Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          c674cEfBkjyZAYXMvgLm8gUoZs6eYh8tSOB9hYv2JS4=
Subject key identifier:   1F:CA:81:8C:B8:F7:5C:D3:98:44:3F:D2:44:1D:C2:BA:65:03:84:0A
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          352B
Signing time:             Thu 16 Apr 2026 14:53:19 +0000
Manifest this update:     Thu 16 Apr 2026 14:53:18 +0000
Manifest next update:     Thu 23 Apr 2026 14:53:18 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: dGLpZx8VytpbHtaZEUVKodEHVHrrU12Lxs6ODloenhs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:53:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: Apr 16 14:53:18 2026 GMT
            Not After : Apr 23 14:53:18 2026 GMT
        Subject: CN=69e0f7df-cd1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:95:bd:91:0d:97:b4:78:39:ed:a3:5a:d7:
                    ec:4e:83:f9:10:38:53:39:cd:ef:aa:1f:44:c1:09:
                    f4:64:a0:4d:4e:4d:23:fd:27:ef:6a:77:a6:54:8e:
                    4c:4b:0d:e0:d6:48:e4:a8:2d:e2:ca:46:ec:8d:eb:
                    0b:04:6a:1d:23:e5:94:a4:03:24:b2:f6:de:e9:ef:
                    e3:f2:cb:46:6f:d2:f3:c5:3d:56:53:83:45:6f:6b:
                    9c:30:15:23:c0:e5:88:f7:d3:11:4f:22:6d:52:57:
                    51:28:1b:4c:04:5e:45:39:9e:cd:29:82:44:2b:5a:
                    8b:90:46:9d:c0:ed:b8:7d:79:ba:fb:2b:90:83:f5:
                    6c:69:6f:8d:7d:2d:61:20:a1:83:65:c0:b2:e2:c6:
                    ce:23:6d:2c:7e:c6:27:8a:e0:22:d8:d8:a2:74:34:
                    2d:23:3f:ef:18:b4:80:c5:80:09:54:df:c8:22:da:
                    fb:21:07:78:0b:4e:ba:45:03:f8:33:84:ef:40:57:
                    1e:fb:ba:2b:40:e5:98:41:50:de:93:17:23:03:06:
                    36:8c:20:4f:6f:c5:b6:8d:20:c6:ca:8f:e2:4c:c1:
                    c0:42:54:b9:2b:68:06:d9:5d:f6:50:b8:20:9b:b7:
                    bc:d4:4b:f1:67:e6:3c:0b:02:09:0f:14:83:f8:40:
                    60:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:CA:81:8C:B8:F7:5C:D3:98:44:3F:D2:44:1D:C2:BA:65:03:84:0A
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:a9:a4:da:2c:cd:16:89:3e:41:23:96:e8:03:fd:93:02:7d:
         25:8e:f1:9f:0f:cf:81:11:ee:da:c7:81:bb:06:65:3a:62:a5:
         96:b7:0e:18:b5:45:2b:97:1d:d6:ca:ab:8d:a1:b9:bb:f6:af:
         00:06:c9:6b:e3:66:5d:6b:36:d0:24:80:f0:7c:19:0d:a6:df:
         aa:21:35:29:d0:25:86:15:1d:c1:34:78:c2:2e:81:44:85:18:
         f3:4b:c0:a1:83:ab:6e:2f:4f:55:7e:04:07:1e:76:b1:fc:86:
         23:ea:ea:3b:0d:af:12:85:96:f8:b5:24:18:f0:a6:ac:b3:d5:
         3c:44:4e:02:4e:92:98:f0:0d:2d:eb:8a:72:33:24:f8:af:39:
         92:9c:c0:72:b4:fd:8b:19:0f:22:c2:68:b3:68:d5:32:94:9e:
         ca:5c:39:d2:6f:58:de:46:a5:58:d5:c5:0a:c8:04:9a:6c:2f:
         d7:29:2f:f3:2c:88:af:f2:9c:a9:db:91:4c:cf:f3:9e:64:2d:
         0f:9c:3a:fe:c3:d0:54:44:fc:45:c9:75:d3:de:71:88:51:e3:
         e3:e6:52:a4:7b:8a:46:3b:92:14:9a:1d:73:e1:d4:8a:38:7e:
         d4:bc:53:3d:6f:a8:b9:35:40:e0:46:91:58:8b:f3:f2:69:3b:
         68:39:cf:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:46:59 2026 by rpki-client