Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
File:                     0I2GgcK-TUfCopBV9m5olVhGF_c.mft (raw, json)
Hash identifier:          AY87wsPIisbAOT2+6f8kKZxi4wC7OUTuERxsEMCdyCY=
Subject key identifier:   CC:D0:4C:B4:B6:C8:C3:61:8A:E3:8B:F4:A3:EA:2C:D5:89:22:4B:FC
Authority key identifier: D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7
Certificate issuer:       /CN=A91FCEB1/serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
Certificate serial:       1B1E
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
Manifest number:          22C5
Signing time:             Sat 18 Apr 2026 15:52:08 +0000
Manifest this update:     Sat 18 Apr 2026 15:52:07 +0000
Manifest next update:     Sat 25 Apr 2026 15:52:07 +0000
Files and hashes:         1: 0I2GgcK-TUfCopBV9m5olVhGF_c.crl (hash: iPBJho+uuLybn58+UllCB1+uv3qf68G2MLookf9gQHI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl
                          rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 Apr 2026 15:52:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6942 (0x1b1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FCEB1, serialNumber=D08D8681C2BE4D47C2A29055F66E6895584617F7
        Validity
            Not Before: Apr 18 15:52:07 2026 GMT
            Not After : Apr 25 15:52:07 2026 GMT
        Subject: CN=69e3a8a8-e5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:2b:6d:5c:4a:ca:ca:0c:ad:d0:d2:35:d1:
                    56:25:56:64:67:78:0b:79:51:33:74:8f:73:26:1f:
                    4c:77:34:38:a8:a2:ac:8b:13:61:5a:8c:b2:2a:5a:
                    e1:57:43:58:6c:89:8f:64:a4:f4:3c:80:f2:f6:9a:
                    bd:3c:99:e4:0c:60:ce:56:88:fd:6e:e5:cb:14:b9:
                    08:05:4d:bf:d4:50:08:95:2f:7c:6b:1b:9a:86:36:
                    cd:8e:1e:9c:7c:0f:11:1d:49:bc:71:0a:a1:d9:76:
                    4f:40:2c:9c:c0:4e:b8:1e:12:34:4d:db:a6:b8:95:
                    0a:16:24:53:08:6e:06:d6:e0:83:a3:11:0d:f8:80:
                    b2:e1:bd:aa:63:c6:01:5f:40:2e:ef:86:c4:61:80:
                    cf:d7:94:8e:59:3a:e1:74:e6:4c:0e:a6:73:47:ad:
                    b5:b8:e0:43:07:54:af:2b:26:0f:d4:84:79:38:c6:
                    32:6f:bd:b7:32:5c:2a:48:b5:ca:85:3e:59:b1:fa:
                    f7:b9:62:83:e5:2a:fe:52:f8:95:59:28:68:b3:ae:
                    0b:b3:d3:c8:29:f5:77:fa:1a:09:27:6b:20:67:ba:
                    93:aa:5f:a6:b4:7a:33:a7:79:86:7e:c3:e3:86:80:
                    bd:e6:fe:fe:ad:91:05:f9:38:0e:f9:d0:47:95:58:
                    19:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D0:4C:B4:B6:C8:C3:61:8A:E3:8B:F4:A3:EA:2C:D5:89:22:4B:FC
            X509v3 Authority Key Identifier:
                keyid:D0:8D:86:81:C2:BE:4D:47:C2:A2:90:55:F6:6E:68:95:58:46:17:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/0I2GgcK-TUfCopBV9m5olVhGF_c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FCEB1/9C14B4063A2111E79AA0D51CC4F9AE02/0I2GgcK-TUfCopBV9m5olVhGF_c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:91:d8:98:fe:bc:ea:9d:65:3f:fd:2d:f5:d5:93:bb:e9:ed:
         99:16:70:81:15:e4:e9:8a:1e:3f:fa:13:44:0b:33:34:0f:66:
         21:d2:94:18:dd:80:76:ca:dd:bc:be:32:78:4b:5a:4e:f2:6d:
         ba:0d:58:da:8b:d1:4c:00:af:54:75:27:76:77:a0:f5:8b:76:
         9c:29:80:17:3e:84:d3:97:79:08:8c:40:d7:af:8a:da:b3:14:
         4f:e8:44:35:e9:f6:30:ee:50:99:30:71:4c:d8:bc:c9:39:b3:
         65:b6:a5:21:3b:a3:b2:0e:c3:1d:bf:4e:5f:e4:48:1d:1e:1f:
         79:18:e8:be:4f:0d:e9:0a:bb:6e:15:59:ca:bf:66:3b:a8:44:
         d3:bc:2e:8c:58:4f:f6:05:fd:9b:04:2c:d9:2a:5d:0b:85:c5:
         1b:48:77:35:2a:22:ea:bd:54:30:aa:74:20:02:ca:6e:62:39:
         f7:5e:2e:30:0d:7d:2d:18:d6:b8:ed:82:4a:cc:4a:29:9f:e7:
         e0:50:03:ef:e9:81:6c:17:60:89:0b:82:c7:ae:aa:bb:1e:3c:
         6a:36:cf:b1:70:4a:53:b2:42:2d:3f:e8:bd:e4:f4:04:05:47:
         26:c1:e8:c6:43:d1:dd:3c:8c:57:22:c4:4d:8b:8b:9f:03:7d:
         c0:69:23:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 19 08:53:58 2026 by rpki-client