Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          Cu4Gbjknkots2aI6LFTDCc53tDj0rtKoAOIIhlmjWpM=
Subject key identifier:   C4:F0:0C:A2:CB:E2:44:B2:EE:E5:35:3A:2C:18:AA:38:91:0D:8B:9E
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       3538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          3538
Signing time:             Tue 12 May 2026 15:13:10 +0000
Manifest this update:     Tue 12 May 2026 15:13:09 +0000
Manifest next update:     Tue 19 May 2026 15:13:09 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: C/cy2k2X2NNuRHl3o7bGKP7vkMLBU4Rhd/x/OThHR7k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:13:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: May 12 15:13:09 2026 GMT
            Not After : May 19 15:13:09 2026 GMT
        Subject: CN=6a034385-fe42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4b:6d:86:7b:e7:45:1a:92:62:69:c7:4d:ba:
                    59:7d:f9:23:18:98:39:22:2f:75:b9:da:6c:8a:71:
                    25:25:40:cd:dd:b3:9a:8d:b5:a2:bf:bd:64:77:81:
                    41:37:ea:df:be:25:39:a8:3b:f4:20:77:5e:cb:97:
                    b6:6b:b3:0c:df:b2:ef:88:6b:d0:51:e2:e6:8f:8c:
                    3d:a6:40:3b:73:51:dd:f2:f3:8d:68:01:8f:02:44:
                    f8:35:c2:b3:cd:49:29:04:a5:56:48:5d:fe:97:3d:
                    fb:08:b4:f0:97:8a:2d:68:5c:3a:35:a5:76:09:dd:
                    ea:23:1f:41:c2:00:40:07:84:53:a3:21:b9:59:54:
                    6e:78:30:03:6f:76:b9:92:53:aa:b9:83:96:88:59:
                    a7:d9:2b:6e:9c:71:df:1d:36:dc:e0:92:2b:cd:33:
                    50:67:01:aa:fb:d3:ac:41:fd:16:a9:36:e0:e0:a0:
                    98:6a:7c:c0:29:09:89:a0:96:df:d0:d7:44:b0:95:
                    d4:43:0e:53:6d:99:2f:c5:a3:df:d3:4f:80:0c:86:
                    54:6e:e6:c2:bf:06:d3:f6:a9:2a:9e:7e:0d:e3:ef:
                    a5:68:81:e9:fc:7c:1f:15:31:1c:51:98:b4:02:4a:
                    92:05:c3:6e:50:1b:56:47:0c:c3:f3:b7:fe:f7:1f:
                    98:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F0:0C:A2:CB:E2:44:B2:EE:E5:35:3A:2C:18:AA:38:91:0D:8B:9E
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         94:9b:eb:ce:68:53:d9:9e:3e:c3:f1:b3:7e:49:d6:b9:b5:75:
         8b:d2:0a:e5:39:3e:a1:c3:b6:e6:b0:54:68:fe:92:e0:90:ae:
         50:13:3e:c9:03:e3:77:93:c9:32:90:54:7c:03:c7:4b:3c:ef:
         4b:6a:55:08:a8:5f:fc:0c:8f:77:87:db:c4:79:18:01:2a:6f:
         8c:50:71:2d:be:a2:d7:2c:be:29:2d:e1:03:72:96:60:b3:90:
         db:cc:46:5a:bd:fc:65:f5:70:ab:0b:94:a5:70:41:ac:50:0c:
         1b:56:99:46:07:64:75:52:5f:82:66:6f:4d:93:5c:5d:6a:e9:
         64:08:07:f2:eb:a7:43:74:81:e6:ae:d2:79:c0:a4:87:75:60:
         ab:1a:da:cf:91:94:26:c8:ea:4f:8c:34:66:d9:b0:b2:2d:60:
         28:9b:1f:cf:81:6e:07:b2:5e:66:fa:08:a0:94:71:12:54:38:
         79:9d:64:2b:e3:0e:f6:45:24:bf:4b:cb:e0:b1:0a:79:83:d0:
         aa:4d:f6:40:de:bf:0a:2e:04:6b:54:68:c2:c8:e3:da:88:ae:
         97:88:55:8a:be:2b:46:1c:cc:c0:1b:e6:4f:4b:9a:68:8a:76:
         ee:ee:0b:23:bd:42:ed:f8:d0:a2:b2:c9:df:c1:3e:b0:ab:bd:
         e1:f2:74:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:38:58 2026 by rpki-client