Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File:                     -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier:          mxhqRp7BLRgeIZw9LAB9gXR7XCaZc6jQtCZ+WZsLMWA=
Subject key identifier:   FF:23:13:69:B0:04:9A:B0:34:A2:9D:40:59:2C:36:46:A2:FD:49:B9
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer:       /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial:       4E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number:          4E
Signing time:             Fri 17 Apr 2026 07:55:23 +0000
Manifest this update:     Fri 17 Apr 2026 07:55:22 +0000
Manifest next update:     Fri 24 Apr 2026 07:55:22 +0000
Files and hashes:         1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: rQcgUjHjhf6/3eQ8Nrn1C5zaJiZXbh9Z7gGyrjfh++Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:55:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
        Validity
            Not Before: Apr 17 07:55:22 2026 GMT
            Not After : Apr 24 07:55:22 2026 GMT
        Subject: CN=69e1e76b-1c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:bc:cd:8f:90:c0:b2:d0:90:5e:11:9c:c1:38:
                    33:87:46:f0:04:da:69:1f:a3:c0:09:1f:92:c7:75:
                    01:ff:a7:52:24:09:65:e9:5f:1e:6d:a5:96:08:68:
                    f8:47:bf:17:b0:ee:a1:96:6d:b7:b5:b9:88:20:fd:
                    2c:e3:00:4a:8b:f3:0b:6a:c1:4b:11:60:88:14:cb:
                    e6:45:1c:a5:00:28:74:1c:d2:d0:be:04:7e:99:13:
                    75:5a:ec:4d:d9:20:59:3f:4e:b3:ea:41:33:96:b4:
                    e9:ac:72:c6:1a:fe:f4:c9:b4:20:e3:b7:98:62:34:
                    67:1f:fb:91:22:3a:39:90:bb:6b:a0:89:8b:e7:23:
                    17:e9:55:72:eb:d6:b3:a5:c8:01:6c:50:27:13:8e:
                    c4:cd:1b:0f:03:00:7f:f9:e1:27:7f:fe:d0:64:41:
                    d9:0e:2a:b8:99:e3:8a:2f:46:de:7a:83:3d:e7:37:
                    dc:37:d1:6e:c0:21:d8:13:dc:93:7b:c6:54:6c:f9:
                    fb:85:46:1a:04:6e:06:ec:f2:a4:3e:a8:7a:cd:ae:
                    82:2e:ee:b0:a6:9c:50:6b:88:14:55:9a:2a:0d:b6:
                    34:c1:d2:fe:db:48:89:3a:bb:67:02:cc:2f:bf:23:
                    be:21:76:0a:a7:59:1d:1e:5f:84:c2:68:de:1b:a1:
                    05:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:23:13:69:B0:04:9A:B0:34:A2:9D:40:59:2C:36:46:A2:FD:49:B9
            X509v3 Authority Key Identifier:
                keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0e:35:9f:29:4a:50:1e:30:56:68:83:77:48:c1:f7:1c:c7:69:
         35:c5:e3:ed:89:92:01:11:b3:0d:35:21:dd:b3:bf:9e:fd:e7:
         74:63:6d:8a:7a:ad:fa:e4:30:5b:dc:9e:29:57:af:f1:ad:3b:
         d3:a3:44:eb:ac:f7:ee:a1:f5:ac:d9:44:96:1b:37:01:93:98:
         9b:ba:07:d2:17:ba:51:b5:7a:13:f7:8f:e6:cb:b2:cb:30:80:
         1b:61:57:71:16:85:af:52:9f:c0:20:5d:3d:1a:c7:44:cd:60:
         be:8a:a4:23:21:29:f3:9b:c8:e5:1b:33:58:82:f6:28:0d:e3:
         34:6d:e4:d8:72:b8:94:04:0d:f8:e6:a8:41:55:14:9e:16:27:
         15:ed:3d:36:f6:f9:91:16:8a:9f:af:ee:b4:81:e8:20:7a:63:
         e6:40:28:e2:81:12:2d:18:a8:68:cc:38:ce:ea:e2:86:b4:86:
         de:b3:90:b0:b7:10:01:49:db:e7:8e:3d:db:3d:69:9b:69:66:
         28:fd:c5:53:36:7b:30:6c:fe:b1:4e:09:08:9f:04:c8:7a:d2:
         b4:79:33:86:ff:8b:fe:9a:0b:2f:01:b6:93:fc:b1:00:3e:e5:
         a6:eb:76:90:c1:7d:74:1f:c3:a0:aa:1f:cb:df:79:7b:b3:a9:
         59:a1:71:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:18:07 2026 by rpki-client