Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          0AGZvxKwpEec3MzZ/Ui5tdBNR+uBqoRQWlYfTwwippI=
Subject key identifier:   D5:50:63:AC:B2:E1:F6:45:63:4D:72:73:4C:7B:ED:33:17:80:42:67
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       352B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          352B
Signing time:             Thu 16 Apr 2026 15:11:29 +0000
Manifest this update:     Thu 16 Apr 2026 15:11:28 +0000
Manifest next update:     Thu 23 Apr 2026 15:11:28 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: H5ccvSVwfHp7hRaBpQUFglryGtcSbH9HV1bobAvVqzc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:11:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13611 (0x352b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: Apr 16 15:11:28 2026 GMT
            Not After : Apr 23 15:11:28 2026 GMT
        Subject: CN=69e0fc21-564c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:be:3a:e4:56:0a:f2:a6:83:98:2b:de:72:51:
                    f6:46:90:d8:5f:21:1c:6b:55:2e:dd:f7:56:7f:f7:
                    91:82:9b:e5:1e:9a:00:26:c8:9c:e9:e1:06:f2:a6:
                    48:e6:e6:25:50:3e:d9:48:9b:15:96:02:7c:03:e8:
                    bd:78:b6:03:ff:56:f4:b6:bc:e3:0a:4e:d5:25:22:
                    d3:13:c1:b0:61:e9:44:f4:e4:e6:ee:6f:d0:e3:42:
                    da:2a:55:3a:20:9c:27:58:e5:47:2a:e7:f0:91:44:
                    22:36:9c:92:60:b3:d3:5b:3a:84:64:45:1d:73:28:
                    64:c9:a5:24:54:d5:dc:ce:00:cf:d0:f8:dc:69:4c:
                    3a:6a:8a:41:da:70:80:d9:a4:d6:e4:8f:b1:d0:f9:
                    d2:39:87:bd:33:4a:df:00:13:ab:4b:89:08:67:f2:
                    7a:e5:b4:82:ff:33:78:8d:0b:51:8d:29:f4:11:82:
                    ad:c3:77:80:4c:fd:22:b3:3b:72:2c:44:03:49:11:
                    18:52:ce:9a:78:25:3f:b1:0f:7f:32:98:53:52:b6:
                    27:5b:4c:f8:f9:3b:b1:05:3c:7d:d9:3c:62:17:43:
                    9a:f5:e4:a7:73:db:07:cc:67:20:6a:24:b0:42:4a:
                    70:ca:19:c9:a6:26:cf:4d:40:1e:75:27:a4:24:c3:
                    d7:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:50:63:AC:B2:E1:F6:45:63:4D:72:73:4C:7B:ED:33:17:80:42:67
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:e8:81:e2:fe:72:f9:d9:27:d6:8a:2e:3e:88:64:27:3a:7b:
         e9:70:e2:c7:fd:54:f9:23:9c:ee:c7:42:d1:e8:94:12:0b:87:
         f7:84:64:e0:db:7f:14:05:88:26:46:58:3a:05:13:83:54:3b:
         cc:f5:02:2e:91:38:2d:68:08:a5:fb:54:5d:cb:9d:fc:87:42:
         01:d8:f5:9f:a2:a3:8e:88:0a:ab:2d:b7:db:cf:d1:ba:52:7f:
         36:10:bb:ec:53:02:aa:42:97:ff:b5:98:4a:ed:5a:69:ca:52:
         ab:d4:59:b4:e6:c5:e6:ed:6b:23:53:89:53:2b:97:85:f7:8a:
         51:87:5a:1a:c7:c4:77:22:79:77:9d:18:27:e6:44:6b:ac:36:
         21:13:05:85:cc:45:ee:75:08:59:1d:20:9d:7d:c8:11:9a:91:
         ad:93:f0:7f:2b:72:7e:36:fb:0f:43:9b:aa:e8:35:0f:97:ac:
         e2:f6:9a:b7:8a:fa:58:58:c3:bd:b7:45:d4:fd:16:16:c7:30:
         05:0d:d7:d1:42:72:d4:c9:49:09:22:89:b3:f9:0a:1e:eb:73:
         28:0a:e0:a7:41:e5:96:a1:d4:bf:d9:42:b8:32:48:b8:39:d4:
         97:e9:0d:54:6e:e3:cb:51:12:62:ed:87:43:b8:b7:6b:4c:b5:
         62:ea:b0:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:25 2026 by rpki-client