Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File:                     MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier:          kkI+UawTRsLf1nB8T9pENqyk44lmVAtdPlotPPgE6w0=
Subject key identifier:   D3:23:0B:BF:61:55:8E:8B:22:41:62:25:2B:13:86:43:FC:CB:BC:33
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer:       /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial:       3530
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number:          3530
Signing time:             Thu 16 Apr 2026 14:34:23 +0000
Manifest this update:     Thu 16 Apr 2026 14:34:22 +0000
Manifest next update:     Thu 23 Apr 2026 14:34:22 +0000
Files and hashes:         1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 1gAA8mQo/EmJ0Kp/dTCU2EDdyyInq4NOl2G1U39pRSs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
                          rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:34:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13616 (0x3530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
        Validity
            Not Before: Apr 16 14:34:22 2026 GMT
            Not After : Apr 23 14:34:22 2026 GMT
        Subject: CN=69e0f36f-5704
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:61:f3:39:ff:00:dd:2d:a9:24:a4:59:ea:24:
                    ff:c8:be:68:ce:c5:8d:59:2c:7c:8b:c5:29:5e:e8:
                    ed:65:19:ae:17:7a:ed:3b:6c:0a:82:45:c6:41:75:
                    e8:c8:8d:30:f6:66:8e:eb:62:de:c7:06:23:0f:ec:
                    b4:54:58:18:86:8e:62:cd:49:b2:0f:2b:79:fe:34:
                    16:9c:8d:a9:e3:8d:c0:1e:6c:ab:7d:4c:25:0a:5e:
                    ff:7e:5c:c1:90:dd:22:0f:c8:b9:9b:93:3f:80:84:
                    d4:f6:b5:56:4b:26:c6:57:93:dc:d8:58:1b:4a:24:
                    a2:43:82:fb:93:94:f8:37:cf:31:61:93:4d:b2:fd:
                    26:d7:3d:a4:1d:d4:76:d4:c3:75:75:0b:2d:93:89:
                    55:ed:96:8f:f7:89:e0:7a:9f:cc:07:f6:ca:21:be:
                    e5:4f:1c:fa:87:47:cc:15:fe:76:a0:0b:a3:13:2e:
                    27:ff:e2:80:11:f7:5d:73:e6:a6:b1:93:fd:9f:3f:
                    a3:82:f8:66:91:9b:e4:a0:51:cd:0d:bc:f0:1e:12:
                    81:96:38:2b:6a:ca:93:76:26:51:fa:41:5b:e8:bf:
                    7d:46:fb:04:6c:d6:a5:98:19:fa:cd:9d:62:8d:67:
                    48:74:a6:16:a3:c5:b6:a2:31:72:b5:21:64:3c:eb:
                    ed:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:23:0B:BF:61:55:8E:8B:22:41:62:25:2B:13:86:43:FC:CB:BC:33
            X509v3 Authority Key Identifier:
                keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:99:30:2f:40:76:56:06:a9:57:61:6f:cc:f9:fa:7c:70:1c:
         b4:41:ac:c2:95:1b:8e:bc:b8:e1:ef:67:5a:88:e3:4d:e6:53:
         c2:e5:1d:4e:35:ef:dd:d4:10:82:0e:79:4b:62:7a:ed:02:0f:
         4a:ee:8a:f3:27:67:39:b9:46:c3:fd:8b:b4:b9:b4:a2:71:f4:
         57:3e:52:73:fe:0a:86:a8:f2:2a:4e:f5:4e:4b:f5:a7:0c:a4:
         2c:0c:28:da:fa:06:07:32:c1:b6:91:7e:07:9c:9a:02:ea:7c:
         a3:b2:e9:3c:07:b2:31:e8:4c:72:1e:3b:ff:46:50:2a:40:3e:
         6e:5e:00:17:2f:98:60:c1:19:97:7a:10:f4:f1:d9:b6:d9:b6:
         df:f8:2f:bd:32:5a:d3:8f:bb:f0:46:3f:bf:7d:6d:07:c6:e8:
         53:27:7c:92:31:7e:2d:37:62:88:0e:c8:60:29:f4:74:5c:07:
         6c:fd:44:31:ba:75:e0:bd:c7:cd:4e:35:23:90:81:bb:8c:c5:
         e0:d2:40:e5:aa:b2:45:5a:3c:e9:7c:c8:1a:3d:6e:a7:bc:ef:
         ff:de:df:55:a6:8f:85:b0:43:1b:74:87:a0:c2:ea:27:a8:4e:
         73:55:c1:b1:97:37:d4:1a:c1:22:dc:5b:51:fc:0a:7a:f4:60:
         ca:2b:92:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:29:09 2026 by rpki-client