Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
File:                     5MpluNDHsWXZwip6vfgapm-q1NE.mft (raw, json)
Hash identifier:          ntjS/KWi9ATq4kN9Ea7DEDKslBSkGrUTC4unm0LrjRQ=
Subject key identifier:   4F:FE:B2:BB:35:F7:55:FE:FB:D9:5F:68:AD:78:2D:4F:61:7B:14:48
Authority key identifier: E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1
Certificate issuer:       /CN=A915EAAF/serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1
Certificate serial:       352C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
Manifest number:          352C
Signing time:             Thu 16 Apr 2026 14:39:40 +0000
Manifest this update:     Thu 16 Apr 2026 14:39:40 +0000
Manifest next update:     Thu 23 Apr 2026 14:39:40 +0000
Files and hashes:         1: 5MpluNDHsWXZwip6vfgapm-q1NE.crl (hash: q9bEcbHrxIm/NbhLjwxvRvWGWC95nyUMlDJPAutN5Bw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl
                          rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:39:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13612 (0x352c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EAAF, serialNumber=E4CA65B8D0C7B165D9C22A7ABDF81AA66FAAD4D1
        Validity
            Not Before: Apr 16 14:39:40 2026 GMT
            Not After : Apr 23 14:39:40 2026 GMT
        Subject: CN=69e0f4ac-32a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:a6:68:85:e3:c2:f4:ea:69:52:e5:40:b8:
                    24:46:c3:02:d2:15:9e:2c:55:2b:ad:38:f1:ee:10:
                    29:0c:fc:f8:5c:6c:16:5d:95:58:56:74:f7:86:56:
                    12:04:08:2a:82:0d:9f:23:49:47:52:cc:e0:e3:0b:
                    17:85:3b:77:df:ba:8d:c1:f3:81:74:e5:01:52:92:
                    dc:b2:e0:22:38:5d:db:e3:9f:a9:aa:2d:de:f5:01:
                    85:d4:e8:a3:1f:a9:ee:cb:48:bb:e5:99:3d:fe:d7:
                    ce:ba:86:1d:34:08:7b:76:28:36:27:e9:2b:3e:0d:
                    41:48:e7:e3:55:97:11:8b:6e:80:b7:33:1f:34:96:
                    37:68:9c:0f:d1:f4:95:06:a1:60:bc:ba:98:b1:62:
                    37:d8:2c:2f:b8:c4:97:28:d1:02:24:f7:9e:f5:dc:
                    23:8b:48:19:26:7f:6a:4b:ef:8d:38:c0:df:7c:ab:
                    df:ef:f2:c0:a9:4e:51:c2:93:c2:3e:d2:cc:a0:07:
                    9c:42:ce:f4:0d:fa:27:ad:20:c5:42:b4:1b:c1:aa:
                    2f:15:9c:fe:d4:ca:d2:80:8d:bb:12:ee:ed:45:dd:
                    01:f2:14:09:f0:b0:77:cb:35:36:f1:b1:c3:79:fd:
                    44:bf:4b:3d:f2:df:bc:f2:a7:00:e3:14:69:4c:6d:
                    bb:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:FE:B2:BB:35:F7:55:FE:FB:D9:5F:68:AD:78:2D:4F:61:7B:14:48
            X509v3 Authority Key Identifier:
                keyid:E4:CA:65:B8:D0:C7:B1:65:D9:C2:2A:7A:BD:F8:1A:A6:6F:AA:D4:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5MpluNDHsWXZwip6vfgapm-q1NE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EAAF/F3F18B2C1D8E11E2A314A2ED08B02CD2/5MpluNDHsWXZwip6vfgapm-q1NE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:f1:53:4e:5f:a3:0f:aa:0a:18:d5:21:b8:e5:ef:e6:7d:60:
         09:77:59:ab:81:ae:12:f8:cf:f8:b5:ff:51:6f:f2:ee:b4:ed:
         44:62:64:d1:9f:bf:6d:81:2e:fa:c8:b5:44:34:28:d1:74:30:
         b4:8a:84:e0:a4:77:03:15:2c:c9:7f:16:2f:06:84:fc:cf:4d:
         bc:8b:74:b4:f3:0e:2e:ee:dd:9f:9b:07:8e:98:00:ab:27:80:
         44:f1:e5:34:7d:71:a5:bf:5f:57:4a:7f:f8:fa:67:a9:70:aa:
         57:33:3f:80:97:26:57:b6:df:77:62:85:5e:29:04:eb:9e:a1:
         60:85:42:59:cc:db:37:c2:f4:fd:d1:66:55:22:54:99:56:a3:
         e3:47:ce:9c:39:34:81:09:3d:77:5e:6b:9f:f4:75:4c:94:20:
         b0:0a:01:5a:1f:86:46:06:4e:b0:54:0b:1d:bf:3e:5b:46:2d:
         e2:d6:18:e7:b2:cb:c5:a3:02:81:0c:07:b1:4f:cc:20:e1:4d:
         2e:08:b8:ac:24:57:4b:07:aa:5e:b5:3b:65:67:b8:56:48:0e:
         cc:97:10:46:ea:21:4c:ba:ba:82:74:42:8e:43:2e:c0:7c:62:
         fe:e8:23:32:cb:9d:ed:36:40:51:dc:2e:4e:e1:f6:d1:9c:5a:
         74:ab:a4:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:49:37 2026 by rpki-client