Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
File:                     Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft (raw, json)
Hash identifier:          BO21VXuAHq9IWipzeFB6pBx5nyAM1WPUXuHklACvs+M=
Subject key identifier:   63:FF:9E:58:45:6E:34:1B:52:F8:7A:D6:EA:57:F8:9F:B5:45:5D:1E
Authority key identifier: 31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D
Certificate issuer:       /CN=A913270F/serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
Manifest number:          36
Signing time:             Fri 17 Apr 2026 08:18:47 +0000
Manifest this update:     Fri 17 Apr 2026 08:18:46 +0000
Manifest next update:     Fri 24 Apr 2026 08:18:46 +0000
Files and hashes:         1: Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl (hash: +2IJNgzvzFCnG7DINX5jTKh/hY5Vr06qtoFMqxoeJl0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl
                          rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:18:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913270F, serialNumber=31BFC1373FB37C139A2EE7C3A96DFEC4E7E3791D
        Validity
            Not Before: Apr 17 08:18:46 2026 GMT
            Not After : Apr 24 08:18:46 2026 GMT
        Subject: CN=69e1ece7-6971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:34:d6:3c:95:c0:cd:ce:a1:b4:26:6e:7d:47:
                    15:8b:38:0e:bd:2b:9a:ee:4d:b4:df:ed:85:38:96:
                    5d:90:05:aa:52:b5:4a:63:88:a3:3c:11:2a:e9:e7:
                    d8:05:a8:a4:da:0b:42:57:06:18:29:df:fa:7a:f3:
                    aa:b3:6a:0a:28:5c:70:a7:cd:b1:0e:d3:ae:67:69:
                    1e:34:d5:9e:9a:22:05:b7:dd:02:10:97:7e:d9:4c:
                    66:03:e2:4e:cf:bb:ab:1a:8a:ef:72:2f:dd:a0:1a:
                    53:25:74:1a:9a:c1:dd:2c:0a:bd:73:5e:5c:6a:4c:
                    5c:21:cf:19:57:3c:62:50:13:34:a4:4e:a9:88:50:
                    f9:ba:40:94:89:80:16:ef:5f:7e:41:b8:ec:5f:4d:
                    71:f8:43:08:2c:c7:b1:a0:5f:d1:93:7c:1e:56:44:
                    5f:f4:c2:cf:c2:08:a9:51:32:82:34:d0:ff:50:f7:
                    af:6b:b0:fb:bc:5d:05:9a:23:e2:c0:b3:63:a5:2d:
                    72:ea:47:6f:67:7a:c7:a5:0d:ba:34:fa:74:37:81:
                    71:a6:5e:4c:7a:db:00:b8:6d:8b:77:55:3c:9e:b3:
                    e6:30:33:37:5b:60:77:7d:ed:19:fd:03:50:83:06:
                    87:26:73:8d:53:9b:c2:e1:07:8b:9e:36:db:b7:68:
                    01:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:FF:9E:58:45:6E:34:1B:52:F8:7A:D6:EA:57:F8:9F:B5:45:5D:1E
            X509v3 Authority Key Identifier:
                keyid:31:BF:C1:37:3F:B3:7C:13:9A:2E:E7:C3:A9:6D:FE:C4:E7:E3:79:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mb_BNz-zfBOaLufDqW3-xOfjeR0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913270F/F4A36F62EF9F11F0B8D5B3EF686F56BC/Mb_BNz-zfBOaLufDqW3-xOfjeR0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a6:50:89:3a:e6:76:6d:f0:ab:45:1d:ab:f4:44:96:bf:c8:
         74:79:53:de:f6:33:33:38:61:9a:68:84:74:02:cd:f0:0f:a1:
         b9:cc:e8:cc:af:f2:0e:a6:e3:a3:9d:22:d2:0b:76:14:0d:38:
         ca:d0:16:b9:2e:3d:2c:2d:5f:e5:fb:6b:58:3d:f7:18:eb:f9:
         c1:1a:e3:b0:40:f3:66:69:0f:88:81:02:4b:cb:6b:5d:9c:3f:
         94:b8:d1:7d:8a:2e:d7:6f:0f:6f:90:72:d6:bd:47:40:94:27:
         6d:fb:55:e2:25:33:24:c9:2b:e3:05:b1:ab:85:df:5c:95:47:
         aa:f7:91:64:cb:8b:dc:1e:53:be:4e:c1:f0:06:b3:e7:26:a4:
         f7:ad:21:9e:7a:01:c6:22:de:71:b1:8e:e6:76:a6:bb:07:91:
         49:4b:d8:ec:a4:ae:f6:ac:cb:8d:de:5b:6d:3c:a5:d3:99:13:
         6a:66:cc:73:01:60:c4:54:54:eb:6c:dd:76:97:46:af:71:7a:
         24:2c:9f:51:8f:c1:b4:d8:82:80:3f:0b:c1:2a:45:95:2d:6d:
         d7:f8:e9:42:aa:d6:1c:66:c5:bd:14:b8:0c:95:5e:ec:39:5f:
         be:2a:73:de:a5:d9:21:3f:b2:b4:d2:89:82:d3:6b:79:11:27:
         1e:68:ae:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:31:35 2026 by rpki-client