Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
File:                     8SYNZTBeOoldssaRtq3APlGfPQA.mft (raw, json)
Hash identifier:          Dxua6DXg0gH0OnHKtFjmZKVxsoXBP/MD1jgUpiHj5OA=
Subject key identifier:   9B:4E:BF:08:69:11:43:71:84:5E:E0:65:60:C0:0C:7C:99:0C:07:8C
Authority key identifier: F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00
Certificate issuer:       /CN=A9123F01/serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
Certificate serial:       3529
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
Manifest number:          3529
Signing time:             Thu 16 Apr 2026 15:08:58 +0000
Manifest this update:     Thu 16 Apr 2026 15:08:57 +0000
Manifest next update:     Thu 23 Apr 2026 15:08:57 +0000
Files and hashes:         1: 8SYNZTBeOoldssaRtq3APlGfPQA.crl (hash: tU9Ln5vBUmgm1SdYbOPxN/NuGbV4e+Yab2FNmNniiZM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl
                          rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:08:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13609 (0x3529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9123F01, serialNumber=F1260D65305E3A895DB2C691B6ADC03E519F3D00
        Validity
            Not Before: Apr 16 15:08:57 2026 GMT
            Not After : Apr 23 15:08:57 2026 GMT
        Subject: CN=69e0fb8a-b748
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:bc:66:85:00:8e:4f:d1:94:c4:b7:0d:c9:5a:
                    4f:0d:be:c7:c6:24:0a:37:1d:3e:73:39:c1:e3:62:
                    f8:66:9d:b8:d2:d4:d4:f3:76:9f:0f:81:b8:45:ff:
                    4a:94:99:6e:da:ad:be:dc:e0:a5:32:b6:34:be:44:
                    5f:8c:8e:50:7b:ff:88:82:e1:e6:0a:5f:fa:0b:4f:
                    71:9c:6e:58:89:21:6f:00:dd:f9:57:fc:39:f7:ee:
                    23:44:55:75:32:79:4d:da:d4:9c:bf:9c:3f:b0:5f:
                    e1:d5:4e:d0:64:fd:4f:54:ae:10:c3:b1:08:7c:71:
                    43:b0:36:fa:3e:3d:8e:61:11:78:a5:c1:93:d9:4e:
                    f0:a8:30:dd:0f:9f:7c:53:ac:63:be:a2:3d:b5:23:
                    37:b9:af:a8:7c:55:32:1b:e5:61:0b:7c:fe:f7:b5:
                    0c:37:af:6a:33:83:6b:b4:ad:5f:2f:67:38:f3:2b:
                    a6:ac:87:7d:94:76:65:52:f7:e0:c0:53:7b:cb:a2:
                    cd:97:f1:44:4b:d9:04:51:a5:b7:cc:3c:00:d0:ba:
                    87:6d:c1:61:72:2a:50:73:f0:c2:31:88:11:f2:40:
                    15:8f:66:cb:a7:55:0a:05:cb:5c:11:6f:3f:3a:6e:
                    a4:91:a3:bf:65:95:02:99:3b:53:e1:16:9c:5c:3c:
                    54:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:BF:08:69:11:43:71:84:5E:E0:65:60:C0:0C:7C:99:0C:07:8C
            X509v3 Authority Key Identifier:
                keyid:F1:26:0D:65:30:5E:3A:89:5D:B2:C6:91:B6:AD:C0:3E:51:9F:3D:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8SYNZTBeOoldssaRtq3APlGfPQA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9123F01/C4B88BF01DA511E29C09B79C08B02CD2/8SYNZTBeOoldssaRtq3APlGfPQA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         55:93:e5:53:15:15:39:96:96:2f:28:25:36:0c:c1:cb:d2:7e:
         e1:2f:7d:ba:c0:a0:bd:d1:22:62:ee:d0:99:bf:52:ff:79:cd:
         71:75:35:e6:1c:8c:9b:72:01:18:95:30:82:72:ce:ea:bd:28:
         d5:ba:a8:d3:9c:df:54:40:a3:1e:29:51:f4:4f:c9:63:fe:98:
         53:9d:17:92:52:1a:66:72:e0:7d:0f:6f:1d:21:49:6e:f7:b9:
         9f:6a:96:5f:4d:24:15:ef:ee:b7:2c:7f:88:c2:10:31:1c:33:
         d1:80:dd:17:e9:94:73:03:05:c2:3c:ac:9f:55:73:6b:2d:45:
         6e:d5:33:fd:a9:84:6f:63:41:c2:df:47:07:35:3a:1b:1f:73:
         75:81:87:24:20:7d:8e:dc:24:c4:4f:7f:79:81:3c:98:db:7b:
         36:b9:e1:38:da:84:ca:8e:46:d7:4e:68:e4:a7:ee:4d:64:53:
         f8:06:b5:81:6d:5b:75:df:f1:d3:76:1c:00:23:52:2d:f5:94:
         a3:16:8a:0e:ce:d3:30:91:03:af:ec:d9:30:cd:52:3f:ff:1b:
         d7:a1:7d:ab:56:11:d0:37:8e:8e:6b:78:3f:a3:e4:be:5f:a9:
         8c:52:1a:3a:46:de:99:fb:72:2d:15:b2:b7:11:c4:72:9c:83:
         b4:7a:33:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:46:54 2026 by rpki-client