Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
File:                     C0io-y5r59-P7QejyRmyPKQL3so.mft (raw, json)
Hash identifier:          oRqA0kl17pMP8ZZukXqvNszMjLfXBmJ0W9SWY8glakY=
Subject key identifier:   6C:20:84:F2:AA:1D:4A:98:7C:2D:8E:B9:95:85:3C:3D:DD:4F:FA:C8
Authority key identifier: 0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA
Certificate issuer:       /CN=A91442B0/serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA
Certificate serial:       0B74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
Manifest number:          0B64
Signing time:             Sat 18 Apr 2026 19:07:30 +0000
Manifest this update:     Sat 18 Apr 2026 19:07:30 +0000
Manifest next update:     Sat 25 Apr 2026 19:07:30 +0000
Files and hashes:         1: C0io-y5r59-P7QejyRmyPKQL3so.crl (hash: SHWOFE58VFKWuzQ8vxUGLBFgl/v+QIBcAnH9UBH2pAA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl
                          rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 19:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2932 (0xb74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91442B0, serialNumber=0B48A8FB2E6BE7DF8FED07A3C919B23CA40BDECA
        Validity
            Not Before: Apr 18 19:07:30 2026 GMT
            Not After : Apr 25 19:07:30 2026 GMT
        Subject: CN=69e3d672-d4d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:e8:dd:72:8e:db:6c:82:5e:05:30:33:ab:
                    77:fe:6b:bf:d0:d9:55:85:d8:1f:59:b6:23:24:cf:
                    bb:9e:95:ec:25:e0:97:cf:c6:b6:cf:a7:0d:2f:5d:
                    06:7e:7e:42:08:52:a9:ca:0d:1f:4f:47:d3:75:eb:
                    ba:20:9d:b8:c2:f7:71:a1:6e:29:8d:fb:89:2f:13:
                    f4:a5:65:92:d3:0d:55:64:57:da:a4:3a:d1:b3:0d:
                    0c:04:79:46:3c:64:44:2c:a6:ae:7e:bc:a5:42:23:
                    8b:5f:28:a6:e9:25:70:71:c2:f5:6e:81:59:de:3b:
                    00:9f:07:ad:95:10:51:0f:13:92:10:6f:d9:5c:1c:
                    e4:03:82:f6:e1:f4:9f:d5:57:f3:48:9c:9f:77:b0:
                    82:58:e9:7f:a3:e2:ed:18:9c:b9:0e:1d:d3:9d:b1:
                    c8:8f:dc:f5:e3:94:cf:3e:ab:1f:2c:72:bf:2f:37:
                    1b:de:cc:b3:f1:22:80:c5:18:3a:bc:17:46:72:3d:
                    fc:f7:36:07:33:23:2b:93:2b:af:95:97:30:16:95:
                    92:aa:57:60:07:3c:7a:26:34:04:66:e5:6f:cb:f9:
                    c3:fd:9e:95:95:3b:b9:66:6a:a3:62:f7:44:21:87:
                    db:61:6f:6a:5c:e6:2d:c9:03:6c:7a:66:50:19:bb:
                    e1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:20:84:F2:AA:1D:4A:98:7C:2D:8E:B9:95:85:3C:3D:DD:4F:FA:C8
            X509v3 Authority Key Identifier:
                keyid:0B:48:A8:FB:2E:6B:E7:DF:8F:ED:07:A3:C9:19:B2:3C:A4:0B:DE:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C0io-y5r59-P7QejyRmyPKQL3so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91442B0/66E0CAD656ED11EAA747C237C4F9AE02/C0io-y5r59-P7QejyRmyPKQL3so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:fe:8f:3b:02:cf:c5:ab:a0:a4:bd:36:64:2a:0f:5b:ef:51:
         66:92:e6:34:f4:09:41:83:21:9e:00:ec:b7:a2:82:69:e2:9a:
         a2:9a:b3:14:d9:f0:45:d1:4c:6a:bf:9e:ba:8e:ae:74:bc:2a:
         e3:bb:88:0c:20:18:79:d0:e3:7a:0b:08:11:00:ec:91:0a:81:
         a3:45:95:0a:2b:34:a1:d1:06:92:e7:8a:59:a9:99:2d:74:4b:
         a5:6d:5a:98:20:89:11:35:c3:0d:f6:bb:4c:2c:15:a2:8a:69:
         7a:99:a9:76:83:2b:f4:32:d5:9e:96:81:76:4a:20:1c:a4:3b:
         09:23:40:d6:9b:9d:85:40:7e:25:eb:cf:61:ec:4e:7b:64:12:
         09:f0:1b:54:91:7b:8a:ec:61:15:bc:9d:ae:c8:95:33:bc:4d:
         80:c9:50:80:68:5c:9a:f3:b4:4b:45:ed:a3:d4:47:c0:e9:6d:
         83:56:d7:a5:77:52:ef:11:72:c4:fa:dd:b3:ff:a4:32:49:d9:
         61:0d:ca:c8:b6:ec:5e:f3:4c:fc:81:ab:cc:92:aa:38:93:02:
         3e:6d:4e:c6:18:6e:76:70:8f:c7:97:cd:17:3a:26:e2:4b:47:
         be:5a:d1:73:4c:e9:db:b5:1f:aa:cc:d7:29:9c:06:de:57:fa:
         22:48:21:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:21:40 2026 by rpki-client