Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
File:                     hjLNJWad2HIgIEUXQG4_ay8SklE.mft (raw, json)
Hash identifier:          kPe2i1oLdW8fs0q1uap5dN8eZpi7hauWfGVas7pjttw=
Subject key identifier:   64:01:14:F5:AA:81:8A:39:96:18:3C:48:06:B1:07:1C:DE:E3:DB:2E
Authority key identifier: 86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51
Certificate issuer:       /CN=A91F320A/serialNumber=8632CD25669DD87220204517406E3F6B2F129251
Certificate serial:       0116
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
Manifest number:          0116
Signing time:             Fri 17 Apr 2026 05:35:56 +0000
Manifest this update:     Fri 17 Apr 2026 05:35:55 +0000
Manifest next update:     Fri 24 Apr 2026 05:35:55 +0000
Files and hashes:         1: hjLNJWad2HIgIEUXQG4_ay8SklE.crl (hash: aYtaWR+FVceIBzKztE4/NlWIw5js7of0LHLXQesYUHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl
                          rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:35:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 278 (0x116)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F320A, serialNumber=8632CD25669DD87220204517406E3F6B2F129251
        Validity
            Not Before: Apr 17 05:35:55 2026 GMT
            Not After : Apr 24 05:35:55 2026 GMT
        Subject: CN=69e1c6bb-c8ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ba:90:a0:8a:80:62:4a:83:5c:11:01:cb:79:
                    1f:5a:5d:64:b6:5a:99:8e:f9:20:82:3a:9e:d6:a8:
                    a0:f5:6b:d1:3e:63:19:2a:53:ac:fc:e4:2d:53:2e:
                    78:e7:12:38:ce:49:d7:c0:6d:4d:73:62:8c:7f:b1:
                    e1:8c:8f:d0:23:42:df:0f:4c:c0:b1:2b:78:1d:fa:
                    f8:df:8f:3f:99:9c:e7:e2:55:19:b2:fe:84:7a:ec:
                    1f:42:55:d0:7a:85:87:f1:7e:31:57:52:c2:5b:a8:
                    c5:79:1f:1b:b0:ed:dd:13:35:d7:09:c5:44:35:83:
                    69:83:95:35:3d:a9:69:a4:6e:9a:3c:2e:a8:65:8e:
                    13:8d:e5:27:0d:7d:51:cf:97:58:36:33:be:31:1f:
                    9d:75:2c:f3:0e:78:37:bb:e6:48:00:e4:ea:8b:35:
                    14:cf:8a:85:a9:5a:05:2c:9a:bf:db:6f:fd:c8:2c:
                    31:e1:1e:b5:b2:5c:52:8c:bf:09:56:16:e9:27:f5:
                    85:5e:3f:68:d7:d4:62:45:5b:3b:c1:1e:78:69:9c:
                    d2:7a:a2:6f:34:7e:24:2a:69:2f:5a:6d:9d:00:53:
                    6d:13:f1:46:66:b1:8a:b7:ee:f1:da:b1:6c:aa:f2:
                    fc:f7:f2:63:a4:b0:6a:ca:2a:76:09:f9:e3:1b:88:
                    1e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:01:14:F5:AA:81:8A:39:96:18:3C:48:06:B1:07:1C:DE:E3:DB:2E
            X509v3 Authority Key Identifier:
                keyid:86:32:CD:25:66:9D:D8:72:20:20:45:17:40:6E:3F:6B:2F:12:92:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/hjLNJWad2HIgIEUXQG4_ay8SklE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F320A/80AAED82957411EF85E0FB20C4F9AE02/hjLNJWad2HIgIEUXQG4_ay8SklE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:6a:20:2a:0a:83:f3:31:31:ca:a6:2d:3f:68:29:44:39:ed:
         83:52:dc:3c:5a:c6:92:e2:36:db:5c:00:8c:3f:ca:7c:8a:22:
         d7:e2:d9:22:1c:65:a9:fc:91:46:2e:91:89:aa:45:41:94:52:
         99:bb:9b:91:fc:ca:b6:52:7c:5f:cd:fa:c6:bf:ec:fb:93:46:
         c7:39:d9:ed:b5:69:0d:61:14:ec:04:a6:df:bb:85:12:24:0b:
         9d:e4:62:61:e4:66:f1:4e:83:b7:b4:5b:15:9b:16:86:02:b7:
         e5:37:98:b7:a5:0e:6f:19:ae:13:ea:d9:4f:1f:14:74:23:bd:
         a0:e5:cc:d7:b5:e1:47:76:72:50:ac:c1:43:f4:cf:d3:f8:d4:
         6a:94:0d:12:7e:b8:0a:66:47:f8:a3:4a:f0:4f:b5:d0:15:5f:
         9c:82:c3:55:bf:d1:af:c1:42:a2:04:57:2d:98:97:da:f4:46:
         c0:cc:c5:89:11:52:77:53:3b:e1:f2:d7:df:cc:38:13:ec:27:
         e9:c4:83:90:8d:b0:41:9e:95:d0:e8:2c:93:57:0c:68:f1:57:
         54:64:55:27:a9:90:f5:78:8c:e8:57:68:db:4d:29:78:1b:0f:
         aa:50:de:54:f4:19:95:1f:74:b0:8d:df:f3:cf:2a:c2:6f:06:
         3f:e9:9e:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:00:58 2026 by rpki-client