Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
File:                     4BlKpTtYIbm9DFx7g1K7E4GFP50.mft (raw, json)
Hash identifier:          kPsOSqFRXlaUwHUQv9CWsGlDhrtiNeT+bv3325mj7CE=
Subject key identifier:   16:BD:D4:EB:56:2F:04:57:A6:52:13:10:71:83:19:ED:AE:89:EA:43
Authority key identifier: E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D
Certificate issuer:       /CN=A914E0B6/serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
Certificate serial:       01A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
Manifest number:          01A2
Signing time:             Sun 19 Apr 2026 03:52:34 +0000
Manifest this update:     Sun 19 Apr 2026 03:52:33 +0000
Manifest next update:     Sun 26 Apr 2026 03:52:33 +0000
Files and hashes:         1: 4BlKpTtYIbm9DFx7g1K7E4GFP50.crl (hash: QyBP0bj97KFkqqulYo009PtVwlSY6BfUTnHO9DfmaI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl
                          rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 03:52:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E0B6, serialNumber=E0194AA53B5821B9BD0C5C7B8352BB1381853F9D
        Validity
            Not Before: Apr 19 03:52:33 2026 GMT
            Not After : Apr 26 03:52:33 2026 GMT
        Subject: CN=69e45182-fbf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:ff:a2:ce:81:d4:94:ff:06:22:72:73:98:
                    c2:56:18:9e:a7:de:64:8b:19:ca:ce:78:97:bd:bf:
                    3e:53:9a:b3:37:de:11:df:e4:e6:b5:c7:6d:ea:39:
                    fd:54:02:fe:5b:cb:b6:89:44:52:e6:8d:35:70:1f:
                    5e:9d:46:a3:49:1d:33:9c:bc:3a:6e:9b:4f:78:1a:
                    3b:1b:75:c3:17:e8:fe:89:db:de:2e:a6:16:ef:6e:
                    21:72:23:13:fb:2d:ad:51:40:aa:b6:0d:c0:2f:bb:
                    ad:ec:e6:57:83:01:88:02:d5:a7:52:03:37:fc:5d:
                    b7:96:a3:16:c2:53:78:e8:e2:f7:b8:bb:6d:27:fb:
                    6e:b1:2f:7d:39:6d:29:ff:25:5d:40:fe:c3:b4:19:
                    42:96:2e:cc:cb:95:c6:fa:6f:0f:a6:a1:8a:ef:3f:
                    b8:8a:db:09:a2:e9:20:5a:c0:2b:5b:2e:4c:45:d2:
                    c1:cf:22:93:e3:59:0e:51:1a:40:ac:04:2b:b2:34:
                    4f:c6:b9:20:81:4e:00:f7:9f:7b:49:ca:16:f3:94:
                    29:bf:a3:83:e1:78:20:58:c8:2d:02:bb:15:84:42:
                    d1:05:d3:94:08:85:3b:e8:05:6e:b8:26:a1:f9:4b:
                    16:d1:bb:39:10:12:b2:8e:81:0f:ca:96:2a:7e:41:
                    a1:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BD:D4:EB:56:2F:04:57:A6:52:13:10:71:83:19:ED:AE:89:EA:43
            X509v3 Authority Key Identifier:
                keyid:E0:19:4A:A5:3B:58:21:B9:BD:0C:5C:7B:83:52:BB:13:81:85:3F:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4BlKpTtYIbm9DFx7g1K7E4GFP50.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E0B6/6956AE3EBF3011EEBE4F3C1EC4F9AE02/4BlKpTtYIbm9DFx7g1K7E4GFP50.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:36:cd:ba:6a:83:f9:05:1f:7c:a2:cc:97:db:ad:b2:cb:f6:
         d0:26:a0:ac:5b:94:37:8c:56:ba:6a:b4:ff:23:04:1c:94:0b:
         f9:6f:79:1d:6d:5b:02:b0:ea:85:02:aa:6a:4f:3c:d4:a9:c0:
         63:f0:c1:bb:d0:9f:d1:47:cd:19:4c:b8:a1:a2:82:ec:44:d6:
         48:f0:a1:ad:77:a4:97:19:f6:2c:ff:c1:96:4e:0f:8a:5b:27:
         aa:d2:af:61:ff:dc:ed:e8:5a:3e:d7:cc:42:ae:b4:7b:f5:50:
         53:f6:7d:d1:97:72:cc:99:76:4b:2e:14:3d:cc:4d:7f:35:cf:
         8f:2c:19:e7:11:63:d8:e6:54:92:a2:82:82:af:c6:90:30:46:
         bc:fb:fc:81:5e:76:d3:27:69:1d:a3:06:08:d5:a3:a2:a4:51:
         dd:d2:25:36:c9:96:ab:3d:7b:57:1b:f9:5c:7f:f8:7c:5a:c3:
         00:9c:27:9e:b1:7e:ba:d1:1c:ba:1f:90:70:e9:6a:8e:5d:04:
         3b:52:21:f8:fb:34:85:2f:0b:9b:1a:3d:0b:e2:e7:be:6e:39:
         99:7b:0e:c8:e0:15:b9:56:88:de:61:3d:eb:ad:ce:1d:1b:c5:
         4e:12:40:a2:ad:d1:b6:3f:4e:ef:ec:64:86:73:cf:3c:af:24:
         0b:c6:4f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:58:06 2026 by rpki-client