Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
File:                     MjQC2m9aUgggITsu3L_s7DrJEEU.mft (raw, json)
Hash identifier:          swo5GAWtThpUp66XmmtIHJdJGXL4QftJsGDJ+e+/N78=
Subject key identifier:   5A:C1:F1:88:9F:15:4C:97:BE:F8:27:70:52:7C:96:C4:8A:49:22:F4
Authority key identifier: 32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45
Certificate issuer:       /CN=A913059E/serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
Certificate serial:       52
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
Manifest number:          52
Signing time:             Fri 17 Apr 2026 07:48:41 +0000
Manifest this update:     Fri 17 Apr 2026 07:48:40 +0000
Manifest next update:     Fri 24 Apr 2026 07:48:40 +0000
Files and hashes:         1: MjQC2m9aUgggITsu3L_s7DrJEEU.crl (hash: 0H0PUNle7WDIDVQCudGv5+b463EvG1VbulqjjDjEEbo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl
                          rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913059E, serialNumber=323402DA6F5A520820213B2EDCBFECEC3AC91045
        Validity
            Not Before: Apr 17 07:48:40 2026 GMT
            Not After : Apr 24 07:48:40 2026 GMT
        Subject: CN=69e1e5d8-9f05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:a0:9a:41:f0:a7:38:18:da:79:2a:d4:d8:df:
                    a3:85:fe:fc:e4:06:b6:f1:a8:c9:ff:79:00:fe:fe:
                    ef:f1:9b:43:0f:c4:17:1d:31:4d:e2:88:9d:79:11:
                    ec:1a:da:47:ff:23:b5:33:d7:0e:3f:2a:26:0a:85:
                    22:bd:18:fc:11:1a:9c:c9:ca:86:5e:d5:52:e3:b7:
                    c4:c0:ff:28:4e:93:e4:fb:da:77:a0:aa:d3:f9:2a:
                    d7:c7:ca:01:1a:2b:7c:3a:75:49:d1:57:05:fe:5b:
                    4b:b4:54:e7:53:b7:ab:2c:8e:91:5e:a4:57:32:6b:
                    9a:4a:81:37:fa:52:30:dd:74:3c:2b:79:e4:97:a0:
                    68:ca:47:c5:50:77:59:34:ee:65:45:ed:07:6f:29:
                    e0:78:c5:03:78:33:ad:0b:f8:dc:78:1d:85:b3:39:
                    f6:bd:49:8e:f3:35:69:77:ed:e2:1c:59:84:2d:95:
                    82:f9:82:d1:4b:69:bb:fc:8d:2c:9e:1d:ec:cd:b2:
                    11:ce:2d:92:c5:3c:26:fa:36:11:b2:04:e8:cd:96:
                    36:57:9c:1e:d9:71:13:54:6c:9e:5a:65:14:a6:4b:
                    6e:9a:17:1c:43:9b:96:ca:8d:4e:aa:71:36:9d:99:
                    83:11:fb:5a:bd:84:b1:b5:30:c3:21:ae:28:9d:b3:
                    61:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:C1:F1:88:9F:15:4C:97:BE:F8:27:70:52:7C:96:C4:8A:49:22:F4
            X509v3 Authority Key Identifier:
                keyid:32:34:02:DA:6F:5A:52:08:20:21:3B:2E:DC:BF:EC:EC:3A:C9:10:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MjQC2m9aUgggITsu3L_s7DrJEEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913059E/A465CA80C36311F09DD9F632C4F9AE02/MjQC2m9aUgggITsu3L_s7DrJEEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:3a:3c:7c:d3:bb:c2:b6:5b:70:69:7a:d5:ba:d2:f0:7f:bd:
         14:0f:21:cd:dc:90:33:e8:01:57:47:a8:ca:8e:9e:4f:16:d1:
         26:e7:5b:e0:68:ec:f5:e7:eb:8c:0a:5e:d4:3f:70:76:49:38:
         f9:d5:e1:44:15:52:0d:ad:b2:d8:12:97:c0:6c:29:8d:59:e3:
         bb:d6:00:ed:c4:5a:90:82:3c:44:09:1e:03:d1:ed:e3:c1:71:
         7b:e9:ed:8c:f2:11:df:56:5d:b5:51:ca:84:fc:09:1a:85:67:
         91:65:84:18:65:07:ea:ee:1f:6c:b1:d8:b3:5f:d6:29:00:1b:
         5d:65:bd:d9:8d:bf:37:d5:44:da:7c:67:d1:3c:d0:8e:75:6b:
         0a:dd:0a:90:2e:1b:fc:08:e6:aa:bb:1f:13:64:84:2d:01:23:
         2d:11:ea:51:bf:58:d5:8a:46:ea:03:0a:18:7a:46:4c:2b:30:
         ff:da:06:19:f2:19:5b:05:b7:bc:08:44:78:b1:77:1c:bf:07:
         07:b3:74:9a:d5:99:ea:da:51:1f:b8:24:1c:bc:d1:65:a6:02:
         84:7f:7c:bf:f8:3b:34:5e:3f:b5:67:7a:69:76:6b:f2:ef:7b:
         ca:39:a5:04:98:cc:9c:82:c2:48:91:71:ad:3d:1a:0d:ca:09:
         6e:8a:f7:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:37:27 2026 by rpki-client