Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
File:                     MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft (raw, json)
Hash identifier:          NouIredFf7WU3GiHZR1cbE4o4Yuto538eFzuVM/BJ40=
Subject key identifier:   DA:76:53:25:78:58:6D:F3:C4:8D:6B:F0:2C:78:FE:47:C3:D1:14:3D
Authority key identifier: 31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E
Certificate issuer:       /CN=A91883D3/serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
Certificate serial:       0139
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
Manifest number:          0139
Signing time:             Fri 17 Apr 2026 05:06:26 +0000
Manifest this update:     Fri 17 Apr 2026 05:06:25 +0000
Manifest next update:     Fri 24 Apr 2026 05:06:25 +0000
Files and hashes:         1: MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl (hash: yBgiWUGqx29mBXyFoQ7mt1lJU3BTcXrCFokSUZTRRP8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl
                          rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:06:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91883D3, serialNumber=317A727FF63E27C29CC01CB67993E2C61F08041E
        Validity
            Not Before: Apr 17 05:06:25 2026 GMT
            Not After : Apr 24 05:06:25 2026 GMT
        Subject: CN=69e1bfd2-0d56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:92:3f:8b:0b:7f:70:db:ce:05:dd:9b:44:af:
                    85:80:f6:7d:d2:28:a8:a4:b2:db:9c:f6:cf:9d:35:
                    8e:c3:68:bc:8c:d2:3f:76:e6:82:5e:86:c9:18:c8:
                    9d:80:8c:d1:af:cb:4f:6a:e1:9f:54:c0:a2:35:69:
                    9d:1b:b3:74:37:4e:0c:2a:a9:38:9c:e9:1e:d9:84:
                    a7:4a:1c:2c:ca:b9:45:27:1c:64:f8:fb:35:b7:ac:
                    75:a5:89:66:78:9d:47:96:d1:96:da:63:75:84:7f:
                    83:d3:b1:4f:54:eb:04:41:3a:f6:5f:61:39:10:66:
                    2b:a1:98:42:fd:43:bd:44:e2:28:12:3f:3e:44:4c:
                    07:8d:70:f4:00:4b:a3:fc:24:56:e7:93:6a:c5:2c:
                    79:09:64:30:9f:79:35:85:46:c2:1b:c5:6b:45:ae:
                    ac:78:a8:6b:fe:34:51:0e:0c:72:81:ea:6f:bd:1d:
                    b3:88:3e:b5:9a:c4:75:21:b3:35:ff:5e:82:b4:41:
                    a6:f0:ac:c8:28:08:b5:cb:03:5f:c9:b8:94:94:68:
                    2d:0b:bb:a2:63:fe:75:76:c4:c1:36:58:82:3d:8c:
                    79:61:2d:a2:c4:10:2f:87:b0:3a:9f:e5:13:52:17:
                    f0:db:68:76:66:9f:45:d1:4a:e4:ac:1a:5c:08:8c:
                    63:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:76:53:25:78:58:6D:F3:C4:8D:6B:F0:2C:78:FE:47:C3:D1:14:3D
            X509v3 Authority Key Identifier:
                keyid:31:7A:72:7F:F6:3E:27:C2:9C:C0:1C:B6:79:93:E2:C6:1F:08:04:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MXpyf_Y-J8KcwBy2eZPixh8IBB4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91883D3/957601685E3611EFAC92D314C4F9AE02/MXpyf_Y-J8KcwBy2eZPixh8IBB4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:19:d4:84:9c:4e:fc:26:b9:80:6d:d9:6b:dc:0a:46:31:22:
         f8:01:dd:13:74:77:a2:f3:c0:48:57:ea:67:c4:2f:26:16:58:
         8e:7f:f4:09:08:79:c4:9b:0b:f3:e0:ef:f4:46:cf:f8:cc:b1:
         dd:47:27:95:3d:3e:c5:40:2a:c5:57:83:86:ca:73:91:9d:57:
         c1:4c:e6:69:c7:dd:c2:9f:74:f3:d2:27:12:b8:5f:13:25:e7:
         0e:cf:c5:22:f0:b9:8c:5b:59:4f:4d:9b:ad:9d:f9:ed:26:02:
         e4:c1:5d:65:0e:d5:81:e7:9b:a2:44:6b:6b:52:43:22:ec:64:
         f7:03:3a:ec:fb:da:26:6b:d5:38:04:26:40:f0:5c:38:5c:05:
         8c:01:71:90:3a:dc:d4:39:89:5b:6b:ee:36:8f:18:bb:d9:80:
         43:d4:ea:fb:08:04:47:00:ff:c1:28:94:2a:21:e9:8d:2d:6b:
         73:df:b7:99:cc:9d:a7:cd:d7:b1:9e:a3:a1:6f:6d:88:15:66:
         8b:26:bc:39:96:94:7a:3d:49:e3:69:19:1d:fa:45:71:6c:e4:
         9c:97:88:0f:6c:43:ed:ff:ea:89:7c:59:10:1a:1d:2e:6b:44:
         15:7e:4a:e8:fb:19:3a:ce:dd:f2:20:ef:ed:15:ed:d3:33:e8:
         72:76:75:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:37:21 2026 by rpki-client