22d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91178F4, serialNumber=B483DA05F8108FAD56B967ADADD251C6C969C252
        Validity
            Not Before: Apr 16 18:36:43 2026 GMT
            Not After : Apr 23 18:36:43 2026 GMT
        Subject: CN=69e12c3b-7321
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:39:34:d5:8a:06:de:5d:a9:c7:63:b5:ea:bc:
                    f9:33:59:2b:f5:ab:b5:94:fa:e4:ff:f5:c9:45:a4:
                    16:28:8c:14:a6:73:b4:c6:ab:7e:41:fd:02:25:51:
                    3c:03:a2:04:21:e3:43:96:26:ca:0d:2a:d6:10:df:
                    09:8b:c7:e1:a0:79:67:fc:f4:a9:c5:ab:74:22:82:
                    fb:e9:7a:1c:12:84:aa:48:04:6b:88:6b:40:5f:ab:
                    1e:3b:e8:a4:41:7c:c1:ff:19:a9:a9:6e:76:39:cc:
                    a0:9a:8f:b8:b2:51:f2:84:32:eb:89:8b:33:e8:9f:
                    ac:9d:89:ef:ad:ca:32:7d:e3:5b:41:84:7d:06:19:
                    87:36:2b:4f:b4:02:ec:56:70:57:ff:1e:9b:0d:7b:
                    70:99:6b:f7:05:34:df:b5:fc:aa:af:79:3f:cf:96:
                    ef:07:cf:f5:e5:47:a3:93:79:7c:c8:9b:39:f7:71:
                    e9:dc:b1:d9:53:4c:de:f8:c1:47:fe:fc:59:77:08:
                    ed:76:fe:9f:29:ff:3a:11:82:71:ad:8e:fa:f5:0d:
                    70:17:b0:59:24:1c:62:4b:81:55:6c:0e:d9:d1:75:
                    20:21:f4:67:0d:29:37:26:d5:9a:74:6d:17:5c:9f:
                    45:7b:fc:9e:0a:ff:8a:fc:cc:5d:9f:68:de:71:57:
                    67:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:92:10:F6:49:EA:CC:9A:BD:1C:45:50:A3:11:6F:FE:5D:FF:71:1A
            X509v3 Authority Key Identifier:
                keyid:B4:83:DA:05:F8:10:8F:AD:56:B9:67:AD:AD:D2:51:C6:C9:69:C2:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/tIPaBfgQj61WuWetrdJRxslpwlI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91178F4/BF0A1E9AF0B611EDA882E628C4F9AE02/tIPaBfgQj61WuWetrdJRxslpwlI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:47:28:1f:a8:0c:17:6b:99:68:5e:ef:05:bf:fc:11:94:6a:
         0a:f7:6e:24:d6:e5:55:27:9e:c6:5b:91:5c:f2:ab:f1:f1:db:
         9d:24:ec:f0:65:cf:a3:9c:c9:b3:db:62:1a:75:6f:57:65:23:
         0e:f0:4d:a1:b3:bf:14:54:73:90:e6:53:22:3f:34:1d:28:ef:
         7b:ca:95:53:15:c2:60:d4:42:fb:7e:b7:a4:1e:83:2b:99:2b:
         89:0e:8a:5f:02:f1:5c:66:79:0d:34:5a:56:3a:5d:b6:c1:1f:
         ae:c0:54:e9:dd:06:86:16:60:e8:bd:75:44:6b:01:df:ab:f6:
         ec:03:5e:6f:28:d7:4c:7b:f3:fc:e5:c0:0e:91:bd:8e:22:af:
         ca:f2:20:fa:36:50:19:ab:20:fa:21:69:3c:43:31:3c:86:c9:
         16:48:41:18:34:0e:62:cf:13:01:5c:95:4d:c0:cb:26:a8:e5:
         35:59:af:20:24:20:e1:6d:89:ac:0f:b5:1e:0b:c4:2b:35:4c:
         03:11:0c:c5:27:8e:8a:69:2d:8d:c2:76:04:08:f8:4f:c0:18:
         44:77:d0:f6:a1:88:b7:41:75:24:37:0c:5d:15:7c:54:be:22:
         a0:60:0d:24:8d:6b:91:67:a2:1e:6d:c8:f2:b0:ad:30:c7:f8:
         ac:72:69:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:39:19 2026 by rpki-client