Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
File:                     30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft (raw, json)
Hash identifier:          x1YlyZOIZ9om2WhfbI1cfGFPdsQ9wSYwg0py7C6MkCk=
Subject key identifier:   BB:C6:CD:33:AF:5C:3F:1A:9C:3D:7A:ED:9B:8F:84:11:1B:27:C7:2B
Authority key identifier: DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93
Certificate issuer:       /CN=A9118479/serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
Certificate serial:       3530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
Manifest number:          3530
Signing time:             Thu 16 Apr 2026 14:59:45 +0000
Manifest this update:     Thu 16 Apr 2026 14:59:45 +0000
Manifest next update:     Thu 23 Apr 2026 14:59:45 +0000
Files and hashes:         1: 30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl (hash: pwzYv+Ve7q5mu3Fh8JeMN1zbOOOPyJeE9ZAWzhsMc+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl
                          rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:59:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13616 (0x3530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118479, serialNumber=DF4069F246E9FEA97B0ABE3A5FEC778E53931793
        Validity
            Not Before: Apr 16 14:59:45 2026 GMT
            Not After : Apr 23 14:59:45 2026 GMT
        Subject: CN=69e0f961-17e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:de:db:3e:5f:e9:c5:ae:ac:94:46:e2:74:60:
                    00:9a:b5:76:e0:f5:52:15:19:d6:a2:de:47:22:38:
                    f7:d0:76:e4:9f:47:8f:4e:9d:ac:fb:28:88:5b:11:
                    a2:68:51:9a:b4:1c:34:10:ef:87:03:94:30:d3:c8:
                    13:95:4b:87:f9:82:9c:ff:53:2c:cb:48:b3:b1:1b:
                    49:7b:89:7e:43:ca:61:a2:14:0d:7f:51:5a:44:54:
                    d8:06:5a:68:4d:46:72:6b:8e:4f:80:ee:64:b5:b3:
                    6d:af:8a:bd:e2:bc:d9:99:d9:8e:33:56:de:06:48:
                    23:51:12:5e:b0:2f:3a:96:7c:0f:83:3e:c5:0b:22:
                    ae:d8:c9:9c:58:10:75:92:63:75:61:ca:ae:7a:3c:
                    9a:66:d7:8d:51:61:49:e6:0f:11:4c:aa:9e:30:6e:
                    a8:c6:a7:20:ff:ac:0d:5d:05:dc:02:c7:53:d4:91:
                    07:7a:e4:d8:bf:c0:b4:02:d9:af:e3:c8:b4:bd:06:
                    97:20:0d:95:96:c0:33:88:0c:24:12:e3:5c:21:77:
                    be:68:1c:0b:74:ef:6a:c8:93:58:39:f5:ad:db:c0:
                    7e:46:f6:1b:fd:b5:db:b7:de:72:c9:55:3c:da:bc:
                    ff:73:0d:07:67:8e:bb:b8:0e:c8:57:30:bb:b0:59:
                    5d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:C6:CD:33:AF:5C:3F:1A:9C:3D:7A:ED:9B:8F:84:11:1B:27:C7:2B
            X509v3 Authority Key Identifier:
                keyid:DF:40:69:F2:46:E9:FE:A9:7B:0A:BE:3A:5F:EC:77:8E:53:93:17:93

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118479/7C7BBF081D9E11E2A87E7B8E08B02CD2/30Bp8kbp_ql7Cr46X-x3jlOTF5M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:29:99:9e:ee:1f:03:fc:bd:2d:d9:67:09:5f:af:74:5d:99:
         9f:ee:d1:98:3f:bd:81:19:83:81:62:28:96:d2:76:93:51:78:
         7f:ec:f1:69:a7:ee:b8:1e:cd:ce:40:d0:fc:cf:7d:05:02:19:
         85:ec:ee:33:c3:75:6b:16:d9:e6:9d:8b:d0:77:c0:92:06:e9:
         87:f8:0d:65:59:fa:d5:73:90:65:08:00:89:3f:bd:f3:c6:f1:
         5f:e9:a0:a1:a5:47:9c:61:99:ce:ad:6f:50:de:bf:9c:89:81:
         a8:8e:dc:92:a7:47:d0:e5:57:5b:d7:cb:c1:3a:56:37:3d:4d:
         77:79:46:fb:5a:ed:eb:5c:de:39:af:db:a3:8a:1d:ae:87:29:
         3e:fd:0a:b8:47:c7:e7:17:c7:0c:50:f5:30:ba:cb:0d:ea:64:
         cb:19:9b:04:f0:45:fb:51:c0:30:24:42:23:83:d6:cf:34:94:
         1f:48:09:b6:8b:ab:48:a1:f9:ce:c6:cc:30:85:b8:69:26:ed:
         2b:9d:4d:74:e8:92:1f:23:51:4a:28:16:f7:6e:96:ed:f7:6e:
         d7:86:72:6c:9a:46:d3:ae:27:b2:e1:70:3b:33:d3:bd:25:93:
         d8:f3:d4:5c:14:11:26:85:d3:a4:86:83:ef:92:c3:e8:12:00:
         81:6b:e2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:52:31 2026 by rpki-client