Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
File:                     Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft (raw, json)
Hash identifier:          9qM0W0fCTTjrTn1oZ7nY2BC2wKjR/Qk5+p/NAABZyjg=
Subject key identifier:   5F:3B:D1:E7:22:FF:8E:AB:79:55:D0:E7:22:9C:29:BD:91:A8:25:52
Authority key identifier: 2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3
Certificate issuer:       /CN=A912B75A/serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
Certificate serial:       013A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
Manifest number:          013A
Signing time:             Fri 17 Apr 2026 05:03:48 +0000
Manifest this update:     Fri 17 Apr 2026 05:03:48 +0000
Manifest next update:     Fri 24 Apr 2026 05:03:48 +0000
Files and hashes:         1: Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl (hash: okd428QiHHY/Z8wFoxD2IWB9TVa6BE5TJaLU5DdT3k4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl
                          rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 314 (0x13a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912B75A, serialNumber=2B3D211FC9998DF2035E20D91AA55EDEC628F0A3
        Validity
            Not Before: Apr 17 05:03:48 2026 GMT
            Not After : Apr 24 05:03:48 2026 GMT
        Subject: CN=69e1bf34-ee75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:12:12:c9:79:c0:cb:47:94:bd:81:8f:77:37:
                    a1:e4:fb:fc:34:b1:16:25:23:b6:c5:b2:6e:48:0d:
                    3d:7a:27:69:a4:16:6b:06:c7:e7:af:2c:81:11:71:
                    e3:b2:de:dd:26:9d:a6:91:c3:54:a2:62:17:b4:e1:
                    55:38:36:ff:ce:b2:e2:80:e2:a0:f9:70:9d:39:d3:
                    a3:7c:5d:12:f1:07:d2:46:ef:53:06:b9:12:e3:39:
                    23:69:f1:00:1c:da:c1:11:d3:b9:80:81:a8:5f:82:
                    79:08:ff:63:53:55:22:87:be:2e:c5:75:6d:86:77:
                    ef:af:fd:4d:e2:d1:2f:65:ec:fe:1b:73:aa:10:dd:
                    3f:5d:a1:16:27:b6:5c:d4:dd:f0:7a:fd:82:0f:e5:
                    99:32:17:0c:c2:0a:9d:42:fe:42:61:39:1b:69:75:
                    d8:cc:9e:64:d0:3f:bb:91:2d:8e:64:5f:49:90:af:
                    1d:1d:b6:d9:e8:33:30:57:35:5f:12:f4:10:79:6c:
                    2d:90:50:57:a4:16:31:a0:93:28:6c:52:01:9b:d0:
                    94:bc:25:96:0d:c1:f6:2e:25:66:ea:5b:07:4a:8f:
                    86:59:27:9e:cd:1d:e6:26:8e:6b:66:ea:f2:d9:bb:
                    d2:ee:fb:3f:fe:d1:a4:44:3d:a0:6b:56:25:6a:98:
                    6f:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:3B:D1:E7:22:FF:8E:AB:79:55:D0:E7:22:9C:29:BD:91:A8:25:52
            X509v3 Authority Key Identifier:
                keyid:2B:3D:21:1F:C9:99:8D:F2:03:5E:20:D9:1A:A5:5E:DE:C6:28:F0:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912B75A/1B22E1FE5B9A11EF82027640C4F9AE02/Kz0hH8mZjfIDXiDZGqVe3sYo8KM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:53:76:21:1a:57:75:7b:04:a1:62:56:75:2f:ec:d2:18:9b:
         17:bb:ef:15:6a:60:d0:6d:42:12:d7:af:b9:0c:e0:2c:3a:78:
         2a:7c:00:1e:05:8e:fc:bd:60:e7:f1:d9:39:4f:04:72:1a:7d:
         48:a7:a7:85:33:87:a2:46:0f:89:2f:9c:ca:49:fb:c3:8d:05:
         95:23:1f:b9:1d:45:f6:0b:76:b2:7f:6d:58:5a:17:c3:c7:c6:
         48:f7:61:41:09:eb:9b:d1:0d:92:35:81:ed:e2:2e:91:92:a3:
         1a:3b:00:ea:6e:a6:2a:ae:c2:41:8f:9a:16:d4:e3:dc:11:1c:
         d5:f4:28:52:75:65:ac:cd:f6:95:e0:93:fd:32:5d:0c:14:0f:
         7f:34:6d:5c:d1:39:a5:ca:1f:4e:0f:2c:dc:db:7f:b9:e6:e7:
         b0:d8:32:74:e5:28:28:b9:e4:4a:25:e2:33:6b:d6:86:bf:54:
         00:31:14:99:13:93:90:76:bd:31:db:63:8f:ca:ac:9c:62:6c:
         0d:91:3e:ed:4d:32:25:7c:14:79:75:e8:e3:88:3a:f4:75:17:
         94:bb:84:49:06:ef:bd:1f:b7:8e:ec:af:b8:51:d4:31:43:45:
         82:79:ed:27:22:13:b1:0f:d9:e6:4a:c6:0d:a8:5e:51:25:ff:
         64:4e:04:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 02:33:31 2026 by rpki-client