Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
File:                     2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft (raw, json)
Hash identifier:          8kBFpaQnkOPnX0yoWAF2Jolds2XKW2861/GuT0qnEnQ=
Subject key identifier:   87:8E:AF:9B:26:D2:77:81:4A:CF:40:74:E0:31:D6:F1:D9:FB:E3:B5
Authority key identifier: D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66
Certificate issuer:       /CN=A918049D/serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
Certificate serial:       4F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
Manifest number:          4F
Signing time:             Wed 25 Mar 2026 07:24:46 +0000
Manifest this update:     Wed 25 Mar 2026 07:24:46 +0000
Manifest next update:     Wed 01 Apr 2026 07:24:46 +0000
Files and hashes:         1: 2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl (hash: iI07JDOkzJpAGW2VnHgJNHz0YH7Ugi0mLa1Y0nT9NDo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl
                          rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 01 Apr 2026 07:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918049D, serialNumber=D8AFF503FE8C5BD2266AA2ECABE552CA75147F66
        Validity
            Not Before: Mar 25 07:24:46 2026 GMT
            Not After : Apr  1 07:24:46 2026 GMT
        Subject: CN=69c38dbe-e2bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:4e:6b:35:3c:9b:d5:ae:a8:ee:11:ed:00:6f:
                    90:4d:d7:4a:8e:57:a6:06:05:b7:90:ba:5d:22:8d:
                    12:7a:af:cf:70:f1:29:6f:32:35:73:27:92:19:aa:
                    11:6e:e3:8c:d0:5d:20:0c:ca:84:1e:30:e6:ba:1c:
                    a1:3a:c4:18:8c:de:8b:a6:f3:e7:e4:4a:8f:21:e2:
                    2d:76:6a:8e:fe:80:e2:92:bf:de:0d:ce:13:07:a4:
                    d4:84:c4:bd:45:cf:a1:1b:58:fa:c6:96:31:64:64:
                    46:f3:2f:d9:b0:c5:ad:f1:5e:5d:ca:e7:cb:94:b5:
                    79:d7:6d:67:43:02:22:92:6a:78:0e:29:d9:95:db:
                    25:62:5a:ac:ef:ae:de:dd:9c:94:98:9c:09:10:9d:
                    fe:c4:f2:4d:46:1a:fa:ae:eb:bc:98:7a:44:d2:36:
                    42:f5:8c:5b:8c:a2:22:d6:32:d4:62:5c:c0:e9:19:
                    2a:43:85:35:fe:dd:bb:de:ba:e4:4c:a8:8a:5d:b9:
                    ee:70:d0:e5:19:9e:6c:77:41:ac:33:2e:3e:1d:93:
                    83:13:cc:f6:42:2e:d3:98:ae:ed:ec:af:90:af:55:
                    0f:1c:20:11:6f:c1:f0:ba:e4:03:db:c8:1a:07:92:
                    29:1a:ab:92:f6:98:ca:dd:96:b9:71:d6:98:03:00:
                    e0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8E:AF:9B:26:D2:77:81:4A:CF:40:74:E0:31:D6:F1:D9:FB:E3:B5
            X509v3 Authority Key Identifier:
                keyid:D8:AF:F5:03:FE:8C:5B:D2:26:6A:A2:EC:AB:E5:52:CA:75:14:7F:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2K_1A_6MW9ImaqLsq-VSynUUf2Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918049D/B57CA558B2C611F09134BA6DC4F9AE02/2K_1A_6MW9ImaqLsq-VSynUUf2Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:3d:16:92:2d:cd:48:ca:4f:97:e1:4e:31:fa:25:cf:06:5e:
         e7:56:fa:20:73:17:aa:30:4e:6e:67:8f:dc:59:d4:18:0e:ed:
         db:64:00:d7:f5:bf:e7:ec:f8:4e:f1:a2:5a:25:6d:e9:c0:e1:
         5c:d8:44:5b:89:74:f7:cc:de:4b:ce:7d:6c:20:65:db:ca:e9:
         53:b8:4a:fa:db:5e:fa:9e:c5:ff:24:ad:bf:ee:a2:e9:3d:78:
         8c:5a:ff:1e:98:18:4e:d3:b9:8c:33:df:70:23:0a:32:e4:5a:
         66:cd:0c:7c:9a:e2:a4:f8:97:f4:5f:b6:ce:1d:fd:cd:09:aa:
         8c:37:37:23:3f:a8:c4:5f:e2:0e:68:7b:ed:fe:cc:24:c1:03:
         ea:f6:10:91:ff:57:ca:7b:3b:17:66:17:81:aa:1d:6e:6f:d0:
         89:7d:2f:3d:4a:ff:fc:6b:56:6b:40:8e:dd:70:36:25:71:57:
         40:90:f6:13:c5:1f:eb:d4:01:24:5d:7c:7f:ab:89:99:89:90:
         60:39:94:23:6a:ff:50:7e:09:02:5f:13:0d:f5:48:e0:4d:2d:
         d9:44:22:fc:b6:67:ae:d4:68:29:a8:77:75:f4:09:b6:f8:5c:
         f2:eb:27:24:45:72:34:1f:b6:7c:25:a7:2b:1b:9c:af:cb:16:
         fc:8f:6c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 00:50:56 2026 by rpki-client