Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
File:                     hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft (raw, json)
Hash identifier:          fXxW3spnr9jgiFOHDEzFOp8BjWM85p4O4OT/QWqCOsU=
Subject key identifier:   13:F8:74:9D:29:6A:B2:29:50:F2:CA:FB:4D:5D:51:1F:C9:6D:A5:8D
Authority key identifier: 85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE
Certificate issuer:       /CN=A91E5EEA/serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
Certificate serial:       EB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
Manifest number:          EB
Signing time:             Fri 17 Apr 2026 06:08:00 +0000
Manifest this update:     Fri 17 Apr 2026 06:08:00 +0000
Manifest next update:     Fri 24 Apr 2026 06:08:00 +0000
Files and hashes:         1: hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl (hash: zuIfFe4pK1DbPh3I1L8pN3+InUqwzk4TkO0NuFwV82A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl
                          rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 06:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 235 (0xeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E5EEA, serialNumber=8577904C43C2A9BE118FDDD5BA7BB8B6044380FE
        Validity
            Not Before: Apr 17 06:08:00 2026 GMT
            Not After : Apr 24 06:08:00 2026 GMT
        Subject: CN=69e1ce40-7f42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:69:98:87:e8:0d:3e:c3:c5:49:b6:18:3d:18:
                    93:c8:e1:4a:84:8a:bf:cf:e3:62:b7:5e:4e:b2:e4:
                    2f:42:2c:35:66:92:f0:2c:91:17:11:55:eb:63:83:
                    54:55:5f:98:a3:13:de:2b:4a:2f:ad:19:a7:9a:42:
                    cd:16:04:21:42:c5:70:5d:f7:cf:46:c5:3d:6f:ae:
                    99:8e:8e:5d:f4:2a:29:5c:69:58:79:58:13:8a:a2:
                    51:51:08:1b:5f:2c:4b:3c:6a:5e:91:9d:73:a1:bc:
                    b5:e6:cb:af:35:0f:d0:c5:8d:23:7f:f6:22:f8:09:
                    21:a3:24:69:85:bf:84:84:af:96:f9:86:2c:7f:b9:
                    4b:81:c2:5c:07:1f:a1:67:47:b2:9f:7a:f0:13:da:
                    28:23:ba:62:1d:fa:e6:64:35:3c:81:4c:76:00:0d:
                    89:b9:47:9d:5e:3e:cf:2d:73:44:d3:66:ed:e7:19:
                    3a:30:bf:a0:e4:ec:5c:a6:26:f0:3e:2f:82:c8:b6:
                    e6:bb:df:22:61:8c:0e:aa:09:33:a6:50:b6:76:2a:
                    db:ab:bf:4f:66:8a:a1:c4:95:cb:91:1a:5e:7d:7b:
                    29:f1:b6:9e:cc:24:7f:09:d3:34:b1:e0:63:9f:d4:
                    1a:46:5d:93:7f:de:3e:af:fb:3b:f6:5a:27:e0:e3:
                    61:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:F8:74:9D:29:6A:B2:29:50:F2:CA:FB:4D:5D:51:1F:C9:6D:A5:8D
            X509v3 Authority Key Identifier:
                keyid:85:77:90:4C:43:C2:A9:BE:11:8F:DD:D5:BA:7B:B8:B6:04:43:80:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hXeQTEPCqb4Rj93Vunu4tgRDgP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E5EEA/ECA2C7D6D4CF11EF98DF982BC4F9AE02/hXeQTEPCqb4Rj93Vunu4tgRDgP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c4:8a:6c:e7:06:5b:2c:f0:10:2c:86:ae:f1:e8:d3:2a:95:67:
         3c:e4:c4:01:56:b9:1f:75:7b:29:a6:b4:69:a6:9e:36:47:5d:
         81:7c:48:6b:4d:15:9a:6b:93:84:d7:d2:fd:5b:9c:50:15:5b:
         43:7c:36:0b:44:50:aa:4c:35:e4:69:f5:3a:eb:3c:02:44:b9:
         60:ac:db:24:b7:bc:7d:7e:1f:2b:19:ad:5c:47:63:9f:88:8c:
         9f:08:47:12:a2:3c:63:ca:37:06:18:6b:c7:dc:5d:27:1a:d7:
         0e:ef:81:be:22:89:05:6c:80:3c:b9:37:b4:19:13:57:9f:83:
         36:28:0c:41:01:70:73:4b:26:93:2f:dd:5f:ad:b0:80:f2:36:
         d9:6a:2f:b6:fd:c9:5f:01:5a:eb:b9:09:c2:d1:d2:f7:99:a5:
         bd:fa:ad:85:6c:e6:74:b5:e3:32:8b:46:69:c3:1e:4b:ca:08:
         e4:58:89:4d:b0:45:0d:ef:f8:77:56:8d:9d:c7:6c:6f:b2:63:
         54:5c:b7:7a:7b:69:0f:8a:d3:91:7b:e0:ef:6c:69:7f:13:4f:
         26:b8:d7:a9:44:dd:60:75:3b:11:dd:e2:b2:25:8f:de:3f:6e:
         ed:73:d3:7a:d8:94:2e:38:a5:6e:6c:5e:57:56:d2:bc:bf:b0:
         f8:85:86:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:45:17 2026 by rpki-client