Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
File:                     MfW8lHJxAkr0efYTZGbay_FDhsI.mft (raw, json)
Hash identifier:          URNa2opZg11MLUeEsmMrhPJHfzwU/wQ/HfH+8R6QyPw=
Subject key identifier:   03:83:73:A9:B9:6D:62:33:29:CE:0E:92:53:E3:B9:3E:AF:AC:D0:EA
Authority key identifier: 31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2
Certificate issuer:       /CN=A914F4AA/serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
Manifest number:          353D
Signing time:             Tue 12 May 2026 14:35:04 +0000
Manifest this update:     Tue 12 May 2026 14:35:04 +0000
Manifest next update:     Tue 19 May 2026 14:35:04 +0000
Files and hashes:         1: MfW8lHJxAkr0efYTZGbay_FDhsI.crl (hash: 3hH2rG3hb87PcYfSI/86kvAPzyg0BsCCIT502o1ZrYc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl
                          rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:35:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914F4AA, serialNumber=31F5BC947271024AF479F6136466DACBF14386C2
        Validity
            Not Before: May 12 14:35:04 2026 GMT
            Not After : May 19 14:35:04 2026 GMT
        Subject: CN=6a033a98-ef16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5f:0f:bd:ce:77:3e:9e:87:aa:fd:45:cf:af:
                    1b:e4:9a:07:ef:f2:92:d9:20:07:07:f4:6a:c8:e7:
                    2d:e5:3b:10:05:0b:a4:87:35:fd:03:d5:76:1b:09:
                    4e:b0:42:59:c7:f5:6e:7f:42:c7:16:6d:24:e3:c9:
                    04:a5:ff:c8:9b:2e:7b:4b:23:9e:95:35:75:b6:01:
                    40:b5:01:c3:7b:4b:29:ee:8b:88:b6:77:a3:86:64:
                    6f:62:b5:3d:b1:26:03:7c:88:01:a1:8d:1b:6d:eb:
                    2f:a6:53:97:04:74:5e:9c:7c:77:c5:25:b8:22:99:
                    ee:3f:d9:59:1f:da:4f:a4:05:b1:ca:b5:e1:df:15:
                    80:8a:0d:00:84:36:06:f7:dc:81:ae:82:86:22:73:
                    a8:7f:08:fc:b3:fa:9c:12:0f:64:b0:76:57:b6:6f:
                    e8:d1:5f:0e:d6:e3:a4:52:0c:2e:bd:99:07:9d:9f:
                    a1:98:dd:f8:ce:25:2d:e3:e8:75:5a:3a:d1:39:ba:
                    40:80:4c:f6:4d:20:45:d9:f3:1c:8d:90:8a:c7:70:
                    a5:dd:47:76:82:e9:9d:d3:fc:cc:f4:87:86:3c:30:
                    73:0b:17:68:9c:3a:e5:e2:9e:7c:e3:61:61:e9:87:
                    9c:27:d3:9a:b9:b1:36:41:fa:02:f0:2e:7b:21:a2:
                    e7:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:83:73:A9:B9:6D:62:33:29:CE:0E:92:53:E3:B9:3E:AF:AC:D0:EA
            X509v3 Authority Key Identifier:
                keyid:31:F5:BC:94:72:71:02:4A:F4:79:F6:13:64:66:DA:CB:F1:43:86:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MfW8lHJxAkr0efYTZGbay_FDhsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914F4AA/E9F2CA401D8A11E2834D3EE508B02CD2/MfW8lHJxAkr0efYTZGbay_FDhsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:85:40:44:25:bc:60:6b:22:89:87:36:fb:19:f9:7b:cf:7f:
         ae:a8:31:7e:6d:83:94:a4:7d:68:e6:a4:57:c9:ac:9c:46:67:
         1c:c6:bb:16:6a:65:11:69:5b:53:d2:52:75:a6:d3:13:0e:8c:
         d5:6a:56:5b:25:77:9d:a6:ba:26:7c:78:db:e8:1c:29:37:15:
         40:38:13:17:d2:0a:63:75:87:ea:66:07:1f:85:ec:9a:df:1f:
         6d:6d:ba:3c:13:c9:60:dd:cd:a9:f6:b2:99:74:43:0a:79:02:
         bd:81:ec:7e:e2:bc:ca:3f:ca:f2:3c:72:6b:9e:0e:7b:0e:d2:
         77:a6:4a:7d:77:ce:3b:f1:4a:3e:3b:d6:fc:8e:e1:ee:62:7e:
         12:62:8d:f4:3c:0c:21:dc:04:12:99:80:b5:43:45:49:57:48:
         62:5f:52:80:12:e8:d6:05:e4:dd:5e:56:4e:54:c5:76:e8:ed:
         f8:63:c6:2e:ef:87:e1:5a:e0:71:b7:73:04:6a:dd:39:22:a2:
         c0:04:55:30:b4:7d:c0:ec:0f:92:d2:24:01:94:41:d7:18:e4:
         1d:5b:27:95:fd:86:bf:e8:ee:10:dc:79:73:2c:5f:a7:c4:9c:
         7d:62:9b:94:27:5c:98:8e:89:ae:c3:f0:e6:98:62:35:d6:d2:
         cd:b0:51:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:30:27 2026 by rpki-client