Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File:                     3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier:          jN8E9PzBG6zXRnwFGA477OAEyLqjZqE4iBuwO5Hc3Ys=
Subject key identifier:   17:D4:8A:1F:AD:73:AE:4C:D6:00:47:6D:FD:6F:0E:35:7F:14:B5:8D
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer:       /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial:       08B2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number:          0982
Signing time:             Thu 16 Apr 2026 20:25:42 +0000
Manifest this update:     Thu 16 Apr 2026 20:25:42 +0000
Manifest next update:     Thu 23 Apr 2026 20:25:42 +0000
Files and hashes:         1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: rrLNtKupNsuN7Q1jYOaPo52v7H3iW1m7IAJLr/IX9Dg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:25:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2226 (0x8b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
        Validity
            Not Before: Apr 16 20:25:42 2026 GMT
            Not After : Apr 23 20:25:42 2026 GMT
        Subject: CN=69e145c6-42b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:75:44:e0:fb:5f:e4:b5:9b:74:22:3c:69:8c:
                    b1:a8:b8:76:cf:89:88:dd:48:5a:d3:c4:03:7f:59:
                    47:02:df:fe:d7:2e:8a:31:f8:95:b0:54:9a:b7:04:
                    03:35:51:aa:8e:fd:26:28:e9:0d:d0:c5:51:bd:63:
                    fa:b3:e1:1e:40:9d:a6:9c:85:32:b5:12:2e:6a:d3:
                    72:7b:52:92:ca:2e:dc:d2:d3:6b:a8:ec:eb:69:73:
                    47:93:56:f3:43:17:18:72:bb:e6:eb:13:30:07:57:
                    43:76:dd:22:b8:a9:5a:1e:8c:57:98:6b:97:79:3e:
                    85:76:24:39:6e:9e:18:83:11:5b:44:87:02:80:82:
                    fa:9f:31:fa:bd:20:fb:cb:fe:e5:6e:60:31:0f:85:
                    ee:65:f2:b1:8a:af:c9:20:aa:89:79:5f:bf:8f:b8:
                    ed:26:88:23:cb:3c:50:62:6c:e7:6d:88:a8:27:00:
                    10:b2:fb:28:d2:4c:63:1f:e7:84:c9:ad:6a:e1:03:
                    8a:3a:be:d6:39:91:a4:3c:3d:c9:8e:ca:f1:8b:63:
                    4a:33:dd:62:dd:95:0c:17:f1:ef:ec:7c:04:98:57:
                    c9:4c:58:37:5b:20:1c:6f:6f:92:65:96:d9:74:68:
                    95:64:3e:24:4a:53:67:6d:03:6c:a2:ea:b3:44:16:
                    85:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:D4:8A:1F:AD:73:AE:4C:D6:00:47:6D:FD:6F:0E:35:7F:14:B5:8D
            X509v3 Authority Key Identifier:
                keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:a7:30:89:cd:5e:bb:4c:dc:81:d8:57:b1:16:64:6b:7a:b4:
         c1:a5:9b:33:4f:2b:f4:18:13:6d:c8:1d:c7:39:7c:36:50:22:
         eb:cd:23:ae:34:b2:03:d1:3c:b5:6c:ae:10:b7:92:e5:b6:50:
         3f:81:78:7d:e8:17:96:cd:ee:2d:32:61:bc:c2:31:6c:94:66:
         f0:28:aa:68:9b:e2:fa:20:0d:d1:99:25:50:f2:91:c4:a1:8d:
         c0:26:14:e0:33:d6:c2:48:d0:63:7e:da:c5:4f:d9:da:99:e6:
         db:92:02:c4:9b:28:97:da:78:a3:53:19:ea:de:8b:df:d1:98:
         67:f9:6c:ae:d2:e6:df:39:cf:de:60:89:30:50:60:7a:eb:65:
         93:0d:ff:29:f9:ce:4a:ba:a0:48:88:f8:29:2c:44:42:72:9f:
         af:8c:7e:a4:cc:13:94:7f:67:11:a5:62:ae:ed:cc:74:9a:da:
         3a:f4:92:90:cc:25:ba:ba:25:fe:83:5b:48:db:e8:e2:3b:37:
         14:4f:be:98:b4:53:bd:5d:0a:70:cb:83:a2:c3:0b:98:8c:29:
         c5:5b:5c:5d:05:f9:93:e5:39:8c:dc:18:61:d1:a9:96:ab:93:
         fb:cb:5a:a7:c6:95:0b:5f:57:f6:73:6f:55:4c:d7:d1:40:97:
         38:84:bc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:34:44 2026 by rpki-client