Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
File:                     B7JffmXLYnEIsNlMGPf1edM0eBg.mft (raw, json)
Hash identifier:          gmjFgEwBwU0Mj5bMM1Qnl5DbWFVgVwTdqvZUwjk28Jg=
Subject key identifier:   17:9F:0A:31:9F:ED:A8:8D:02:B1:0B:09:9A:2B:40:BA:96:F8:01:80
Authority key identifier: 07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18
Certificate issuer:       /CN=A911CB05/serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
Certificate serial:       011B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
Manifest number:          011B
Signing time:             Fri 17 Apr 2026 05:28:39 +0000
Manifest this update:     Fri 17 Apr 2026 05:28:38 +0000
Manifest next update:     Fri 24 Apr 2026 05:28:38 +0000
Files and hashes:         1: B7JffmXLYnEIsNlMGPf1edM0eBg.crl (hash: de/pMP8v5TqyD17X5Cny6JVww+pjJLQ8s94mSTAoC/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl
                          rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:28:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911CB05, serialNumber=07B25F7E65CB627108B0D94C18F7F579D3347818
        Validity
            Not Before: Apr 17 05:28:38 2026 GMT
            Not After : Apr 24 05:28:38 2026 GMT
        Subject: CN=69e1c506-63c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b8:a4:2e:21:8b:85:ee:00:9c:b1:84:c4:98:
                    ef:04:cb:45:e6:28:89:ab:68:53:e9:7c:f1:46:66:
                    94:7c:18:aa:ef:80:b0:2c:a3:e6:94:9a:db:5b:0f:
                    aa:df:89:a2:59:de:0a:51:e2:c0:04:4b:1c:66:00:
                    6a:8d:5b:49:0c:d0:8e:a9:c0:35:da:91:df:0d:89:
                    9b:42:3f:9f:2c:de:88:a7:fc:52:40:b9:59:ed:d0:
                    7d:65:c3:cf:67:eb:ce:7f:f6:d5:0e:64:0a:b5:64:
                    f2:55:ec:04:10:05:d9:bc:e1:de:7d:28:45:ff:c7:
                    46:e6:13:bf:dd:8f:6a:cb:0e:41:c9:f1:f5:c3:26:
                    65:f8:cc:73:13:dd:c7:70:2e:ab:1c:37:be:a5:73:
                    f9:be:27:cc:21:7e:d9:bd:7f:b0:60:e6:0d:e9:f9:
                    42:ce:7a:e1:8e:78:54:d5:b4:96:bf:28:0f:b0:06:
                    93:01:eb:8d:dc:13:6c:fc:a6:c9:7b:6e:28:a9:da:
                    7f:15:e6:01:85:ab:47:a0:52:2e:d0:9a:c1:66:b4:
                    fc:45:c0:0f:f8:09:fa:15:dd:21:55:a7:57:11:9f:
                    44:86:58:39:13:ae:29:7d:e1:e2:8f:a1:1d:1f:e4:
                    f6:1f:73:ff:27:22:07:b7:38:93:ae:ec:ae:51:de:
                    68:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:9F:0A:31:9F:ED:A8:8D:02:B1:0B:09:9A:2B:40:BA:96:F8:01:80
            X509v3 Authority Key Identifier:
                keyid:07:B2:5F:7E:65:CB:62:71:08:B0:D9:4C:18:F7:F5:79:D3:34:78:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/B7JffmXLYnEIsNlMGPf1edM0eBg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911CB05/FA52DEC28A9A11EFB8AA5648C4F9AE02/B7JffmXLYnEIsNlMGPf1edM0eBg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:53:62:f8:7c:f5:96:43:f7:f8:0c:d2:dd:62:32:f5:d3:ef:
         f1:5d:07:da:7a:9a:a4:7a:78:40:4b:66:4d:b0:7c:86:62:78:
         ee:09:3d:aa:3a:39:14:58:29:2b:39:1f:ce:54:f0:5d:a6:30:
         72:9d:d8:ec:f1:ac:f4:6f:31:58:4e:1f:3f:5a:8b:cd:de:ed:
         37:78:18:31:f0:8f:9e:e5:9d:89:16:94:0e:69:5c:8d:5c:c5:
         bf:77:b6:97:c5:26:64:a3:69:5e:dd:14:e6:a9:3a:4d:8e:2e:
         22:25:0d:fd:76:f4:ee:2d:81:44:b6:f0:74:36:f2:61:2e:84:
         8f:89:57:13:56:b9:8b:16:17:09:86:0a:f8:ca:04:35:bf:0f:
         cb:5d:7c:5d:89:2f:c1:b9:cf:ae:46:08:64:48:a2:14:b2:3f:
         3f:ea:f5:02:0a:cf:ad:32:54:bd:58:a8:be:c0:2d:fa:3f:2f:
         7b:54:33:10:cd:c6:c1:cd:e3:2f:7b:68:3d:88:39:52:8d:70:
         db:32:8a:91:0b:3f:9f:76:5c:c8:1a:be:ea:77:56:ef:9b:ce:
         86:da:b3:09:c9:0b:b6:5c:39:6f:37:a5:3c:80:52:94:a1:f1:
         9e:50:ad:93:3f:6c:8d:d7:3b:7d:9b:2c:9c:81:03:cd:af:58:
         93:7d:d6:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:13:19 2026 by rpki-client