Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json)
Hash identifier:          EnipsJQW/ipivPGsg6+eC4xkxzJe0aYWHMCA42l8GHk=
Subject key identifier:   24:CE:0A:6B:4D:9B:F2:A0:00:F5:AB:82:42:E9:61:C8:EC:F9:15:63
Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Certificate issuer:       /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
Certificate serial:       3532
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
Manifest number:          3531
Signing time:             Thu 16 Apr 2026 15:14:56 +0000
Manifest this update:     Thu 16 Apr 2026 15:14:55 +0000
Manifest next update:     Thu 23 Apr 2026 15:14:55 +0000
Files and hashes:         1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: rihCwAC4XlpMYlC8YVKke/LM6J3RDKMVKyAMZRhPXuk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl
                          rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 15:14:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13618 (0x3532)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
        Validity
            Not Before: Apr 16 15:14:55 2026 GMT
            Not After : Apr 23 15:14:55 2026 GMT
        Subject: CN=69e0fcf0-6847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c1:25:ed:c9:06:d8:dd:d4:bd:ce:cc:b6:75:
                    d5:0f:47:9e:ea:e9:fd:da:7b:6e:64:14:df:e4:fd:
                    54:8f:69:2b:13:0e:79:e8:3d:77:1a:3b:f2:2c:e1:
                    2e:57:e9:26:79:34:25:a8:4b:35:d1:2d:34:65:6c:
                    51:1f:ae:b7:83:2d:14:8e:d6:f9:ef:0a:71:e1:d4:
                    ec:60:05:31:17:bf:3a:0c:fb:34:3c:ac:c7:12:a6:
                    b1:46:1f:53:1d:da:58:1c:39:68:dc:a9:e7:81:a1:
                    17:19:9d:90:b5:49:a7:ec:b7:e0:c3:e1:05:9d:86:
                    05:3c:c5:c4:b2:a6:8e:9f:ee:9a:78:a7:f6:07:2c:
                    55:39:b2:f3:8f:44:57:12:f3:77:f1:a5:7c:e1:39:
                    6c:43:d4:89:61:8c:53:53:2f:5f:91:bf:6b:b4:f9:
                    ce:14:98:af:11:ff:8d:dd:8c:cf:2f:49:14:e9:62:
                    d1:9b:59:fe:cd:10:74:d1:21:52:c5:77:b8:a0:90:
                    88:31:85:02:21:02:0d:ce:51:ff:a7:d9:da:7a:87:
                    23:bc:22:a4:cf:3b:dd:18:31:6d:a0:e8:7c:13:0e:
                    b4:5a:f1:84:a9:8d:2b:d7:ec:b0:d1:98:1c:e1:7a:
                    25:aa:f3:e8:89:32:a9:27:57:1d:50:83:f4:2f:05:
                    a9:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:CE:0A:6B:4D:9B:F2:A0:00:F5:AB:82:42:E9:61:C8:EC:F9:15:63
            X509v3 Authority Key Identifier:
                keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:27:b7:bc:b7:94:9b:31:ab:fa:9c:51:f0:e0:32:69:c3:a3:
         ba:b2:ca:32:d8:a1:b2:09:e3:4d:db:25:a9:35:49:94:df:e1:
         5e:0c:2c:6b:72:23:06:24:66:7c:d9:ee:38:e6:82:48:f3:f2:
         ee:7d:6f:76:38:86:e8:9d:97:59:81:ad:5f:93:22:d5:1e:5b:
         b1:07:9f:b2:9b:1a:17:75:f2:ae:0a:02:2f:55:91:98:c6:7a:
         49:1d:ba:6c:09:72:a1:73:9a:45:69:1f:7a:96:f9:72:6a:d8:
         d7:cb:e8:35:9e:77:b7:aa:bc:b8:c2:af:43:17:eb:a9:d8:62:
         84:0d:d4:26:1e:0a:66:64:06:bc:f8:e3:b8:b8:a9:ae:0d:68:
         b9:4e:a4:ba:10:fa:70:3b:3b:b8:b3:24:97:58:b7:ff:7f:94:
         2e:48:99:7c:f8:66:9a:ac:f7:e7:90:22:ba:13:a2:27:07:92:
         23:34:44:2f:cf:ec:20:b0:24:63:10:a4:b0:6f:2e:d9:0e:98:
         a3:7d:43:12:61:f3:02:a2:fc:e1:10:2b:ba:3e:c3:1b:ab:3a:
         7d:08:b5:90:f7:73:dc:2e:34:cf:1e:b9:ae:74:9d:05:5b:59:
         91:97:ff:c4:20:84:5d:46:3f:c9:a1:ef:e2:13:fe:ec:df:f0:
         19:83:d1:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:38:35 2026 by rpki-client