Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
File:                     h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft (raw, json)
Hash identifier:          N97B1T0rClK+bOOylQM5CyQwzgHdKzqlLXYkI58lTEY=
Subject key identifier:   3E:F7:A3:40:C1:EA:41:D0:C9:2D:68:CA:0E:B2:F7:FB:B7:AB:17:B1
Authority key identifier: 87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03
Certificate issuer:       /CN=A911A4F7/serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
Certificate serial:       011F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
Manifest number:          011F
Signing time:             Sun 19 Apr 2026 05:21:47 +0000
Manifest this update:     Sun 19 Apr 2026 05:21:47 +0000
Manifest next update:     Sun 26 Apr 2026 05:21:47 +0000
Files and hashes:         1: h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl (hash: gV02DoUX2+44Qt85M67rCvwvSiXpCgowZiEX/hPOxy0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl
                          rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 287 (0x11f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911A4F7, serialNumber=8792DE399CF63193DDC29D30FBF0A581E024F003
        Validity
            Not Before: Apr 19 05:21:47 2026 GMT
            Not After : Apr 26 05:21:47 2026 GMT
        Subject: CN=69e4666b-592e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:3b:95:7b:2c:65:d2:a7:11:c5:74:d6:3a:0b:
                    ba:60:56:33:f6:09:54:b9:e0:e8:7f:55:58:c8:5b:
                    5b:f7:9b:9e:35:49:f8:c4:ef:fa:d9:c2:36:1f:fa:
                    7d:b6:72:1a:ae:b0:1c:e6:a2:0d:81:aa:11:a7:9e:
                    ee:e0:47:47:51:01:a1:20:b9:c5:da:20:1f:0c:64:
                    07:65:cd:4d:94:70:a8:dc:d6:b6:b1:a2:31:4c:ee:
                    8a:38:ab:03:a5:20:70:6e:f6:04:a5:43:09:4d:1a:
                    fa:5b:a6:c7:18:17:82:72:0d:94:55:84:bb:c0:9a:
                    59:7b:ee:a0:0c:2b:93:28:6c:cf:d6:8b:f8:97:3b:
                    81:28:b5:1f:3f:dc:d4:3c:eb:f9:69:53:7e:39:f0:
                    88:81:fe:6f:40:04:aa:94:96:1e:8b:07:95:8c:fe:
                    49:f4:b4:d8:f3:6d:dd:3c:0e:bf:c6:a6:83:7a:c3:
                    e4:1f:06:1b:e1:1b:4a:12:77:5b:6d:2a:9a:a9:c0:
                    ab:37:80:ef:81:0d:57:d5:a5:bf:ad:4b:c5:3c:38:
                    e4:4d:38:22:6e:25:66:80:5a:92:0d:ed:f8:94:87:
                    01:61:04:36:e0:9c:bc:dc:82:0d:fa:7c:ce:04:49:
                    15:f4:c8:a8:84:53:e8:7c:cd:7d:cd:37:28:4b:16:
                    11:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:F7:A3:40:C1:EA:41:D0:C9:2D:68:CA:0E:B2:F7:FB:B7:AB:17:B1
            X509v3 Authority Key Identifier:
                keyid:87:92:DE:39:9C:F6:31:93:DD:C2:9D:30:FB:F0:A5:81:E0:24:F0:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/h5LeOZz2MZPdwp0w-_ClgeAk8AM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911A4F7/A3DD6B9A85FC11EFBC210F5EC4F9AE02/h5LeOZz2MZPdwp0w-_ClgeAk8AM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:d7:26:0a:fc:ec:93:21:ac:d8:64:a9:f6:a7:a4:6d:eb:16:
         d0:ce:cc:81:fd:c0:b4:07:74:9a:fb:94:de:84:be:96:c6:ca:
         81:a3:7f:44:34:ff:ca:8e:d5:9b:d6:ad:a1:59:ec:5e:51:de:
         3e:eb:73:b7:13:26:5d:24:a9:dc:4d:5a:93:ac:2a:53:52:02:
         5c:56:81:c7:8b:28:4a:c9:f3:5b:73:83:ae:2e:4d:20:47:51:
         a4:52:cc:3f:f8:ab:2a:d9:21:95:0e:35:c5:cc:a7:9b:96:89:
         e5:4c:76:6c:27:1a:fd:16:34:07:3a:f8:ea:90:01:fb:e9:f2:
         de:0a:56:38:aa:22:3f:24:c2:92:32:05:b8:70:1b:d6:69:0b:
         a9:dd:32:89:65:28:7a:5a:22:88:25:94:ff:2a:7f:92:98:75:
         2e:a7:ad:fa:23:19:12:fd:21:1c:74:cf:92:2d:fb:8b:27:f8:
         60:21:e6:b8:e2:04:27:5a:40:70:da:d4:6a:20:94:91:5e:3d:
         ae:bf:9f:ad:ad:97:d0:1c:68:1f:25:2c:be:a3:3c:40:84:ad:
         f9:c2:5d:99:88:57:94:f5:0d:8f:c1:f2:e1:ff:ef:df:0c:8b:
         19:a8:ab:eb:f5:27:d8:be:61:a6:8c:5d:86:fa:81:4a:16:6a:
         5e:ae:7a:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:40:38 2026 by rpki-client