Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
File:                     rsioMoH-iyda7gQb4zzN2Ek7rAA.mft (raw, json)
Hash identifier:          dqkuhgSikwV2hVlyFAQkfGVebpWNr8M0yQchw8pQUXM=
Subject key identifier:   05:12:78:22:1C:DB:24:3A:08:5F:2A:B7:E5:40:6B:CE:F2:69:E5:58
Authority key identifier: AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00
Certificate issuer:       /CN=A91E6D5D/serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00
Certificate serial:       2BAE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
Manifest number:          A1DE
Signing time:             Thu 16 Apr 2026 14:30:18 +0000
Manifest this update:     Thu 16 Apr 2026 14:30:18 +0000
Manifest next update:     Thu 23 Apr 2026 14:30:18 +0000
Files and hashes:         1: rsioMoH-iyda7gQb4zzN2Ek7rAA.crl (hash: jfdI3Z7znioSKTDFkeblKlQrHl0A6N2d5yWOLqszYXY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl
                          rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 14:30:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11182 (0x2bae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6D5D, serialNumber=AEC8A83281FE8B275AEE041BE33CCDD8493BAC00
        Validity
            Not Before: Apr 16 14:30:18 2026 GMT
            Not After : Apr 23 14:30:18 2026 GMT
        Subject: CN=69e0f27a-e3aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:d1:3b:12:29:2b:45:db:88:3b:a4:fe:4a:e0:
                    f1:a9:93:53:e9:ed:1f:40:97:86:64:43:09:89:73:
                    48:e7:94:41:1d:82:39:26:c4:2c:71:80:b5:a7:7c:
                    6e:9f:28:7b:c7:97:3c:6f:54:73:4f:75:3b:ad:03:
                    68:93:0e:aa:7e:93:8a:b7:8b:fc:ec:59:00:67:63:
                    26:1d:b6:64:49:e5:e2:dc:ee:9a:a4:39:46:9f:f9:
                    9a:85:ba:f9:5f:d9:48:19:a0:83:9f:1d:22:8b:38:
                    03:bd:bf:33:9e:05:af:9b:74:9e:6f:02:cc:ab:0f:
                    49:42:1c:a5:13:60:40:15:26:af:3b:10:fd:9a:24:
                    76:54:26:2f:0d:b7:de:01:b5:28:95:35:0e:ac:35:
                    45:41:0a:d2:db:93:fb:42:ce:f7:af:f9:1a:1a:c1:
                    dd:d5:19:86:f2:a2:f2:9d:5b:b5:69:8b:99:56:7a:
                    f9:0d:a0:9b:c7:02:03:f7:d3:80:4c:ff:e7:65:9a:
                    ce:3e:15:19:1f:df:48:0f:c2:cb:b1:24:11:28:fe:
                    a8:4f:c3:07:7c:90:82:3f:4e:5c:b4:42:9b:5c:32:
                    af:71:ae:c2:99:63:63:be:41:66:aa:c5:39:b5:9e:
                    1b:89:de:2c:bd:82:fe:7b:27:de:91:e5:0f:58:59:
                    fe:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:12:78:22:1C:DB:24:3A:08:5F:2A:B7:E5:40:6B:CE:F2:69:E5:58
            X509v3 Authority Key Identifier:
                keyid:AE:C8:A8:32:81:FE:8B:27:5A:EE:04:1B:E3:3C:CD:D8:49:3B:AC:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rsioMoH-iyda7gQb4zzN2Ek7rAA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6D5D/9DCB68E01D8811E294B955E108B02CD2/rsioMoH-iyda7gQb4zzN2Ek7rAA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:62:5e:24:20:b6:47:96:b5:5c:e4:cc:b6:9f:c1:d2:b4:8a:
         22:5b:39:04:de:d9:d8:e8:00:a7:25:d2:20:04:27:fa:bd:dc:
         68:84:83:85:89:02:62:36:a7:8a:b8:cd:b0:d2:ae:04:eb:6e:
         54:da:78:66:74:1b:23:98:f5:43:35:f4:d1:e3:ec:29:2b:c4:
         24:a5:c2:73:ef:fd:61:1e:6b:b9:88:57:89:a8:59:1a:74:09:
         0c:78:dc:df:6d:b0:41:b3:f1:ee:d2:be:e9:53:19:6b:00:bb:
         25:b5:c2:81:30:55:d3:a0:23:c2:03:f8:b5:70:fd:46:bd:06:
         84:52:85:17:5c:6e:af:ac:4e:be:26:7c:67:72:40:11:90:b2:
         fb:b6:4b:86:e3:dd:37:a0:6c:2b:b8:79:75:ae:4e:e9:4a:d4:
         6f:ae:08:dd:c7:6b:93:05:40:c6:ea:3b:df:8a:8b:3f:7b:ae:
         78:3b:99:c7:e7:4d:7f:54:77:c6:6e:a1:b3:8c:c8:7c:26:ec:
         de:5b:56:c5:da:74:be:f4:8d:0c:5d:cd:42:02:d8:3d:37:bf:
         09:2a:87:44:db:0b:be:c7:a8:d4:08:e7:44:f9:83:9c:c6:c6:
         e5:0e:79:ca:e0:e9:b3:74:2b:33:9b:ef:e7:13:a4:28:0c:d6:
         50:27:34:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:44 2026 by rpki-client