Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
File:                     1l59EGxXG0LrbOL4iHLeery6-7g.mft (raw, json)
Hash identifier:          57rg5j48R4SMzN7CoQiYjXLzeVPuNH4IeXPmeDJ3V80=
Subject key identifier:   CE:CF:76:DC:9D:58:16:95:4D:C7:06:3B:88:E4:AA:82:CB:79:C7:42
Authority key identifier: D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8
Certificate issuer:       /CN=A913C34F/serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
Certificate serial:       3302
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
Manifest number:          3302
Signing time:             Thu 16 Apr 2026 15:23:23 +0000
Manifest this update:     Thu 16 Apr 2026 15:23:23 +0000
Manifest next update:     Thu 23 Apr 2026 15:23:23 +0000
Files and hashes:         1: 1l59EGxXG0LrbOL4iHLeery6-7g.crl (hash: nHbYlTQ2B6tUzy3PeYJ6obANlk4xEcs7mtA6MXYY4so=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl
                          rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:23:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13058 (0x3302)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913C34F, serialNumber=D65E7D106C571B42EB6CE2F88872DE7ABCBAFBB8
        Validity
            Not Before: Apr 16 15:23:23 2026 GMT
            Not After : Apr 23 15:23:23 2026 GMT
        Subject: CN=69e0feeb-e639
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c1:c1:cf:00:b8:88:4d:77:a1:26:ee:3f:dd:
                    a3:c2:e7:03:8c:9a:41:58:52:e7:82:41:74:c6:b2:
                    32:36:4c:15:07:ec:37:da:ed:8e:86:6e:79:6f:92:
                    f3:25:e7:78:56:0e:b7:6f:be:06:f6:d7:f5:09:6c:
                    e3:1c:25:bc:b5:d7:45:33:d0:99:03:ab:60:e7:1e:
                    c0:09:89:7b:92:64:40:e6:32:66:d5:41:5a:cf:7d:
                    17:c3:57:b9:37:03:ba:8d:74:34:d5:c5:c3:7c:c5:
                    e2:ca:13:20:8f:07:e8:5b:ea:b7:71:e7:3c:f4:0b:
                    98:e8:08:43:2b:84:6c:fc:2b:6b:da:bf:05:4e:8d:
                    df:ed:73:50:96:26:66:e4:f2:61:17:8d:6b:39:9c:
                    4b:85:b1:a5:01:a7:6e:99:40:93:53:50:9f:24:2a:
                    64:7e:2f:9d:7c:36:d3:cf:ff:c2:45:2b:c8:2e:a6:
                    1f:19:10:89:cf:fd:f7:a5:4d:e5:6b:6f:59:cc:11:
                    c6:be:0b:aa:e5:04:3d:f5:5e:5d:25:a6:4e:d9:3a:
                    e5:70:90:17:cf:cb:13:d1:ee:67:39:a7:3b:e1:8f:
                    21:ce:e1:aa:c7:53:aa:42:a9:93:c4:d7:de:c8:37:
                    d8:1a:e8:d5:eb:bb:88:5b:35:85:58:bd:e0:cc:b4:
                    88:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:CF:76:DC:9D:58:16:95:4D:C7:06:3B:88:E4:AA:82:CB:79:C7:42
            X509v3 Authority Key Identifier:
                keyid:D6:5E:7D:10:6C:57:1B:42:EB:6C:E2:F8:88:72:DE:7A:BC:BA:FB:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1l59EGxXG0LrbOL4iHLeery6-7g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913C34F/35FBF5D48A0411E2B8821D093292B5E8/1l59EGxXG0LrbOL4iHLeery6-7g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:7c:13:bb:9f:41:1d:76:78:5a:51:a7:87:0b:2d:6a:0d:3c:
         4c:3d:63:25:3e:79:62:74:25:86:e5:27:1c:39:a5:d4:e5:fc:
         98:99:35:26:11:f4:7a:05:71:6d:ef:8d:24:8e:4c:76:27:1e:
         b8:b4:05:5d:a9:a1:0f:e4:09:a2:35:82:ff:c7:9c:a8:e9:97:
         b5:16:b3:a0:72:66:78:fd:29:99:fd:d3:19:8d:c6:2d:21:f8:
         54:50:d7:02:e6:38:10:1e:5e:94:1d:35:a7:5e:2d:53:5d:03:
         1c:fc:a9:98:48:8f:c3:53:c3:68:e3:45:c3:a0:e6:91:91:27:
         a0:18:db:af:fc:1f:7d:ea:e1:ba:b4:8d:71:d5:a1:82:15:d7:
         f1:d8:9b:b7:49:4d:98:81:2f:3a:d2:a6:32:37:58:92:a0:f4:
         be:43:82:23:da:e3:e7:54:87:5d:e3:c4:00:0d:cb:03:88:35:
         ad:a8:f2:91:fc:c6:3b:57:1b:1f:dc:1c:3c:67:fd:79:9f:0b:
         bd:1e:8d:c5:75:fe:7a:d7:37:c7:df:2b:2e:4a:ac:97:6c:76:
         8a:c0:8a:81:c7:12:5d:45:91:eb:97:fa:f5:f9:96:d2:e5:e7:
         eb:c8:aa:46:c5:f6:5d:7a:9e:ee:ff:a2:03:83:64:2f:06:99:
         d2:1d:70:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:52:41 2026 by rpki-client