Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
File:                     ijORleLOKXW194maPQLOYu-Rvzk.mft (raw, json)
Hash identifier:          8JEGKs6fL2y6iZzGMMuh4gfNDqIIC02WipEag4xE/j0=
Subject key identifier:   7D:DA:C6:FB:13:9E:47:B8:60:C8:B2:19:43:D7:EE:2B:19:EA:4B:39
Authority key identifier: 8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39
Certificate issuer:       /CN=A91183D4/serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
Certificate serial:       0311
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
Manifest number:          030D
Signing time:             Fri 17 Apr 2026 01:06:58 +0000
Manifest this update:     Fri 17 Apr 2026 01:06:58 +0000
Manifest next update:     Fri 24 Apr 2026 01:06:58 +0000
Files and hashes:         1: ijORleLOKXW194maPQLOYu-Rvzk.crl (hash: q4oiPtb/hXRsAQvEzhGJrTt+SosLV7Tt48vpDhCo5ss=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl
                          rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:06:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 785 (0x311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91183D4, serialNumber=8A339195E2CE2975B5F7899A3D02CE62EF91BF39
        Validity
            Not Before: Apr 17 01:06:58 2026 GMT
            Not After : Apr 24 01:06:58 2026 GMT
        Subject: CN=69e187b2-43fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:37:cb:0b:98:f6:34:4b:5a:18:be:bb:94:e3:
                    ef:46:38:0a:a3:13:95:48:d8:c2:95:5a:02:93:ba:
                    9d:0f:bf:62:bb:ee:1f:24:4c:ee:9d:69:63:e7:19:
                    de:1c:ba:16:53:92:bc:a5:c2:0b:ff:69:74:db:d3:
                    30:a0:51:c5:78:ff:2a:84:04:de:9a:7d:d7:d1:b6:
                    5b:07:da:71:cc:03:ba:94:65:e9:96:7c:3d:0f:7f:
                    a3:56:bb:b8:2a:28:eb:a1:d1:f4:d9:c2:f5:8f:ad:
                    80:c8:b3:93:ab:fd:bf:a8:44:00:38:81:5f:84:20:
                    66:88:75:d6:1b:c9:07:ca:3f:ad:2c:90:28:0f:18:
                    62:4c:45:ed:59:6c:f9:86:e1:93:f2:9d:0d:c5:60:
                    ec:93:f8:67:e0:22:6e:31:78:c0:ac:13:04:ac:91:
                    1e:66:8c:e2:9b:11:64:7f:99:4d:9a:ad:c5:d7:bb:
                    34:86:2c:56:bd:96:5a:46:b6:86:d4:b5:89:2f:81:
                    73:38:de:34:50:6e:5b:3d:2a:88:3e:b1:42:17:17:
                    76:f4:d4:b9:e5:0e:3d:b0:26:99:7b:27:9f:9d:44:
                    2f:e9:f5:2a:ba:01:a7:ab:74:9e:26:ce:66:18:7e:
                    7b:c5:72:57:b1:bd:9b:10:c5:f2:65:5e:c9:5f:df:
                    ad:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:DA:C6:FB:13:9E:47:B8:60:C8:B2:19:43:D7:EE:2B:19:EA:4B:39
            X509v3 Authority Key Identifier:
                keyid:8A:33:91:95:E2:CE:29:75:B5:F7:89:9A:3D:02:CE:62:EF:91:BF:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ijORleLOKXW194maPQLOYu-Rvzk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91183D4/F6BE869614AC11ED83A76E59C4F9AE02/ijORleLOKXW194maPQLOYu-Rvzk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:3c:6f:1d:9d:d7:e7:4b:32:47:9d:b0:10:b7:17:e6:9a:cc:
         74:d4:f3:e0:4f:00:0c:cf:90:54:b8:fe:6f:e1:b6:90:2a:96:
         6f:a9:47:ad:fc:4f:5b:ff:3a:ba:4d:66:d5:13:71:c2:bf:69:
         a0:e9:e3:5c:1b:74:6f:5d:a5:e7:13:f1:92:76:b6:64:22:4d:
         df:79:ea:cc:89:c1:8b:ae:16:02:02:bc:90:9a:95:13:93:6d:
         17:f2:12:2e:bd:f7:08:05:78:f9:d5:33:a0:cd:1b:e0:58:51:
         ee:6c:af:65:a4:5b:96:07:8d:75:92:43:a1:3c:ec:c0:ec:da:
         cb:6e:17:4f:55:b9:32:43:49:c0:33:eb:55:dc:24:05:8b:21:
         af:5c:d7:df:64:57:89:fc:41:d2:f7:c4:17:f9:81:6b:fc:04:
         ae:8a:58:b0:20:ba:d5:95:7c:01:0d:17:ad:01:38:ea:a9:aa:
         c7:ef:29:70:fb:0c:42:42:62:0b:01:81:0b:c5:00:7f:28:e9:
         dc:29:d6:31:ad:99:fe:c2:62:bc:92:22:87:88:1f:8d:a2:82:
         b4:bf:eb:42:50:bf:fc:8a:87:80:1c:3a:ef:83:19:2a:46:c5:
         5f:28:ad:e4:ff:dc:fc:20:96:01:05:17:d9:fa:af:e0:72:31:
         4a:d5:6b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:58:19 2026 by rpki-client