Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
File:                     m8SNrBAOdU7o4cpqupQk4z013mo.mft (raw, json)
Hash identifier:          DAUP8ZxiGxi97krqOlToOvdVyD2MLI4HZDn1ecXqBT0=
Subject key identifier:   6A:37:47:FB:46:1B:B0:F6:81:59:31:3E:F9:57:9D:28:53:2E:8D:67
Authority key identifier: 9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A
Certificate issuer:       /CN=A913089B/serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
Certificate serial:       28
Authority info access:    rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
Manifest number:          28
Signing time:             Fri 17 Apr 2026 07:14:14 +0000
Manifest this update:     Fri 17 Apr 2026 07:14:14 +0000
Manifest next update:     Fri 24 Apr 2026 07:14:14 +0000
Files and hashes:         1: m8SNrBAOdU7o4cpqupQk4z013mo.crl (hash: wrxSixhMd/QpuFsSPiqPeS2L2PRueE13wmKujodVMfI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl
                          rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.crl
                          rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/lqhe9LjK9dTDWhV_ThJe5JS6-Tk.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913089B, serialNumber=9BC48DAC100E754EE8E1CA6ABA9424E33D35DE6A
        Validity
            Not Before: Apr 17 07:14:14 2026 GMT
            Not After : Apr 24 07:14:14 2026 GMT
        Subject: CN=69e1ddc6-0675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:98:5c:af:a2:7b:c5:ac:26:6f:81:92:bf:41:
                    f5:bf:fa:7a:03:c8:a5:6a:0a:a7:8d:d8:c1:f6:10:
                    92:db:cf:45:79:bc:7d:55:f6:03:f2:09:07:b4:f8:
                    f1:d2:9f:9f:22:18:f5:e3:4d:ea:fe:08:29:fe:03:
                    12:03:e5:2d:2f:dd:d5:99:4a:18:98:64:a1:ac:c3:
                    7b:1a:3c:34:34:a9:61:81:46:4c:cf:77:27:ec:ba:
                    80:36:55:32:d8:43:c5:23:96:12:23:26:38:a2:4a:
                    ad:b5:06:07:5f:2a:59:23:c7:53:45:fb:c6:99:e9:
                    33:bc:20:e5:55:d6:86:78:30:8b:a5:67:93:17:c6:
                    13:ae:12:2c:98:24:48:4e:60:eb:ff:b2:97:40:e9:
                    9b:3c:60:f5:ab:bf:a5:0b:12:cd:1d:c4:6b:22:91:
                    ff:d1:c1:ef:71:fb:40:6d:43:4a:f1:fb:16:04:58:
                    f6:09:66:91:ad:de:74:62:3a:92:17:a6:48:96:9d:
                    fc:66:bb:00:c4:4a:c4:67:a3:a4:b8:ac:3d:1d:4d:
                    76:7d:4f:a8:f2:6d:ba:84:f8:68:ca:f6:44:a2:b9:
                    67:aa:7b:92:a3:b4:9b:68:c2:3b:a1:71:81:de:3a:
                    ef:25:9a:18:24:24:fb:f4:0c:e3:66:26:f0:30:11:
                    76:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:37:47:FB:46:1B:B0:F6:81:59:31:3E:F9:57:9D:28:53:2E:8D:67
            X509v3 Authority Key Identifier:
                keyid:9B:C4:8D:AC:10:0E:75:4E:E8:E1:CA:6A:BA:94:24:E3:3D:35:DE:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B4A1BEA61D6611E2B2CD8B7C72FD1FF2/m8SNrBAOdU7o4cpqupQk4z013mo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913089B/D54A2E3E00CB11F1BF7491038EEE528E/m8SNrBAOdU7o4cpqupQk4z013mo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:43:7a:df:b2:72:d0:f6:d3:eb:40:65:b4:64:44:58:61:98:
         cd:62:de:d0:29:5d:fd:f5:f2:bd:46:f0:fd:2c:5d:06:a1:57:
         42:c4:3d:36:a6:aa:d5:9b:cc:5c:ab:69:e8:14:cc:b9:27:b3:
         ec:16:0c:04:e0:59:f3:06:9f:9c:79:5c:fe:7a:50:cf:b0:13:
         eb:aa:f2:b0:a3:08:64:02:be:ca:e2:0a:a8:87:cd:8c:14:4a:
         ff:52:9d:d8:cd:03:ed:18:ef:9f:ca:26:0b:66:a0:9a:f9:a1:
         6d:bd:70:4b:5f:0c:c0:a4:f0:7e:87:b8:61:73:08:73:9c:7b:
         8d:23:b3:87:89:33:32:fa:1e:27:ad:66:3b:75:c3:48:cf:25:
         79:2d:36:ec:08:e6:2b:2e:d0:ae:c9:b8:7d:fb:40:60:b6:65:
         51:32:6d:91:f6:64:67:bb:30:de:e6:83:1c:66:99:96:2b:3e:
         24:5e:be:82:1e:76:ff:93:85:c3:9f:fe:b1:de:5a:25:3f:99:
         8f:39:81:92:2f:9a:fa:9f:89:fd:3d:30:c0:b7:23:11:4c:24:
         4c:e4:19:ff:d1:84:a5:9b:53:05:e7:7e:98:8e:76:be:b3:2d:
         fd:54:ff:97:48:42:9d:33:57:75:d4:55:cf:43:99:9c:c6:7d:
         89:c6:08:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:16:28 2026 by rpki-client