Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
File:                     IohtF2pzwL483ViJwqizI-O5QSw.mft (raw, json)
Hash identifier:          mO+Qzeqoq+u9mqVgfZy0Vv7nkcmZWlHuBncdhnQrl/8=
Subject key identifier:   11:50:1E:E6:56:F3:D1:40:55:BE:AF:C0:B4:95:AC:3D:BA:AB:01:A2
Authority key identifier: 22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C
Certificate issuer:       /CN=A91658EF/serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
Certificate serial:       15B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
Manifest number:          2D8C
Signing time:             Thu 16 Apr 2026 16:41:19 +0000
Manifest this update:     Thu 16 Apr 2026 16:41:18 +0000
Manifest next update:     Thu 23 Apr 2026 16:41:18 +0000
Files and hashes:         1: IohtF2pzwL483ViJwqizI-O5QSw.crl (hash: ESYBl3sIMRYkNjE33vUGnla1HaPkAg+1CwakxOYbeMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl
                          rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 16:41:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5556 (0x15b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91658EF, serialNumber=22886D176A73C0BE3CDD5889C2A8B323E3B9412C
        Validity
            Not Before: Apr 16 16:41:18 2026 GMT
            Not After : Apr 23 16:41:18 2026 GMT
        Subject: CN=69e1112e-b0d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:0f:dd:00:79:c6:ca:05:c6:b8:53:be:39:b5:
                    78:24:3c:a4:c3:80:29:62:65:44:a2:79:2b:54:24:
                    15:c2:a9:d8:93:6b:26:c1:97:73:7c:d6:04:3c:32:
                    13:6f:12:fd:85:6b:95:7c:3c:8e:f4:54:7b:e1:f2:
                    8e:f3:3d:98:88:04:56:96:94:0e:5a:96:20:12:98:
                    84:45:a2:38:92:6c:ef:c5:8d:7a:c1:8e:ed:f9:32:
                    29:df:47:66:6c:c3:cf:d0:fa:58:9b:1b:cd:6f:84:
                    55:c7:29:de:28:ec:12:05:9f:bb:e3:8d:82:3f:e5:
                    69:74:03:ff:a9:fa:18:2b:40:9d:18:6a:53:5e:2b:
                    e8:02:6f:d2:8f:c5:df:fc:c0:bb:ae:c6:55:2c:61:
                    89:4b:16:0c:d6:c8:32:de:4e:df:94:1b:43:d5:45:
                    3f:1a:e0:0b:fa:38:42:b8:4f:07:2a:bb:6d:32:73:
                    ac:ce:f5:e1:d5:8c:dc:fd:d9:27:74:46:03:2e:70:
                    73:4c:f6:79:76:74:81:77:4e:29:d4:0f:18:88:95:
                    40:ce:b3:78:4f:1c:9b:fa:80:3a:d0:b2:af:95:5e:
                    41:57:b2:4e:34:3f:b9:e0:8c:9e:36:0a:75:dc:86:
                    f2:a8:1f:a0:12:eb:e0:f7:7c:62:e4:b9:69:28:d6:
                    9c:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:50:1E:E6:56:F3:D1:40:55:BE:AF:C0:B4:95:AC:3D:BA:AB:01:A2
            X509v3 Authority Key Identifier:
                keyid:22:88:6D:17:6A:73:C0:BE:3C:DD:58:89:C2:A8:B3:23:E3:B9:41:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/IohtF2pzwL483ViJwqizI-O5QSw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91658EF/D24337964AEC11E88417F34AC4F9AE02/IohtF2pzwL483ViJwqizI-O5QSw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:fa:f5:de:5d:30:c3:46:7d:c6:3c:27:25:34:a2:c7:e2:88:
         86:7f:09:ca:55:4f:32:2b:51:5c:6e:a0:16:4e:39:bd:ed:e6:
         dc:4d:d9:63:29:4c:ed:28:b7:9e:0a:da:6b:37:54:5e:c8:ac:
         c7:ec:51:86:32:95:c0:47:08:c7:b2:ae:8e:eb:ab:52:2b:a9:
         18:36:ea:e5:55:61:01:76:9b:06:bb:2c:a7:6e:59:74:d8:ba:
         a6:9f:f2:4c:13:9d:d5:13:5a:d5:49:16:af:1b:c7:3f:4a:b4:
         7f:67:2e:35:ef:a2:56:7b:5d:24:2a:f0:65:f0:08:c8:34:7e:
         fc:0e:95:f8:f9:6e:55:8b:be:68:8f:a7:7e:21:72:42:7b:ca:
         77:39:bc:42:22:5f:68:0e:f6:fd:ea:3b:a2:16:6f:78:db:56:
         c1:a6:ae:94:e6:64:bd:ea:26:15:2b:92:4d:42:54:24:a5:6d:
         43:0d:d5:80:09:33:09:35:46:b0:94:0f:42:a7:b0:fd:32:45:
         12:47:94:45:6a:4a:3a:66:ea:ce:67:ef:f1:93:0d:0a:b0:8b:
         10:af:a8:f8:ea:e8:3b:a5:8c:54:77:cc:ae:e4:8b:5a:bb:98:
         87:d7:d0:b9:fc:9b:bd:0b:bc:85:93:84:84:75:53:a0:b4:b7:
         08:60:a5:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:42:57 2026 by rpki-client