Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
File:                     nt5PWK8pvMEDuQUn99LJpwu_eFs.mft (raw, json)
Hash identifier:          L5cZnRwL2nlLZ96H1a5nruXZdGO6WmxXZC4f0JXy8cI=
Subject key identifier:   25:42:F2:EF:0E:D8:EF:FF:9D:E3:65:DD:52:75:2E:7E:5B:0A:2E:FA
Authority key identifier: 9E:DE:4F:58:AF:29:BC:C1:03:B9:05:27:F7:D2:C9:A7:0B:BF:78:5B
Certificate issuer:       /CN=A912E8F6/serialNumber=9EDE4F58AF29BCC103B90527F7D2C9A70BBF785B
Certificate serial:       2F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nt5PWK8pvMEDuQUn99LJpwu_eFs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
Manifest number:          2F
Signing time:             Fri 27 Mar 2026 08:14:38 +0000
Manifest this update:     Fri 27 Mar 2026 08:14:37 +0000
Manifest next update:     Fri 03 Apr 2026 08:14:37 +0000
Files and hashes:         1: nt5PWK8pvMEDuQUn99LJpwu_eFs.crl (hash: jlYNxKSxn+y6I+pw83ZmgFTQVv2GB7CvbZ/yo7xVwEo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.crl
                          rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nt5PWK8pvMEDuQUn99LJpwu_eFs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 08:14:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912E8F6, serialNumber=9EDE4F58AF29BCC103B90527F7D2C9A70BBF785B
        Validity
            Not Before: Mar 27 08:14:37 2026 GMT
            Not After : Apr  3 08:14:37 2026 GMT
        Subject: CN=69c63c6e-62c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:ef:e1:97:84:c6:1f:6a:67:0f:41:4d:6e:bd:
                    9f:6b:ad:58:ba:37:d1:8f:b6:9c:a2:96:d0:e3:16:
                    96:a0:b1:6d:32:0e:c4:44:bb:44:3c:ba:1f:54:70:
                    d1:b1:e5:ba:84:b5:3e:65:b0:dd:89:f4:2a:e5:5c:
                    53:f4:78:0e:ee:c9:d6:be:9d:39:2b:1c:d9:ef:cb:
                    08:dd:7b:88:be:18:bf:6b:00:93:69:59:bd:45:93:
                    1b:de:f3:30:37:68:b7:06:4c:00:8a:c1:dc:52:b2:
                    d5:30:67:05:f5:0b:c0:5a:d9:d8:97:ab:ef:81:b6:
                    b9:43:87:24:44:9f:62:9e:08:fd:31:b6:4e:b9:d2:
                    4a:6b:87:5e:69:31:cb:42:89:50:b8:54:63:9d:88:
                    99:c6:e2:f3:b7:12:2f:a8:89:12:76:22:9c:12:18:
                    3b:94:71:2b:79:d6:7e:39:f9:a7:60:4b:b9:91:00:
                    70:d4:1f:33:1c:21:45:ae:b0:76:e2:c7:04:a3:b1:
                    12:dc:41:c0:a4:39:aa:e6:8e:8a:ed:90:b8:84:f2:
                    b9:71:73:d7:c9:32:4b:95:75:74:f6:99:a6:c8:7a:
                    ad:7f:89:c2:19:c8:a7:b9:79:64:e8:6b:1d:37:99:
                    ef:48:45:16:5e:59:88:b6:1c:f4:c3:99:69:0b:0f:
                    36:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:42:F2:EF:0E:D8:EF:FF:9D:E3:65:DD:52:75:2E:7E:5B:0A:2E:FA
            X509v3 Authority Key Identifier:
                keyid:9E:DE:4F:58:AF:29:BC:C1:03:B9:05:27:F7:D2:C9:A7:0B:BF:78:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nt5PWK8pvMEDuQUn99LJpwu_eFs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912E8F6/460E41AEE7AF11F09B06A342536F56BC/nt5PWK8pvMEDuQUn99LJpwu_eFs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:d4:61:68:12:fd:50:d7:f3:19:d6:1c:af:3d:25:5e:18:83:
         02:00:36:af:59:a9:e1:e4:dd:f9:06:fe:5c:74:ee:a1:ea:d5:
         ef:3b:81:4d:e3:0e:b1:ec:3c:34:aa:c5:10:56:eb:39:23:cf:
         06:8f:79:87:56:3d:de:f2:80:9d:50:db:ee:dc:da:4f:92:28:
         a2:9d:77:d6:d0:9d:12:b5:7b:3d:45:07:f5:bf:22:4b:e7:34:
         3c:66:7b:4d:34:e3:06:e7:aa:4b:11:a9:01:4c:ff:2c:6d:70:
         a0:4d:fd:05:47:d7:97:dc:c1:09:5d:4c:c5:41:1f:14:e8:2b:
         7f:3d:f7:ab:8a:f5:f3:84:11:a9:64:d3:82:db:e0:bd:cc:93:
         be:f9:4f:75:ca:26:fb:c2:fc:4f:fe:a6:93:37:15:ae:e4:6e:
         7e:f3:5f:9e:5a:4a:1a:40:8b:3d:15:18:17:80:37:0f:3a:19:
         58:d0:8b:ab:37:8b:8a:15:1f:32:d1:2a:31:58:d2:1b:b2:d9:
         8d:4d:9c:ca:be:91:02:ee:85:d6:46:e8:1a:25:61:7e:24:98:
         7b:3f:1b:b2:25:7b:5e:fc:10:7d:65:98:3d:f0:ea:38:c7:19:
         c6:58:eb:e2:4e:58:84:a5:1a:f2:54:8e:51:b9:cc:c5:4e:a0:
         3a:64:d4:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:47:53 2026 by rpki-client