Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
File:                     rU1lO4NcTh3pjsZjdoiamoN2SwI.mft (raw, json)
Hash identifier:          BE+AWfrwTyV3/OabMeXRJh8V4qBCGdBsKxnLQNeis3o=
Subject key identifier:   5A:F4:B3:8F:B8:5D:A6:1F:71:24:EF:06:47:B4:17:A8:7C:7E:E7:98
Authority key identifier: AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02
Certificate issuer:       /CN=A914B669/serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
Certificate serial:       351E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
Manifest number:          351E
Signing time:             Tue 24 Mar 2026 14:44:02 +0000
Manifest this update:     Tue 24 Mar 2026 14:44:01 +0000
Manifest next update:     Tue 31 Mar 2026 14:44:01 +0000
Files and hashes:         1: rU1lO4NcTh3pjsZjdoiamoN2SwI.crl (hash: AugV9vN4CIYx90TKYzghsCA/KVspdNqJ8wBhuaATAZc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl
                          rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 14:44:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13598 (0x351e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B669, serialNumber=AD4D653B835C4E1DE98EC66376889A9A83764B02
        Validity
            Not Before: Mar 24 14:44:01 2026 GMT
            Not After : Mar 31 14:44:01 2026 GMT
        Subject: CN=69c2a332-ac29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:fe:bd:5a:f7:9f:72:e6:85:8d:8f:55:07:35:
                    0f:83:b9:cf:ff:54:63:50:1b:b3:7b:80:01:c4:fd:
                    7f:03:61:31:54:56:da:61:64:54:9b:20:54:93:41:
                    c1:b2:95:18:cb:1d:17:29:a2:7d:21:59:f9:84:08:
                    34:7c:33:ad:38:8b:a1:4f:e5:1e:13:93:49:91:9a:
                    8c:90:4c:39:e8:1d:36:2b:f5:4f:8b:c6:d1:6d:23:
                    65:38:9b:d7:e7:59:d7:b9:e9:0d:3c:6d:a6:a8:0c:
                    61:d2:16:e3:90:b9:59:4f:8c:2c:b3:af:97:c4:67:
                    99:ed:ce:88:8e:d4:f8:59:f4:7e:5e:1c:c1:bd:bc:
                    69:11:24:05:84:f2:e1:34:2f:3c:08:53:2f:6b:5e:
                    cd:9c:cb:a3:40:3c:f6:09:55:82:9e:fa:28:7f:a7:
                    07:35:67:fb:c9:3a:48:d1:4c:df:a9:af:9b:c9:02:
                    fa:12:3a:9f:22:68:27:f8:4f:0d:08:a6:1f:35:f8:
                    9e:29:fe:29:d3:e3:dc:89:21:90:c6:80:96:86:c7:
                    b6:30:64:8e:d0:0c:71:74:d4:b6:95:c2:f2:83:34:
                    df:b1:c0:5f:22:b5:2b:6c:89:c3:9c:6e:fd:57:17:
                    18:b0:46:70:2c:eb:b8:c8:7f:cb:e7:99:83:cf:66:
                    2d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:F4:B3:8F:B8:5D:A6:1F:71:24:EF:06:47:B4:17:A8:7C:7E:E7:98
            X509v3 Authority Key Identifier:
                keyid:AD:4D:65:3B:83:5C:4E:1D:E9:8E:C6:63:76:88:9A:9A:83:76:4B:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rU1lO4NcTh3pjsZjdoiamoN2SwI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B669/9D5BF6FE1D9211E2886EAAF508B02CD2/rU1lO4NcTh3pjsZjdoiamoN2SwI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:e9:20:ea:59:b9:da:96:92:be:61:0c:49:38:bb:3d:51:c6:
         8a:c7:57:dd:d9:3b:eb:8b:40:00:b0:a6:62:ba:b0:73:d4:c0:
         81:f8:07:87:4c:ab:50:e3:f4:bb:10:6e:65:57:a2:2a:1b:1a:
         df:b8:40:0b:e3:11:61:75:c3:47:2b:1d:06:b6:c5:26:77:fe:
         61:e9:f0:bc:46:9f:7c:9f:0d:2b:bf:58:16:d0:aa:ce:3f:23:
         98:ca:f0:c2:a6:ee:b3:b4:28:6c:d3:ce:95:75:bc:50:fb:07:
         5e:7e:75:e7:df:21:ad:e1:5f:40:8a:9c:b0:d0:84:32:e8:2a:
         63:d0:97:e3:4d:ce:af:a9:75:73:cd:cf:34:d7:8e:06:49:bb:
         33:cb:8f:71:cc:10:8c:13:89:2b:58:b7:e4:c0:a8:e5:b0:25:
         bf:2a:49:ae:74:e1:e4:27:a4:ba:b8:69:57:af:b8:00:1e:01:
         86:44:5c:65:8a:8b:b9:46:bf:cb:fb:a2:03:eb:5b:a2:ac:5c:
         ab:88:cb:21:7c:e7:e0:61:58:24:0e:c5:43:43:ce:9d:8f:82:
         85:44:28:b9:29:04:7d:47:68:d6:d7:60:2b:8e:15:3d:43:14:
         c8:ba:4e:e4:3c:d2:3f:ce:8d:3f:f0:a3:0c:a9:27:96:e3:89:
         68:23:0e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:57:02 2026 by rpki-client