Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File:                     znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier:          3AZUTKejftWWnjnbLzaaYrdNYYbwBrOm+hSO+Cnthho=
Subject key identifier:   B5:2D:87:FC:1D:64:E5:AD:5F:BC:08:73:C5:50:45:B6:F3:FB:8D:F8
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer:       /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial:       74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number:          74
Signing time:             Fri 17 Apr 2026 07:30:43 +0000
Manifest this update:     Fri 17 Apr 2026 07:30:43 +0000
Manifest next update:     Fri 24 Apr 2026 07:30:43 +0000
Files and hashes:         1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: 97f3DFo63c8xovsKeJ3y1MJzkodZwdKRY5y93KIv2m4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:30:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
        Validity
            Not Before: Apr 17 07:30:43 2026 GMT
            Not After : Apr 24 07:30:43 2026 GMT
        Subject: CN=69e1e1a3-0575
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:24:38:fe:ac:52:ee:9e:f2:77:1f:9a:0b:03:
                    c8:7b:86:0d:c9:9a:51:97:41:e5:8c:d0:a1:18:37:
                    41:dd:64:41:f9:bc:4d:f2:e8:0d:9e:de:c1:6d:4a:
                    0a:de:66:e3:ae:95:e1:38:7b:1c:eb:29:7a:81:9e:
                    ba:58:95:f3:23:e6:89:03:db:20:72:dd:23:00:03:
                    e7:ca:69:4e:c5:90:42:0a:c7:6d:5f:90:81:e9:4f:
                    23:a4:62:92:0d:c0:b1:df:75:9e:47:3b:8e:16:31:
                    e6:98:26:11:89:15:8c:ff:d8:ae:07:ea:4a:17:b8:
                    fc:5f:4a:fd:b6:95:6c:32:8a:ab:98:a6:49:57:4c:
                    df:c8:e8:a1:77:50:6c:ca:8a:04:f4:99:43:65:35:
                    01:12:57:35:55:17:59:50:e5:ff:30:7d:3a:a9:f6:
                    ad:a6:2c:8d:60:40:2e:b2:76:38:0d:f8:af:dc:f5:
                    32:4b:c6:7a:14:91:27:c4:ef:34:c8:ae:61:bb:17:
                    8b:48:ca:6b:bb:d8:0d:d8:e4:e9:ba:fd:10:d3:ca:
                    50:21:bd:a5:9a:5d:d0:5e:92:4d:19:06:a8:62:c8:
                    02:d0:b6:55:53:4f:79:51:21:77:ca:0b:e3:75:cc:
                    20:a7:8e:e5:30:c0:82:b1:58:a1:f3:18:a3:2a:18:
                    fe:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:2D:87:FC:1D:64:E5:AD:5F:BC:08:73:C5:50:45:B6:F3:FB:8D:F8
            X509v3 Authority Key Identifier:
                keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:39:44:19:6f:4f:33:44:9d:96:c7:8d:76:8a:b7:23:cc:c7:
         84:13:7f:1d:b9:81:e9:f6:93:58:da:2d:02:fb:86:09:b0:e5:
         40:f3:59:a7:13:a2:11:9e:09:fa:3b:80:01:e2:95:31:07:c5:
         83:4e:68:20:05:4f:f7:09:7b:79:b2:f4:ad:d6:ee:0a:3b:20:
         c2:d9:40:fd:fd:9f:42:8d:eb:15:03:e0:c5:37:f8:6f:55:aa:
         0d:8e:12:96:81:17:7e:23:83:dc:d4:99:88:1f:fd:b8:db:95:
         18:b0:31:8f:56:6b:5b:af:88:79:83:0c:86:0a:e8:f2:57:e5:
         c5:f6:ee:0c:5c:73:05:e9:41:d7:3b:ed:ff:d2:1f:d6:d2:6b:
         45:14:b3:d8:db:64:28:07:21:ed:f0:b7:f6:a1:40:c1:b7:d5:
         64:70:bc:15:d6:44:99:b3:f1:c3:3a:95:87:c2:5e:9a:04:5c:
         f1:c7:92:02:9a:04:95:65:e4:33:89:94:0a:f4:71:42:54:c3:
         ef:9b:f0:52:7c:d8:60:8c:a9:2d:77:cb:b8:51:ba:0a:e5:72:
         7e:a4:90:b2:75:ac:8a:db:55:8a:0b:84:87:54:67:bd:dd:23:
         bd:e5:af:d9:3b:8f:2e:04:a1:7d:d6:84:6b:f8:69:31:76:a3:
         56:a3:09:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:40:09 2026 by rpki-client