Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
File:                     BAiuYP82i4xPzZMY6lKlnIcolJw.mft (raw, json)
Hash identifier:          r5eUBToIAq5B6RQ0ASDeRFIMLz6wEVwjrEaEP/ddApE=
Subject key identifier:   2F:A6:81:88:2B:3E:61:61:D1:68:CE:6F:14:0C:3C:DA:33:FE:68:59
Authority key identifier: 04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C
Certificate issuer:       /CN=A91BA0AE/serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
Certificate serial:       0908
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
Manifest number:          0B80
Signing time:             Sat 18 Apr 2026 20:11:27 +0000
Manifest this update:     Sat 18 Apr 2026 20:11:27 +0000
Manifest next update:     Sat 25 Apr 2026 20:11:27 +0000
Files and hashes:         1: BAiuYP82i4xPzZMY6lKlnIcolJw.crl (hash: ube2jJD2cHnPX+rgCBsfkuSRAhhg9P7xyDztS+Mci4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 20:11:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2312 (0x908)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0AE, serialNumber=0408AE60FF368B8C4FCD9318EA52A59C8728949C
        Validity
            Not Before: Apr 18 20:11:27 2026 GMT
            Not After : Apr 25 20:11:27 2026 GMT
        Subject: CN=69e3e56f-4773
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:f3:8c:17:a9:6c:c0:10:c3:ec:66:c2:e3:5e:
                    33:bb:04:6d:06:5e:5d:33:92:ea:4c:3a:2a:98:f8:
                    cb:60:56:ac:da:21:62:03:db:4e:6a:62:da:3b:67:
                    94:73:ca:fd:3f:8a:67:46:a8:61:ef:14:80:47:58:
                    3b:f7:02:c1:68:34:45:17:5b:e5:c3:a5:94:96:9f:
                    68:aa:2c:83:3b:32:6c:d3:d1:32:47:48:d2:2c:48:
                    74:bf:0e:9d:71:99:1f:1e:ce:14:8c:63:8c:d4:05:
                    2c:16:7a:f8:73:71:f3:fb:e2:68:a4:e5:2f:e8:e0:
                    75:67:97:e0:bb:ad:72:45:51:3e:67:53:f8:e5:fe:
                    dd:aa:7f:7f:13:61:82:9f:22:43:e3:1a:73:3b:10:
                    10:2e:2c:3d:9a:00:09:a2:8f:0e:50:f8:37:06:ff:
                    78:f2:4a:35:6b:7d:4f:e0:81:a9:59:32:e3:71:05:
                    e3:40:37:a6:06:ec:94:6e:b9:f8:c7:28:0c:6e:6e:
                    30:1f:05:36:b5:dd:e0:60:1b:fc:41:d4:79:c4:e9:
                    6f:ff:13:13:e0:e1:18:6f:63:5f:e7:81:46:42:c5:
                    e9:0c:c8:89:80:eb:42:49:10:c2:3a:6f:13:3e:d9:
                    ba:d8:ec:a9:ef:ef:03:3a:e3:34:89:66:e9:eb:b1:
                    89:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:A6:81:88:2B:3E:61:61:D1:68:CE:6F:14:0C:3C:DA:33:FE:68:59
            X509v3 Authority Key Identifier:
                keyid:04:08:AE:60:FF:36:8B:8C:4F:CD:93:18:EA:52:A5:9C:87:28:94:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/BAiuYP82i4xPzZMY6lKlnIcolJw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0AE/37EB0C66C96411EAA106E859C4F9AE02/BAiuYP82i4xPzZMY6lKlnIcolJw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:f4:40:7d:1a:0f:32:0e:3f:20:86:bb:ba:60:3e:0a:92:83:
         02:04:b2:a6:f7:ea:76:ce:82:e8:e9:9a:58:7e:b7:80:6a:81:
         e9:e1:86:e8:3f:4f:69:c7:8c:1a:08:91:86:76:b6:2a:58:15:
         6d:ac:c5:97:32:34:ef:cf:9f:c9:63:3e:a2:b7:27:e7:7c:0c:
         d0:3a:af:65:88:3c:01:4b:86:b8:51:66:b8:a0:e2:46:81:3b:
         ef:d3:fd:70:c1:cf:28:70:e8:eb:54:5a:77:54:5f:68:6a:29:
         c6:3f:f5:e0:18:b3:d9:6a:f7:45:1a:a8:f5:c2:33:43:21:48:
         21:84:6f:48:a2:c9:06:33:7b:9d:11:e8:35:d7:2b:4b:dd:58:
         ab:49:f6:ea:49:5a:6a:c7:15:6b:13:b9:fe:43:10:38:47:cb:
         76:f5:47:38:93:2c:53:14:5a:ca:4d:9f:d6:ff:62:d5:36:f2:
         81:f2:4c:53:7e:54:fc:0a:5a:87:df:cf:54:54:be:19:5e:cf:
         30:74:7c:b9:5f:dc:78:61:a5:00:b1:8f:d0:8c:6c:4c:91:fd:
         77:a2:d4:cf:36:15:11:42:12:d1:ca:d9:31:1a:90:c4:cf:1b:
         e9:f2:a5:40:d1:04:8c:42:75:7a:78:c1:3d:49:75:39:6a:5b:
         f4:cb:29:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 11:21:41 2026 by rpki-client