Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
File:                     iQoeXMwexsfOHqcfSRKRH1mShrI.mft (raw, json)
Hash identifier:          +OF3MKwB1JBxNKe+2BaAAyeICv2Yffq9HEPQZmQOFaU=
Subject key identifier:   E1:27:28:B4:2B:A2:F5:47:3B:9B:D5:AF:2E:41:A9:1E:FA:68:87:02
Authority key identifier: 89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2
Certificate issuer:       /CN=A91E2234/serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
Certificate serial:       3529
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
Manifest number:          3529
Signing time:             Thu 16 Apr 2026 14:49:48 +0000
Manifest this update:     Thu 16 Apr 2026 14:49:48 +0000
Manifest next update:     Thu 23 Apr 2026 14:49:48 +0000
Files and hashes:         1: iQoeXMwexsfOHqcfSRKRH1mShrI.crl (hash: uOB9iZ7TwL3rCAs7IFgqX/ljU6fybG21jtUopCF1eZ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl
                          rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:49:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13609 (0x3529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2234, serialNumber=890A1E5CCC1EC6C7CE1EA71F4912911F599286B2
        Validity
            Not Before: Apr 16 14:49:48 2026 GMT
            Not After : Apr 23 14:49:48 2026 GMT
        Subject: CN=69e0f70c-860c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5d:06:49:c7:5c:e3:57:bd:89:dc:7f:d4:df:
                    b0:52:3d:f0:bc:de:86:f0:35:98:4b:7d:45:c4:50:
                    83:7d:7d:da:36:d2:f1:16:79:6a:5d:56:a9:aa:ee:
                    c7:b6:b3:ad:78:c6:7a:60:45:15:b0:f3:82:a5:93:
                    2c:6d:03:d7:8e:0a:e4:f1:ff:e7:38:a1:30:19:5f:
                    77:44:6f:fc:b6:36:24:c0:f7:c5:f2:ba:6c:6a:ea:
                    44:0e:5e:62:2c:21:70:53:56:08:70:f2:80:1d:a7:
                    58:91:e6:1d:08:be:97:51:93:ec:f9:89:5b:7b:90:
                    33:fa:66:99:12:e0:ed:6c:54:1a:02:a0:01:0a:d2:
                    de:00:cd:2a:67:5b:ff:45:2f:aa:e4:00:51:ee:3f:
                    ff:27:41:44:ac:71:d3:4b:56:60:35:63:b5:4b:d6:
                    a5:f2:0c:87:51:38:b9:e7:2d:fd:a5:e3:ff:9d:78:
                    0e:0e:9c:4d:8f:b0:9a:1d:5b:7e:f2:49:9b:83:00:
                    d8:30:aa:e7:d4:a9:9b:4e:6a:9e:e7:ea:fb:fe:c1:
                    0e:30:51:23:5b:df:3c:46:05:80:8b:13:3e:f5:b3:
                    67:9b:bc:cc:e5:9e:00:f7:c5:3a:aa:3b:1d:9f:48:
                    1a:2a:c1:a9:a2:31:a2:7b:e4:7d:ad:98:6d:53:45:
                    5d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:27:28:B4:2B:A2:F5:47:3B:9B:D5:AF:2E:41:A9:1E:FA:68:87:02
            X509v3 Authority Key Identifier:
                keyid:89:0A:1E:5C:CC:1E:C6:C7:CE:1E:A7:1F:49:12:91:1F:59:92:86:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/iQoeXMwexsfOHqcfSRKRH1mShrI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2234/522569141D9611E29EE5CB7E08B02CD2/iQoeXMwexsfOHqcfSRKRH1mShrI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:25:82:bf:c6:e6:e7:05:24:50:da:7a:40:b4:16:45:a4:7e:
         e5:d6:35:14:b6:6e:f2:24:30:4d:b7:e6:b6:c0:9b:cf:cc:42:
         eb:2f:15:d3:ac:24:e1:f4:1e:29:97:51:37:4b:66:8d:de:8e:
         e7:73:5d:79:21:da:48:8d:58:07:9c:42:b2:27:79:ef:1b:03:
         30:0d:26:01:f8:95:01:2f:9f:7a:12:93:b0:89:af:cd:99:91:
         54:bb:0d:97:ee:b8:e3:5a:8f:b3:a4:02:ac:3e:9c:c6:12:3d:
         04:21:73:4b:63:7d:2c:bb:9c:67:89:aa:1b:c6:08:cd:5d:12:
         48:c5:b2:57:22:5f:4e:4c:d8:e9:49:da:55:0e:c2:a4:da:b5:
         a9:e5:97:58:f0:b7:c3:2e:61:cc:71:ae:3c:e1:7c:9a:6f:c7:
         08:1c:cf:3b:49:26:d3:dc:7e:1e:87:8c:0a:16:96:34:5f:dd:
         f8:e3:62:e9:97:b4:8b:92:e1:d7:d7:59:9d:a9:ae:3c:94:7a:
         0d:66:ac:56:a8:05:c1:78:68:eb:ec:1b:96:36:50:06:52:87:
         42:36:7e:38:c1:5c:3e:cd:02:c1:3d:c3:7a:8c:94:5b:37:ac:
         59:84:d6:19:b4:b3:2a:9a:74:8b:47:5d:32:58:6e:4e:64:76:
         02:28:c1:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:09:33 2026 by rpki-client