Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
File:                     1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft (raw, json)
Hash identifier:          Mxuq/DQOylPB2WNnLQj13aqZg4+etqAcwyZC33VGUGc=
Subject key identifier:   EE:1B:61:A5:06:58:69:8D:00:FB:25:5F:63:07:4F:A3:A4:55:94:F9
Authority key identifier: D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1
Certificate issuer:       /CN=A91FBC9F/serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
Manifest number:          27
Signing time:             Sun 19 Apr 2026 08:26:43 +0000
Manifest this update:     Sun 19 Apr 2026 08:26:42 +0000
Manifest next update:     Sun 26 Apr 2026 08:26:42 +0000
Files and hashes:         1: 1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl (hash: LFMin5tAPyMbQFFoPjkQnZNQtmGhngnMhzsq3Sqf07Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 26 Apr 2026 04:21:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC9F, serialNumber=D56CF64D6DCAF910C7B12C89B2103807746BA6E1
        Validity
            Not Before: Apr 19 08:26:42 2026 GMT
            Not After : Apr 26 08:26:42 2026 GMT
        Subject: CN=69e491c3-66ce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:42:5f:e9:3f:33:d0:d8:67:0a:26:b7:24:eb:
                    e5:a9:a5:3c:d2:12:79:c8:e7:7d:6e:a0:d6:a4:d3:
                    4e:37:15:53:e9:7e:11:db:86:d8:1f:15:82:7b:1a:
                    11:9d:80:b1:e8:cc:50:1f:1f:1f:aa:58:49:bb:2f:
                    85:37:fd:13:d3:2c:2f:f7:28:1e:ff:49:31:37:d2:
                    39:21:1f:cd:8f:dd:41:dd:b0:6c:cc:c0:f2:9f:8d:
                    2f:0f:a4:6f:af:23:a3:16:b0:01:1d:dd:38:f8:4e:
                    6e:70:94:85:91:a1:bb:4d:3b:16:81:03:4d:0d:7c:
                    61:f6:91:d6:db:dd:d7:19:aa:7f:c8:b5:41:4d:3a:
                    0e:41:31:d2:bc:76:30:df:c3:81:a0:55:6b:a8:49:
                    9b:9a:41:37:28:3b:44:46:86:16:e6:40:77:a3:55:
                    15:ae:a2:7f:74:c8:91:80:77:70:a3:bc:16:c3:bb:
                    37:cd:1f:ad:d0:59:29:9f:7c:49:e4:39:37:fe:cf:
                    7e:3b:26:0c:58:69:f9:df:cf:6c:02:5e:f5:fb:50:
                    d6:ee:aa:48:f8:4b:8e:aa:6b:86:73:80:2d:63:f4:
                    ae:bb:40:71:d1:09:6f:1f:14:f6:09:26:e7:27:33:
                    4f:0e:d3:8e:70:a1:d5:89:28:33:6b:eb:9e:1a:27:
                    01:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:1B:61:A5:06:58:69:8D:00:FB:25:5F:63:07:4F:A3:A4:55:94:F9
            X509v3 Authority Key Identifier:
                keyid:D5:6C:F6:4D:6D:CA:F9:10:C7:B1:2C:89:B2:10:38:07:74:6B:A6:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1Wz2TW3K-RDHsSyJshA4B3RrpuE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC9F/65594C9C0D8011F1920B3A0E243D8C67/1Wz2TW3K-RDHsSyJshA4B3RrpuE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:92:e7:84:44:22:6c:9c:b6:6f:32:98:26:1f:fe:11:64:dd:
         09:36:52:e5:75:8f:e7:26:56:99:e8:45:61:c1:48:42:7a:7f:
         b3:05:6a:28:69:cb:10:88:12:d4:b9:59:dd:14:a7:be:8a:6a:
         da:a5:b9:3e:3c:26:62:ab:42:f3:62:f2:45:43:1d:86:af:93:
         84:97:dc:80:ff:b7:d3:d2:4f:b1:33:ac:8f:0f:7f:1a:6b:a0:
         21:73:41:aa:be:ff:3c:eb:85:78:fa:f2:e1:bd:d2:f0:01:08:
         9f:e7:33:36:47:7e:93:36:10:07:70:f0:e6:af:af:9e:b2:7f:
         70:4a:c4:03:68:da:e9:f6:b0:a8:92:07:3e:77:2d:cc:9c:53:
         e0:44:15:a2:9e:33:2b:57:ba:39:14:0c:3e:e2:d4:22:24:d1:
         2a:2e:cf:1f:d8:bf:67:de:a4:7d:28:c5:ab:34:e0:df:78:85:
         19:5e:6c:61:b2:ed:39:e6:f2:dd:79:da:59:9f:0d:cb:5e:cf:
         87:3f:52:7b:a0:6b:a6:3e:df:51:ba:56:21:f1:32:92:fc:f3:
         87:c4:8f:ff:62:93:79:22:3f:42:5f:c9:9a:3d:5f:61:b5:d0:
         41:9d:7b:1d:d5:f8:25:f9:cb:ea:72:e7:13:47:62:82:95:be:
         57:49:c1:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 10:22:05 2026 by rpki-client