Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
File:                     f_xaKedfnr4HnQUkfw3_DPmH8cI.mft (raw, json)
Hash identifier:          b2H/XzaAlfG6oi4C15JGNWzDepXpq9dgO04C1/7hzBs=
Subject key identifier:   A2:E0:69:6C:D6:AD:9C:1B:2B:97:D4:5A:91:29:C8:C0:6F:18:4F:9E
Authority key identifier: 7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2
Certificate issuer:       /CN=A91B4C67/serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
Certificate serial:       352E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
Manifest number:          352E
Signing time:             Thu 16 Apr 2026 15:04:02 +0000
Manifest this update:     Thu 16 Apr 2026 15:04:01 +0000
Manifest next update:     Thu 23 Apr 2026 15:04:01 +0000
Files and hashes:         1: f_xaKedfnr4HnQUkfw3_DPmH8cI.crl (hash: r5ID7Cg8bx+9i0MZjCPc5N1gv2GOUwrVcYl2RFxUB6Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl
                          rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:04:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13614 (0x352e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B4C67, serialNumber=7FFC5A29E75F9EBE079D05247F0DFF0CF987F1C2
        Validity
            Not Before: Apr 16 15:04:01 2026 GMT
            Not After : Apr 23 15:04:01 2026 GMT
        Subject: CN=69e0fa62-8e5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e6:ca:5e:f8:58:33:65:9a:fc:58:25:ef:b6:
                    eb:37:3b:aa:f1:00:bc:24:6b:39:12:ac:d9:ec:a4:
                    3f:cf:64:c1:24:fb:2f:a9:2c:18:a1:1c:e6:58:14:
                    39:84:41:1b:99:a0:7a:7e:64:43:a9:4a:e5:02:4b:
                    50:41:ae:cc:b7:52:7d:11:47:b0:79:4e:eb:2e:3c:
                    f2:78:a0:86:95:c4:90:ca:8d:b9:ae:bc:c9:0a:cd:
                    62:ba:38:65:2f:e5:8d:c7:19:a2:31:7b:cd:23:ab:
                    6f:0b:fb:36:d4:4a:fc:d0:48:c6:9e:ea:89:a6:9e:
                    19:a2:a9:1c:da:e1:09:43:df:b7:73:a2:33:20:5f:
                    be:7d:7b:d9:47:b8:1b:19:5c:fe:cd:81:83:dd:56:
                    21:af:43:91:61:c3:0e:f7:69:a5:b7:d8:1f:80:8a:
                    86:9a:fe:17:56:ff:64:37:e7:88:f1:4f:85:49:65:
                    28:c6:ad:a5:9a:71:e9:ac:70:28:52:08:42:e4:8a:
                    74:6d:1e:df:3e:ed:47:af:1d:7e:30:56:48:0c:87:
                    a9:4e:05:c8:02:50:f1:2b:23:96:10:5e:70:e3:52:
                    44:fd:bb:69:bb:d6:fa:b0:83:65:d4:35:fd:dd:8b:
                    ba:d4:94:be:5f:1a:48:8e:3c:d4:69:9c:11:70:69:
                    0a:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:E0:69:6C:D6:AD:9C:1B:2B:97:D4:5A:91:29:C8:C0:6F:18:4F:9E
            X509v3 Authority Key Identifier:
                keyid:7F:FC:5A:29:E7:5F:9E:BE:07:9D:05:24:7F:0D:FF:0C:F9:87:F1:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f_xaKedfnr4HnQUkfw3_DPmH8cI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B4C67/BF3FC2FA1DA111E2B3EC1F9408B02CD2/f_xaKedfnr4HnQUkfw3_DPmH8cI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:7c:38:64:4d:d2:d4:df:7b:68:ee:a7:d6:3c:a8:7d:38:37:
         8c:76:a4:cc:26:23:35:10:16:e6:82:14:23:aa:fb:fb:06:ad:
         ef:04:da:4f:ba:90:47:af:48:a0:5a:50:cd:94:f4:7d:6f:af:
         e5:5f:61:35:4d:ac:9c:30:29:ea:c0:c9:3c:55:c9:57:a2:d5:
         11:2e:68:90:da:22:89:d7:48:fe:eb:c5:5a:fc:64:9c:0d:f5:
         cb:c6:94:4f:f7:f2:4f:41:93:84:2a:9b:bf:ab:d8:20:0f:7a:
         dc:a7:62:96:66:0d:5b:51:2f:38:cb:83:d4:74:87:07:f2:c3:
         d1:00:90:c8:09:90:ba:47:dc:77:a7:86:c0:52:b9:5a:60:1f:
         68:ab:3a:8b:af:ec:77:3c:e7:25:8c:9d:89:47:0d:5e:0d:09:
         4b:62:08:87:a8:0d:90:a9:6c:71:e7:82:bc:6f:61:ca:61:e0:
         f7:f9:3d:30:14:6b:3c:69:e9:95:cd:7c:27:6f:7e:2b:69:e0:
         d3:4d:9d:fe:61:c7:31:02:c9:ab:e5:71:32:7a:3d:dd:b1:87:
         0d:db:63:17:23:15:69:6b:50:4a:26:38:99:da:dd:9f:fc:7a:
         2c:16:38:0d:a4:a3:b2:7a:db:b2:7d:e8:a3:30:fe:a8:51:65:
         d2:4d:39:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 05:30:21 2026 by rpki-client