Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File:                     tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier:          X4Ka5dz1ryJZ7O0/fC3Javymp20/LvxZ1stKaovi+yc=
Subject key identifier:   7C:DF:3D:2D:AE:4A:46:0C:F4:92:52:D1:76:7B:B8:40:2D:AB:CC:51
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer:       /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number:          5B
Signing time:             Wed 15 Apr 2026 07:40:02 +0000
Manifest this update:     Wed 15 Apr 2026 07:40:02 +0000
Manifest next update:     Wed 22 Apr 2026 07:40:02 +0000
Files and hashes:         1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: JusHzmU+kuGiTXjdux8UdzM39UA6/zD2745AWpnIngw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:40:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
        Validity
            Not Before: Apr 15 07:40:02 2026 GMT
            Not After : Apr 22 07:40:02 2026 GMT
        Subject: CN=69df40d2-81c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:fd:85:dc:6a:83:31:20:1e:f1:93:ad:59:30:
                    db:dc:53:7b:11:be:44:2a:55:15:fc:9a:ef:a2:2e:
                    9c:e0:bd:43:27:3a:83:07:00:1b:86:d7:ac:a3:15:
                    bd:e5:50:56:8f:d1:72:bf:c3:fe:14:73:cc:dd:a4:
                    19:cf:91:f0:c7:cb:fb:f3:fc:13:b8:fa:85:54:cf:
                    51:54:c7:cf:24:b3:9e:2d:78:ab:5c:d9:e7:ea:3f:
                    4e:d3:06:af:83:75:c5:fd:08:e7:e1:3a:c9:cc:bd:
                    a0:36:ff:9c:0a:0a:f2:62:a1:d1:a7:05:69:74:4a:
                    7d:ea:c6:bd:56:d0:9a:a9:b3:6e:15:a0:a6:00:05:
                    cd:f2:a6:35:e3:bf:6b:a3:bc:b5:57:a9:62:ae:4b:
                    2c:1d:1f:57:95:8f:22:33:a4:24:b1:7d:ff:d5:8d:
                    6b:30:94:82:ca:2d:bc:6c:84:ce:cd:37:e3:4f:ec:
                    6c:b8:be:2d:b7:5b:c0:76:23:b2:8f:17:49:59:3e:
                    0f:52:2f:23:58:9e:a8:e6:57:32:39:d9:a9:77:28:
                    ce:cd:2a:fc:39:dc:16:1d:f2:5d:2c:42:b5:6b:4a:
                    eb:0b:15:f2:d3:d0:df:7b:bf:e3:e9:e7:7d:e8:11:
                    8b:c3:53:d6:95:db:62:1b:fd:f8:ec:94:15:46:0e:
                    e4:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:DF:3D:2D:AE:4A:46:0C:F4:92:52:D1:76:7B:B8:40:2D:AB:CC:51
            X509v3 Authority Key Identifier:
                keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:f5:7f:e6:b8:e1:ec:5c:a8:0f:e2:6e:d1:c5:9b:f9:d9:5a:
         09:07:61:92:bc:83:48:cb:8f:af:38:77:cd:f0:29:36:67:2c:
         04:e6:1e:87:fd:4c:b1:97:6a:c0:d4:7e:a5:51:86:d9:1f:01:
         7d:77:f1:94:c9:aa:48:b8:67:a3:95:13:c1:d7:5b:2f:bb:a9:
         98:a4:8c:66:a1:71:8b:39:c7:37:23:0d:de:b6:d7:8c:3b:96:
         00:13:04:87:97:c9:ca:c5:86:09:da:ab:1f:ef:c3:7a:49:ba:
         8b:9b:b6:88:bd:13:ec:4c:ee:c9:d2:b8:4c:af:cf:7b:37:ea:
         49:ad:02:42:45:74:08:79:8e:16:f4:94:d6:0b:70:37:3a:95:
         0b:51:14:ef:8b:0c:e5:ee:9e:ae:a6:79:22:e2:07:ae:60:df:
         68:56:c0:71:8c:b1:dc:08:59:d6:56:c7:1e:0c:8d:d3:f1:0e:
         35:0f:b7:98:1c:24:a9:25:e1:60:dc:3e:99:f5:a8:4f:69:7a:
         f9:16:85:0d:ac:89:f0:6d:05:f5:3f:05:be:20:71:68:17:aa:
         c0:9a:69:ee:62:e8:70:f9:40:50:ba:13:9e:69:62:9b:fa:0a:
         7a:d2:44:b9:a3:f4:0f:69:c3:6b:a4:38:70:58:e4:ef:fb:d5:
         0c:25:e9:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 08:04:31 2026 by rpki-client