Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File:                     sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier:          V+S/pZNhmh7tmChsiyY8PKv5S6UO/s5+7BI0jyg3+Zw=
Subject key identifier:   6D:02:4B:3F:54:48:CC:15:85:B5:58:B7:BE:06:78:D6:2D:01:94:2F
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer:       /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial:       45
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number:          45
Signing time:             Fri 17 Apr 2026 08:05:39 +0000
Manifest this update:     Fri 17 Apr 2026 08:05:38 +0000
Manifest next update:     Fri 24 Apr 2026 08:05:38 +0000
Files and hashes:         1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: pSrNXIQR0uBcsFEZoEHIz5W1t3VE1++9Y5ZibIliJPY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:47:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
        Validity
            Not Before: Apr 17 08:05:38 2026 GMT
            Not After : Apr 24 08:05:38 2026 GMT
        Subject: CN=69e1e9d3-7826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:86:1b:b3:35:15:11:b2:c0:61:e2:cf:80:ea:
                    02:82:25:1b:a6:09:e6:62:4a:af:bf:1f:75:2b:cd:
                    5c:fe:3a:69:e8:cd:bf:06:89:50:f6:3d:82:6b:c3:
                    21:7b:9a:26:06:a3:8b:3b:ab:b2:46:3a:70:7f:95:
                    91:80:f9:38:ef:6c:3a:bb:47:24:3f:aa:ba:ec:5e:
                    f7:e9:ff:a1:ec:19:e2:d8:da:4a:f4:bb:e2:99:2b:
                    b0:a0:49:c8:17:13:f7:44:ea:8f:9d:29:0f:a1:c7:
                    70:59:59:f1:8c:e9:b7:5e:9f:7d:2b:bb:93:3b:5f:
                    97:91:16:ad:a6:a7:7f:4b:eb:91:ff:92:a1:98:ae:
                    18:33:23:5b:ef:8a:a3:4c:9b:74:9f:44:5d:d9:3f:
                    4c:97:9d:ee:aa:bd:e4:b4:a5:1d:83:0f:47:6a:cf:
                    71:b6:a0:a2:51:dc:73:4e:7b:c5:bf:2e:7b:c0:de:
                    a7:e7:c6:53:e9:70:fe:ef:14:14:02:a8:fe:ee:8f:
                    cf:45:c1:59:3c:ba:3a:fb:f5:3e:72:51:54:c6:b4:
                    8c:62:9e:ef:4b:4e:36:70:e5:79:4e:67:a9:10:c2:
                    66:29:c6:07:00:55:92:85:5e:6b:7d:38:f2:b7:0b:
                    a2:65:6c:d8:9a:5f:78:20:49:75:d1:bc:4c:d2:49:
                    eb:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:02:4B:3F:54:48:CC:15:85:B5:58:B7:BE:06:78:D6:2D:01:94:2F
            X509v3 Authority Key Identifier:
                keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:14:58:63:24:8f:c9:8a:9c:03:41:0e:a5:4f:13:92:a7:5b:
         79:ce:dc:eb:f4:49:bb:cd:fe:6f:34:a0:5d:21:00:3b:66:51:
         38:0c:39:c2:15:ef:e5:5d:01:7e:25:1b:a8:74:9d:c3:22:80:
         3d:cb:65:91:c1:59:ae:0e:de:96:99:5c:af:f3:10:95:3d:9b:
         75:db:9c:bf:5e:f7:73:d4:57:bd:43:2a:fd:ce:fe:b0:2d:82:
         6b:aa:e1:c7:d5:9e:f0:ac:f3:c0:c4:36:99:d9:0c:37:31:7f:
         22:0d:8d:ec:20:d5:ee:31:a9:6b:2e:54:21:44:aa:ff:fa:db:
         02:95:67:a2:66:1f:e1:3f:4d:1f:1a:3a:7a:1d:28:e1:84:18:
         1e:78:2c:8a:d2:a5:a5:83:e8:e8:9b:6a:64:a1:a6:69:f3:2e:
         62:74:ba:f0:7d:c5:62:7c:68:c3:f8:6c:2c:64:e5:0d:d0:46:
         b2:1f:dd:39:00:90:b6:68:57:0d:36:f1:95:c2:89:ef:ed:a6:
         35:cb:9c:a8:fc:f6:00:57:08:37:92:18:f2:8b:7c:38:fd:6d:
         e2:07:2d:c0:4d:ab:99:89:11:dd:49:13:68:4a:bd:24:3d:11:
         a3:f0:bc:a9:a6:e0:4e:e7:fc:2c:c6:a1:03:9f:4b:ac:d4:32:
         81:b3:de:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:57:14 2026 by rpki-client