Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
File:                     rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft (raw, json)
Hash identifier:          zquQdjdD3SKE0oXyT84nuSVvDfbPAf+tzchjLcby0NQ=
Subject key identifier:   FA:DB:32:37:65:39:AB:62:39:E2:7F:16:D4:B0:D2:C8:AA:A7:29:89
Authority key identifier: AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B
Certificate issuer:       /CN=A914530B/serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
Manifest number:          0101
Signing time:             Sun 19 Apr 2026 05:49:42 +0000
Manifest this update:     Sun 19 Apr 2026 05:49:42 +0000
Manifest next update:     Sun 26 Apr 2026 05:49:42 +0000
Files and hashes:         1: rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl (hash: bjyg0CSi63nSp5HfPeAJTgs2ohQ5d8ddegIT51+bwEw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl
                          rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914530B, serialNumber=AE59C71FD63BD26B463026E07490469704A8FB9B
        Validity
            Not Before: Apr 19 05:49:42 2026 GMT
            Not After : Apr 26 05:49:42 2026 GMT
        Subject: CN=69e46cf6-6e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:db:3a:db:51:e5:98:8e:63:85:7d:92:ee:e5:
                    1a:3c:eb:f7:70:bb:07:0c:6f:b5:78:5c:19:ca:67:
                    9b:f9:de:cd:a5:fc:f0:e5:3d:68:20:42:e6:a2:ff:
                    21:d5:66:05:28:8d:3d:4d:3c:4e:72:0e:7b:f9:34:
                    1b:56:14:59:fe:d3:8c:fb:57:78:cb:27:3b:02:19:
                    48:6d:59:c5:9b:fb:8a:6b:c7:c6:5b:8c:05:34:e8:
                    e4:83:b5:6d:47:19:66:fd:fa:81:10:4c:c0:6b:6d:
                    68:5b:7a:5f:ba:98:23:97:b5:83:56:6d:d3:fc:ab:
                    6c:22:60:a4:43:29:89:91:e1:52:3d:c6:78:00:a8:
                    56:9c:93:26:fe:f0:c9:b5:63:c9:83:d1:3a:a1:c4:
                    da:8d:6f:04:91:75:51:d2:ef:04:70:5b:0a:33:d6:
                    90:dc:ea:8a:e9:31:ad:1a:99:27:e7:a6:b9:33:8b:
                    24:e9:83:0a:3b:50:1d:5b:2f:f5:27:a2:81:f7:df:
                    df:4c:30:93:71:20:d9:fc:e7:50:4a:64:59:57:bc:
                    fb:b7:d1:30:c4:40:79:0e:12:a1:0e:7b:0b:51:96:
                    c1:b7:c9:22:d3:1b:e5:e1:e0:40:17:ba:06:48:f4:
                    17:a5:34:2d:de:a4:2e:5c:0e:b3:5e:e3:56:f4:61:
                    9d:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:DB:32:37:65:39:AB:62:39:E2:7F:16:D4:B0:D2:C8:AA:A7:29:89
            X509v3 Authority Key Identifier:
                keyid:AE:59:C7:1F:D6:3B:D2:6B:46:30:26:E0:74:90:46:97:04:A8:FB:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rlnHH9Y70mtGMCbgdJBGlwSo-5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914530B/A6A544E0B79A11EFA0D6975DC4F9AE02/rlnHH9Y70mtGMCbgdJBGlwSo-5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:0a:36:47:6f:50:cd:35:2b:12:bd:67:c9:76:c3:83:30:cf:
         26:76:94:2e:4a:99:df:14:09:b1:c0:cb:14:0f:7a:e0:b6:03:
         ad:74:1c:86:6a:bb:9c:4f:00:13:ad:31:7e:59:52:50:d4:85:
         32:74:04:f0:87:6b:20:75:e3:14:c5:b0:25:21:59:28:07:37:
         41:91:75:a0:77:91:6f:73:0f:65:5f:89:83:22:9c:46:80:05:
         6c:6e:a4:7a:b7:6b:b0:24:7d:9c:ee:f5:e6:90:b0:86:b8:1f:
         ec:8b:c5:9c:54:c6:36:07:3b:77:bf:20:ef:e5:71:45:f3:79:
         0a:84:51:1b:49:78:98:dc:82:a9:c2:69:3a:b6:12:b9:3b:c0:
         dd:12:bd:d2:47:b2:e6:c2:25:85:ff:f2:ad:7e:67:2b:f4:71:
         39:3d:f9:4b:ec:70:97:be:7f:de:98:da:01:64:24:8b:bd:c8:
         bc:7f:1d:36:14:79:bf:b2:76:80:75:8a:0b:7c:47:e7:31:fd:
         53:45:4c:3f:22:4e:c4:7e:a0:48:0e:73:6f:3e:19:69:d2:f5:
         80:c8:9e:89:a7:31:f0:b3:51:bf:34:9b:48:31:2a:a4:25:00:
         e1:47:eb:5f:53:41:11:c5:e2:e5:f4:c5:de:b6:5d:01:82:66:
         06:81:b6:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 13:03:06 2026 by rpki-client