Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
File:                     1u0VCduHw0xGCiZBoZt_SE5NxEU.mft (raw, json)
Hash identifier:          rH4Rn/O8n+ZG3S9IQzH8Gk3oOPoQIFOT93DtVOf5azM=
Subject key identifier:   33:0E:34:44:62:37:68:6E:90:00:BE:4B:FC:45:88:42:21:06:2F:1A
Authority key identifier: D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45
Certificate issuer:       /CN=A91F5216/serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
Manifest number:          0279
Signing time:             Fri 17 Apr 2026 01:40:20 +0000
Manifest this update:     Fri 17 Apr 2026 01:40:20 +0000
Manifest next update:     Fri 24 Apr 2026 01:40:20 +0000
Files and hashes:         1: 1u0VCduHw0xGCiZBoZt_SE5NxEU.crl (hash: s43DHPHSR2fjzwjAEELagcQOIgbJ157xYw68tK4WnEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl
                          rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F5216, serialNumber=D6ED1509DB87C34C460A2641A19B7F484E4DC445
        Validity
            Not Before: Apr 17 01:40:20 2026 GMT
            Not After : Apr 24 01:40:20 2026 GMT
        Subject: CN=69e18f84-0265
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e2:db:24:c6:ae:7b:39:94:88:f9:c5:0b:27:
                    97:c2:5d:a4:6a:94:31:16:c2:45:e0:92:d2:ea:0b:
                    39:4c:c0:61:95:6c:19:bf:d9:24:29:80:4c:dd:56:
                    60:93:c9:91:08:8f:6b:56:62:ac:14:18:c3:7c:69:
                    cf:79:9d:7a:4f:82:b3:0d:65:59:ce:08:89:a1:79:
                    a2:74:63:93:2a:d5:ae:36:a9:e9:4c:fe:f7:c0:75:
                    90:7d:b4:e3:fe:22:cd:43:54:00:25:18:cb:6d:04:
                    58:8f:ed:85:05:bd:63:66:bc:35:60:46:b9:94:90:
                    69:be:a2:da:b2:a4:89:0a:e4:5c:98:f7:23:1d:91:
                    17:4b:0e:de:aa:c4:be:59:22:c8:62:aa:5f:3d:ed:
                    48:c3:e1:a4:46:c9:f7:ce:3e:16:39:6d:7f:18:78:
                    79:d7:59:04:e8:b7:9a:23:6a:1a:e5:d7:fe:44:6b:
                    e0:90:de:8b:95:fc:57:ea:26:cc:21:b0:b3:2e:28:
                    6a:20:de:39:4b:48:e9:b2:50:fd:a1:55:43:d8:16:
                    e5:d7:59:bd:19:f9:58:1e:6b:7e:66:d7:99:2d:18:
                    eb:56:f5:fd:b6:ed:0c:7f:8f:d8:12:b3:c5:1b:7c:
                    02:ec:4b:bf:c1:76:eb:d6:be:6a:a9:40:c2:61:c2:
                    7c:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:0E:34:44:62:37:68:6E:90:00:BE:4B:FC:45:88:42:21:06:2F:1A
            X509v3 Authority Key Identifier:
                keyid:D6:ED:15:09:DB:87:C3:4C:46:0A:26:41:A1:9B:7F:48:4E:4D:C4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1u0VCduHw0xGCiZBoZt_SE5NxEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5216/6645ACA66E0811EDBEED6284C4F9AE02/1u0VCduHw0xGCiZBoZt_SE5NxEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:7e:f8:69:14:b3:de:db:2e:1e:41:d8:bf:4e:c7:d8:40:5d:
         cb:8f:e8:0f:01:88:9d:4d:0b:68:9c:ed:54:c3:0b:7f:ee:e8:
         a9:af:0d:22:c6:97:62:5d:7c:77:6a:c1:e3:53:90:85:fb:7a:
         3a:1b:00:55:7a:1e:5d:6d:e1:d0:58:fc:39:8e:ce:8d:ea:97:
         8b:40:12:fc:66:f2:2a:84:4b:37:00:cf:70:74:00:ad:4c:83:
         8a:29:4c:d7:9b:5d:13:4d:d9:ba:4b:7e:0f:d6:9f:99:7d:7f:
         49:79:43:30:51:28:18:8e:c8:05:3c:09:2a:d0:f9:94:01:ca:
         b7:97:6f:20:3d:85:40:b4:31:54:1b:7f:9f:77:5a:19:f3:c9:
         83:8e:81:35:8a:fe:86:ac:f5:1e:a4:77:32:dd:69:b1:75:1a:
         60:d3:35:10:35:04:15:05:e7:e4:03:76:25:03:84:62:80:a9:
         e6:e5:87:4f:0f:ff:fe:94:22:15:9d:3f:d9:2d:e4:74:c6:fc:
         dc:c6:d6:f7:d4:4c:a4:c6:2e:18:78:74:2b:bf:d3:5e:94:b7:
         7f:18:ea:62:3e:9a:dd:2d:61:9d:0a:31:fe:87:8b:d1:8c:b7:
         16:b0:e1:3b:5b:fd:24:70:54:06:ec:5b:e6:60:f5:74:7e:22:
         d0:1e:52:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 20:13:31 2026 by rpki-client