Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
File:                     1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft (raw, json)
Hash identifier:          eCCG5Cb5ARzqTvIHmZi52iq/e+g3a179Z/YFbOKdv1M=
Subject key identifier:   DB:C1:73:B3:62:34:2E:8C:D4:B5:21:68:61:C4:88:25:19:1F:34:DB
Authority key identifier: D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC
Certificate issuer:       /CN=A9171996/serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
Certificate serial:       5D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
Manifest number:          5D
Signing time:             Wed 15 Apr 2026 07:37:08 +0000
Manifest this update:     Wed 15 Apr 2026 07:37:07 +0000
Manifest next update:     Wed 22 Apr 2026 07:37:07 +0000
Files and hashes:         1: 1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl (hash: YkPZk8l1VeiJjWIMyx2b22c7e8FcSSI6WXxIaMc42Lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl
                          rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 22 Apr 2026 07:37:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9171996, serialNumber=D6A602934ACBE414B349A01569EBB6661E54A2BC
        Validity
            Not Before: Apr 15 07:37:07 2026 GMT
            Not After : Apr 22 07:37:07 2026 GMT
        Subject: CN=69df4024-ef36
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:01:e3:47:e8:87:b0:3f:4a:ee:ee:d1:32:
                    ff:22:7b:64:a2:5a:59:35:4f:93:a0:fb:49:fe:d0:
                    c5:c6:fd:2a:85:9d:83:2f:d9:26:05:2f:44:c1:e4:
                    24:b9:a3:29:52:5d:71:f4:52:cc:67:31:04:83:12:
                    6e:fb:6a:55:ed:65:b0:04:b2:17:d9:1d:e8:a1:98:
                    80:13:b1:92:98:1b:c5:18:f5:c6:86:42:c3:a6:10:
                    36:d9:00:d6:e4:2f:1d:a8:59:2c:6e:a3:16:68:ba:
                    a7:67:02:f8:c3:15:8b:de:a1:18:cb:a7:ee:79:1c:
                    1c:6d:34:0f:86:cf:17:90:9c:8b:97:8c:ed:ca:6f:
                    4f:11:66:35:9a:e1:e7:28:ba:a0:45:fc:76:7a:7e:
                    7f:04:e4:e0:72:4b:1b:be:c8:f6:5c:42:1a:74:87:
                    44:4e:ae:1c:71:bd:2d:21:e7:f1:aa:2e:df:5d:4a:
                    d8:94:28:de:e4:83:d1:51:7e:43:f9:10:23:0e:a3:
                    d7:2d:e3:da:f5:8b:da:39:c7:91:dd:c6:e4:ec:7e:
                    5e:f6:69:5b:ba:36:13:aa:20:42:71:47:00:26:ed:
                    89:3f:15:86:f1:8a:24:4f:33:b4:c8:d7:87:0a:69:
                    c9:2b:9e:71:81:e1:33:fa:42:ed:83:3f:88:b6:8b:
                    bb:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:C1:73:B3:62:34:2E:8C:D4:B5:21:68:61:C4:88:25:19:1F:34:DB
            X509v3 Authority Key Identifier:
                keyid:D6:A6:02:93:4A:CB:E4:14:B3:49:A0:15:69:EB:B6:66:1E:54:A2:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9171996/B8CD734EAE6711F0B534F626C4F9AE02/1qYCk0rL5BSzSaAVaeu2Zh5Uorw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:1a:ba:43:fd:14:cc:86:5f:88:df:47:25:30:56:a2:bd:b4:
         10:71:35:52:e8:b6:7d:89:07:f1:24:d8:7f:b9:2e:f6:86:e4:
         0c:83:8b:26:33:52:7b:d6:22:b4:1f:53:d5:3c:56:23:d0:69:
         ff:00:57:8c:e3:14:a0:74:ad:ee:e4:df:44:84:33:c4:94:ac:
         00:32:ce:dd:b8:81:d0:2d:a3:a6:d7:eb:0d:d9:ac:88:ff:5a:
         bd:23:d8:42:02:ce:6e:2e:d3:3e:26:b0:58:82:81:64:83:03:
         9a:0b:13:2c:ad:bb:1d:bf:60:c7:e2:c8:75:94:5e:f6:de:18:
         36:5b:55:54:a6:9b:55:a5:b1:bb:b0:79:2e:0b:b4:1f:2b:28:
         77:2a:a0:ba:80:cf:bc:86:31:c8:f3:fb:34:db:5c:3a:f4:0d:
         82:62:8d:e1:31:df:d9:17:c3:b2:01:b9:be:7e:4b:47:6b:be:
         ba:4c:46:32:4c:a6:0a:76:d1:bd:30:7d:e4:ce:14:9b:4b:af:
         a9:5b:cc:47:b9:76:bd:95:9d:5b:a9:d7:9b:45:9b:39:bc:48:
         ef:50:14:3e:6f:68:bd:15:33:06:a8:20:07:bf:2a:74:1d:75:
         c8:c4:46:c5:92:1d:1a:5f:95:2e:6f:d3:01:b4:56:38:4a:03:
         74:05:93:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:23:41 2026 by rpki-client