Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File:                     5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier:          dRtc8zSSAloYWsXlfRLGGL3eleEAit1LlT4pTYfbyGk=
Subject key identifier:   85:FD:70:8A:48:0C:4C:58:03:5F:7A:66:2F:13:2D:A5:2E:AE:76:B8
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer:       /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial:       0157
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number:          0157
Signing time:             Fri 17 Apr 2026 04:40:00 +0000
Manifest this update:     Fri 17 Apr 2026 04:40:00 +0000
Manifest next update:     Fri 24 Apr 2026 04:40:00 +0000
Files and hashes:         1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: zWWcF8L1Kj3gVIHnxLmXljP61Rj2ifAM+SwNwolI4Vs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 04:39:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
        Validity
            Not Before: Apr 17 04:40:00 2026 GMT
            Not After : Apr 24 04:40:00 2026 GMT
        Subject: CN=69e1b9a0-bf2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:49:ae:bb:ae:70:12:0d:db:20:f5:31:df:6e:
                    3b:cb:84:12:f9:08:7a:c2:2d:fd:b3:39:83:eb:03:
                    70:f4:6c:5b:01:c0:79:1b:42:08:b2:e6:37:aa:75:
                    8c:ea:9f:0f:db:29:75:3c:b8:40:05:3d:a4:f1:15:
                    ce:5d:cc:aa:8b:02:d9:b1:76:ff:a7:86:3e:c2:a6:
                    4e:b4:6d:ed:17:16:48:42:53:69:d3:d8:ab:e8:59:
                    a4:3f:74:3b:14:95:46:f7:73:70:81:de:d5:87:ea:
                    40:23:9b:ce:4d:c6:0b:b4:d4:d7:da:3a:4f:2d:0e:
                    30:38:dd:ae:5f:18:f3:1a:11:78:35:e7:0a:9e:93:
                    1d:ad:36:61:f7:c9:54:f2:44:de:b1:72:6d:af:35:
                    11:f3:54:13:fb:84:5b:df:05:06:24:1d:02:54:04:
                    96:ab:c2:45:bd:a2:a5:4e:16:b6:3b:9a:c4:02:fe:
                    0d:da:0b:28:18:6d:b2:e0:1b:d0:5e:52:96:a1:82:
                    12:e0:01:38:8e:a0:b3:ce:ce:6e:7a:3a:40:d3:86:
                    1a:e9:53:6a:54:7f:f5:c0:3a:31:a6:96:d2:20:60:
                    c2:33:3b:2f:f1:89:c8:d6:7d:d4:ea:d1:81:a3:51:
                    57:ea:79:8b:70:a3:01:cf:62:92:19:94:6e:a4:1e:
                    4e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:FD:70:8A:48:0C:4C:58:03:5F:7A:66:2F:13:2D:A5:2E:AE:76:B8
            X509v3 Authority Key Identifier:
                keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         78:a4:37:b9:f6:5f:12:ed:91:85:34:53:be:a1:a8:d7:1d:37:
         b6:37:ff:74:83:88:53:19:03:e9:d7:1b:55:0d:6c:db:92:a5:
         1f:40:e4:85:3a:ee:d4:75:a0:fe:67:ff:61:0f:47:dc:83:16:
         ff:3b:7f:d5:df:2f:75:26:7a:d5:04:81:e8:7d:6e:fb:c9:22:
         d3:aa:9b:ae:b5:92:c6:d3:22:0b:28:3f:76:f1:bd:2c:a8:0e:
         92:96:ae:e9:b0:8b:e4:a3:ed:79:eb:fa:70:a0:37:aa:89:df:
         88:ed:83:62:b6:aa:a6:81:16:19:55:15:e1:5b:e6:e2:1a:fb:
         93:a9:b7:6b:7f:7e:b0:29:ea:72:c8:7a:fb:8a:8b:2c:fe:73:
         a7:9a:e7:5d:6b:9f:12:7b:0b:fa:6f:e6:e8:71:0f:85:13:c8:
         10:02:03:01:7e:0c:20:4e:28:1b:cd:20:b3:bb:1c:61:d8:94:
         01:c6:31:d3:42:05:65:91:d1:37:ca:01:7e:67:c3:ea:11:8a:
         ac:05:dc:3d:6d:fb:87:d7:9e:90:b4:cf:3d:7f:33:59:86:cf:
         e3:90:1c:13:f6:69:8f:89:02:09:13:11:45:e4:aa:9a:65:06:
         1b:40:7e:7d:ae:bc:80:9e:88:3b:08:65:5a:a8:71:f7:19:7e:
         df:d7:64:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:49:58 2026 by rpki-client