Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File:                     AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier:          71/NcMe+FUZXt6LvLvbS7JhJKfVz0dfA6WIN6fOk7kg=
Subject key identifier:   AE:28:CB:2A:BE:8D:B7:C9:9F:C2:9F:A5:C2:3F:1C:36:40:86:45:08
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer:       /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial:       352F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number:          352F
Signing time:             Thu 16 Apr 2026 15:09:10 +0000
Manifest this update:     Thu 16 Apr 2026 15:09:10 +0000
Manifest next update:     Thu 23 Apr 2026 15:09:10 +0000
Files and hashes:         1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: o/NdK9hUx5JMupyPu1+qoxuGqM6JS7lfDkES9i+uNvQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
                          rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13615 (0x352f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
        Validity
            Not Before: Apr 16 15:09:10 2026 GMT
            Not After : Apr 23 15:09:10 2026 GMT
        Subject: CN=69e0fb96-c602
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:14:90:55:5f:de:ab:76:0c:6f:29:b2:b8:46:
                    58:4c:46:3b:a0:e9:34:fb:af:ac:2d:7e:0a:fb:4b:
                    88:79:52:18:50:bc:f5:cc:c2:27:a3:8a:d9:59:39:
                    b3:2b:8e:a2:63:be:a2:02:39:03:f3:fe:fd:a1:2c:
                    d7:67:fe:67:22:5c:4b:6e:74:b4:ef:be:bb:32:a4:
                    b7:0b:8f:17:c3:1a:ad:6e:80:21:72:65:af:aa:cd:
                    56:12:33:0a:2d:7f:d3:d3:6c:51:e4:39:f8:d9:f2:
                    dd:4c:57:d0:a3:e1:ad:d8:ef:0b:55:c9:51:27:80:
                    59:8e:a2:6c:f2:fc:c0:94:8b:5c:86:ac:25:b2:47:
                    c0:d2:be:32:79:fd:04:be:a3:ee:c7:94:b8:06:60:
                    3e:90:72:2c:bc:66:38:85:21:62:93:13:bd:4b:c9:
                    a8:82:8f:be:f4:b6:a0:e7:ab:8f:45:53:d9:b5:f0:
                    75:74:8a:7a:2d:ca:88:83:39:e4:68:a3:2c:02:89:
                    08:f1:e6:cf:dc:0b:ca:36:42:05:be:69:87:23:a8:
                    fd:fb:9a:17:cc:b8:d1:d0:9d:73:a2:e4:4e:76:db:
                    47:1d:bd:09:95:fd:dc:df:04:0e:b7:5e:50:e3:f4:
                    9a:b7:fe:5c:c6:c0:af:b2:83:78:80:f4:2e:8d:47:
                    42:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:28:CB:2A:BE:8D:B7:C9:9F:C2:9F:A5:C2:3F:1C:36:40:86:45:08
            X509v3 Authority Key Identifier:
                keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:aa:ab:81:b7:3e:1f:a7:85:cc:cb:b0:92:dc:57:7c:a8:2b:
         df:df:c8:0f:23:ce:15:11:26:cb:d8:8e:2d:5d:b1:4e:7d:5e:
         b1:5a:82:da:33:8e:d2:01:7e:c7:0e:05:be:5e:a2:65:60:16:
         fb:86:76:73:98:39:11:50:59:2b:d8:53:ff:9e:ac:76:68:b6:
         17:67:bb:e0:31:b8:23:f5:2f:07:c1:04:ae:72:1a:5c:d9:5f:
         5f:78:2c:36:cf:6c:11:7b:fd:01:8c:b0:0e:5e:74:79:b3:03:
         88:e4:bd:a8:47:90:9b:b5:f7:79:47:11:bd:83:9c:05:c5:d4:
         2b:17:49:88:8a:3b:ac:63:86:f8:09:68:45:e5:08:d9:00:d1:
         52:8f:c0:55:2e:02:27:61:33:d0:a3:2c:75:cb:bc:50:aa:79:
         0b:0b:ee:39:ef:51:84:94:80:90:22:1f:b4:e0:6d:7a:be:8c:
         73:cf:7e:3a:bc:eb:54:34:d8:e2:87:4c:55:e3:d1:14:b4:c4:
         f3:41:06:e6:a0:8a:70:a6:c1:07:94:a4:fc:2c:b3:cc:00:90:
         6a:6d:97:db:19:0a:a5:27:1d:11:e9:16:14:9a:41:87:6f:80:
         a7:45:14:52:bc:bd:31:81:2d:78:01:5d:02:1c:47:19:1d:fe:
         a0:b9:ae:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:37:04 2026 by rpki-client