Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
File:                     o4cCGCsJqmF468qrsvz42lSt61M.mft (raw, json)
Hash identifier:          YGSTz2SBGG4SZmTB8h6DrF++kkUqP39krnr1d8Sx7HM=
Subject key identifier:   A2:E8:C1:68:C9:1B:0D:57:2C:E8:EB:96:6F:07:00:F5:61:42:B6:68
Authority key identifier: A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53
Certificate issuer:       /CN=A91913D7/serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
Certificate serial:       49
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
Manifest number:          49
Signing time:             Fri 17 Apr 2026 08:02:45 +0000
Manifest this update:     Fri 17 Apr 2026 08:02:45 +0000
Manifest next update:     Fri 24 Apr 2026 08:02:45 +0000
Files and hashes:         1: o4cCGCsJqmF468qrsvz42lSt61M.crl (hash: VC+h5XGvREQKRKNXW0QMVNWqmOAHjDtaLcIjdDooD1s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl
                          rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 02:50:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91913D7, serialNumber=A38702182B09AA6178EBCAABB2FCF8DA54ADEB53
        Validity
            Not Before: Apr 17 08:02:45 2026 GMT
            Not After : Apr 24 08:02:45 2026 GMT
        Subject: CN=69e1e925-d61c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:fa:d7:ef:42:73:ce:04:e3:a9:ae:00:48:66:
                    06:77:c6:fa:63:5a:8b:92:09:e6:b2:0a:53:56:e1:
                    74:c6:10:20:d9:46:00:35:12:a3:6c:43:ab:8f:67:
                    eb:55:36:4f:47:48:41:af:7a:b1:12:22:7c:c2:b3:
                    2e:79:90:da:14:6b:d3:e5:d5:50:d0:74:9b:bf:6b:
                    89:54:3d:26:71:02:fa:5c:80:17:57:3a:79:7e:1c:
                    22:9a:53:85:fd:d5:1b:ea:f2:f1:c7:86:08:df:ee:
                    e6:26:be:f0:01:ba:6f:ad:22:8f:80:07:42:6a:ed:
                    ee:2f:7d:cc:8b:1a:eb:a5:d4:d8:bf:7f:08:a6:dd:
                    c3:be:9c:10:e5:c6:e1:12:65:4f:c4:fc:a2:45:bb:
                    97:5e:97:55:54:41:54:b7:37:fc:d9:3b:e1:8a:c8:
                    56:71:eb:9d:dc:71:4d:c5:34:16:9c:98:72:f6:d5:
                    da:4e:ed:b7:a4:06:99:24:5b:1f:3c:52:1a:24:ff:
                    1a:c2:b2:38:9b:fd:d4:02:29:10:61:0a:3f:7f:ae:
                    43:05:4d:cd:22:1c:45:bc:a1:93:ac:d3:9c:bf:d2:
                    34:0c:09:22:7f:cc:c6:3a:89:7b:5f:2c:7e:87:8f:
                    0d:eb:5e:51:d3:e7:9e:d4:89:c6:91:d2:b7:f7:40:
                    d2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E8:C1:68:C9:1B:0D:57:2C:E8:EB:96:6F:07:00:F5:61:42:B6:68
            X509v3 Authority Key Identifier:
                keyid:A3:87:02:18:2B:09:AA:61:78:EB:CA:AB:B2:FC:F8:DA:54:AD:EB:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o4cCGCsJqmF468qrsvz42lSt61M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91913D7/6FDC016CCE8A11F0B2A2D769C4F9AE02/o4cCGCsJqmF468qrsvz42lSt61M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:79:c6:53:dd:04:40:75:67:8c:f3:ca:3f:10:40:8c:3f:a4:
         ee:16:d0:f5:5c:43:4b:e5:15:92:e8:11:88:49:3a:2d:64:8c:
         1f:55:52:80:4d:ee:54:da:aa:1a:a9:47:94:bb:e6:77:a8:f0:
         3a:80:d9:ac:5a:17:3a:b1:23:8c:70:2c:c5:14:f8:ac:4b:3c:
         8d:36:b6:64:47:4f:9a:8f:09:b7:72:24:76:0b:90:11:fc:d1:
         26:0e:e7:13:20:e3:21:dc:c3:72:0f:fe:bd:d5:e2:c7:c1:ea:
         11:1c:5f:36:3b:68:59:4c:65:b8:86:60:9f:2e:6f:8d:1e:f5:
         c2:0d:fa:3f:41:d8:10:6b:87:ff:f9:6a:cd:1e:22:85:b3:50:
         56:7a:53:45:a4:9a:97:77:05:27:4f:ac:ab:43:33:69:61:5d:
         59:70:db:45:60:b5:d9:04:b6:46:8c:87:33:7f:3c:5f:3b:ea:
         7f:a9:a6:15:8e:0c:8e:e0:d7:4e:fe:af:d3:a9:5a:11:79:8f:
         b7:85:87:0f:53:eb:5d:58:f0:be:ae:33:71:9f:04:b8:75:14:
         15:14:16:b7:94:5b:49:2e:f3:4f:bc:e6:4e:eb:37:4f:8d:41:
         bf:02:40:c5:42:22:6b:75:41:2a:fb:9f:1f:9d:7c:99:64:0a:
         c4:df:8f:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:56:09 2026 by rpki-client