Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
File:                     9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft (raw, json)
Hash identifier:          39RQx7m5LrDQU22jqxWjIVSwXy0CkK7BGIyuzOzMGfk=
Subject key identifier:   70:7E:F2:A4:72:57:96:DD:D1:09:84:E4:F0:F6:23:04:03:9A:95:F1
Authority key identifier: F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5
Certificate issuer:       /CN=A91ECF21/serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
Certificate serial:       03A9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
Manifest number:          03A9
Signing time:             Fri 17 Apr 2026 00:36:12 +0000
Manifest this update:     Fri 17 Apr 2026 00:36:12 +0000
Manifest next update:     Fri 24 Apr 2026 00:36:12 +0000
Files and hashes:         1: 9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl (hash: iTukAOohxSi3l/B0jAijsSuFJlriTnAg3Yqj60VBgsE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl
                          rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 00:36:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 937 (0x3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ECF21, serialNumber=F67DA9F15E5E934D90E48FE50E7DC8571DD937A5
        Validity
            Not Before: Apr 17 00:36:12 2026 GMT
            Not After : Apr 24 00:36:12 2026 GMT
        Subject: CN=69e1807c-a89d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:74:19:63:c8:7b:06:5f:30:e6:01:20:fd:cb:
                    5f:68:50:1c:d9:49:97:2a:ac:b9:0d:27:92:fe:c2:
                    c0:a0:2f:e3:f2:00:e4:be:d9:97:a4:5b:52:8b:6c:
                    e5:f7:3e:60:44:c7:5e:95:cc:29:a9:4b:b3:e4:c2:
                    9a:bb:2c:5b:de:f0:57:55:82:bf:40:19:3f:4e:a3:
                    8b:37:ce:eb:e9:86:4e:4c:b4:7e:13:55:c4:59:bc:
                    02:10:ac:66:8b:3e:ff:72:d9:49:c4:ea:cd:ff:7a:
                    a9:73:fe:2f:c3:f7:b4:6d:e3:c9:6b:8e:37:69:d2:
                    fe:c8:cf:be:8f:6e:e8:e5:29:6b:c3:8e:6d:55:12:
                    c5:d7:80:8a:08:a4:91:c0:0c:6f:69:8a:74:26:be:
                    2b:e9:7c:23:1d:70:8d:9d:c4:3d:3f:4c:e6:46:ce:
                    25:1f:5c:a9:79:68:cc:ca:8e:39:31:3a:ec:91:97:
                    13:18:66:62:a7:db:86:a8:ad:cf:7d:72:91:85:f0:
                    c1:86:93:16:2f:12:d0:77:af:21:fc:47:cd:4d:dc:
                    8a:a1:46:01:67:e2:bd:b5:65:19:38:44:12:0d:a6:
                    20:f0:66:13:91:3b:27:f7:74:c8:4a:c5:4c:3f:9f:
                    23:f9:70:30:b1:97:de:a2:af:5f:30:27:f6:08:48:
                    e4:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:F2:A4:72:57:96:DD:D1:09:84:E4:F0:F6:23:04:03:9A:95:F1
            X509v3 Authority Key Identifier:
                keyid:F6:7D:A9:F1:5E:5E:93:4D:90:E4:8F:E5:0E:7D:C8:57:1D:D9:37:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ECF21/F2EBEB34D51011EC9552B82AC4F9AE02/9n2p8V5ek02Q5I_lDn3IVx3ZN6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:f8:af:98:6a:3d:97:ca:02:30:96:bd:a6:b4:7c:52:b5:2e:
         6e:0c:6d:5b:79:35:a0:9c:96:c4:db:92:3f:23:1a:77:0a:08:
         49:7d:e2:a7:79:0d:13:c4:d3:79:e0:0f:ad:5d:61:a4:20:a0:
         26:d3:55:90:8e:11:74:93:99:d9:ea:14:b6:af:ab:c8:ba:c6:
         1a:c9:7d:f6:d0:9e:0e:47:1d:d7:75:92:0a:f7:37:d8:8f:95:
         3d:92:f4:c8:a9:6a:22:47:2d:30:dd:ba:65:bc:dd:99:a5:b2:
         88:99:de:64:84:3e:a6:08:7f:cd:8f:da:8c:0e:44:f4:b3:fe:
         44:8a:9a:5e:29:41:55:16:7f:a3:42:60:c1:53:e6:80:26:e6:
         33:33:84:d7:cf:6c:2a:15:f6:00:6d:f6:1a:ac:f6:d9:1d:1a:
         cf:a7:39:05:29:06:82:99:1a:6a:fd:ac:d8:1b:46:e3:fd:e2:
         d5:db:72:6c:fa:df:7e:f8:3b:12:47:96:d9:1e:0e:70:aa:82:
         4f:93:af:1f:01:11:1c:0b:7c:35:6a:68:fa:ef:1f:04:10:be:
         e1:50:10:35:e0:a4:38:34:bf:0a:dd:13:e6:58:e6:a4:4d:b2:
         19:1a:bf:a6:03:05:be:a8:87:d5:3b:b4:46:4a:3f:d5:fb:0c:
         b7:4d:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:54:03 2026 by rpki-client