Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft
File:                     inZEBFIzrjjTDTW4JtlbLntDfZw.mft (raw, json)
Hash identifier:          O3NizfHZsgNq/2dgoS7nl71R+fzxN+/iEnhWtV2EZys=
Subject key identifier:   FB:97:2D:34:D4:E9:5A:D4:15:F0:3D:CD:FC:CD:38:1D:83:69:62:E7
Authority key identifier: 8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C
Certificate issuer:       /CN=A919BC3B/serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C
Certificate serial:       0151
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft
Manifest number:          0151
Signing time:             Fri 17 Apr 2026 04:48:38 +0000
Manifest this update:     Fri 17 Apr 2026 04:48:38 +0000
Manifest next update:     Fri 24 Apr 2026 04:48:38 +0000
Files and hashes:         1: inZEBFIzrjjTDTW4JtlbLntDfZw.crl (hash: iODujuSBC2ekKabAvDTwirIVVhxRw+5zVjnUgX4KEcw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl
                          rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:48:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 337 (0x151)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919BC3B, serialNumber=8A7644045233AE38D30D35B826D95B2E7B437D9C
        Validity
            Not Before: Apr 17 04:48:38 2026 GMT
            Not After : Apr 24 04:48:38 2026 GMT
        Subject: CN=69e1bba6-f28a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:2a:07:06:79:de:ed:e7:35:81:67:b5:9c:7c:
                    48:51:49:ec:b1:44:b4:3b:22:58:48:95:7b:f6:cd:
                    9c:a6:a3:ba:50:4b:31:68:89:d6:63:f9:05:48:31:
                    5e:26:1e:48:04:ef:b0:1e:8d:ca:38:4f:22:46:ce:
                    eb:8c:30:d9:23:c1:c3:da:3b:ac:48:7c:14:f0:c6:
                    f1:ed:c7:9b:6c:8b:39:2d:ec:98:4e:26:d7:1f:14:
                    f1:68:8b:7b:45:92:47:bf:25:e1:4a:14:e9:db:6f:
                    ec:70:32:64:c9:0b:80:51:3d:b9:10:35:6f:f4:b3:
                    7e:88:e5:4c:c9:a5:5d:f6:87:bd:26:5c:14:f0:67:
                    18:25:73:e4:5e:a3:07:80:f3:66:a1:c6:62:01:8c:
                    94:0f:98:74:59:cd:94:ad:53:e8:0b:5f:f6:e2:46:
                    9f:fc:51:3f:a5:17:7b:8b:cf:65:7f:4d:54:34:0c:
                    a9:20:08:94:ae:a2:77:70:fc:68:79:01:b0:53:5f:
                    29:f3:92:57:d8:18:d5:1f:ec:75:10:a1:e7:d6:87:
                    af:5d:1d:b8:22:f9:5f:09:74:84:a6:0f:21:2c:82:
                    42:ca:b1:d4:68:b3:33:f1:fd:07:00:ac:0c:8c:f3:
                    5c:f6:4b:18:35:2e:46:aa:73:0e:4f:f2:06:2f:de:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:97:2D:34:D4:E9:5A:D4:15:F0:3D:CD:FC:CD:38:1D:83:69:62:E7
            X509v3 Authority Key Identifier:
                keyid:8A:76:44:04:52:33:AE:38:D3:0D:35:B8:26:D9:5B:2E:7B:43:7D:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/inZEBFIzrjjTDTW4JtlbLntDfZw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919BC3B/CF34C1EE39EE11EFA43D6586C4F9AE02/inZEBFIzrjjTDTW4JtlbLntDfZw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:53:a3:c5:7a:c8:ff:a1:34:a9:08:64:9e:96:2f:a1:d8:11:
         6d:a1:14:a9:55:b6:23:be:7b:c2:9c:27:5a:d7:9d:d8:67:82:
         58:07:e9:e4:c0:c2:e4:e3:6c:64:aa:ae:27:75:1f:d6:81:26:
         a4:5f:b6:bb:7a:ed:e0:f0:09:39:fb:30:bd:a2:bd:ae:a7:5f:
         8e:d7:af:e7:dd:37:79:0a:62:1e:01:29:92:41:11:1a:cc:e0:
         0f:c8:cf:9e:40:a0:e4:c1:89:41:3b:29:e4:5a:67:87:6f:2c:
         00:e7:86:97:b8:b5:00:ef:cb:75:ea:18:a5:83:ec:bc:91:45:
         08:14:0d:75:5b:43:18:25:68:f5:df:23:1a:1d:b4:56:be:f9:
         1e:32:06:9d:a9:7a:73:77:89:8b:3f:d4:5e:bd:b2:a7:1d:71:
         d7:15:73:ab:bb:16:d0:2a:8d:f4:d5:a9:88:63:c8:7f:40:1c:
         eb:d7:95:df:19:61:00:ce:f3:ef:b5:32:29:b0:8a:ee:fa:3f:
         d0:3d:cc:1f:42:ff:a5:4c:23:d9:b8:b9:53:8c:08:97:8d:07:
         8b:15:b2:a6:dd:64:7d:c5:51:4d:41:d9:b7:d5:02:de:b7:25:
         93:c6:32:17:c7:db:4e:51:8e:19:2f:56:2f:e9:e3:0b:53:f3:
         0e:98:1a:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:36:53 2026 by rpki-client