Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
File:                     S7U1I5SOxqyZE7LVCcHXspRtnpI.mft (raw, json)
Hash identifier:          ghlMQBFTmlHmIxE5KuBlk9fGcXr84rWSICbONGarl6c=
Subject key identifier:   56:11:81:AF:98:F0:99:9C:90:EB:CC:2A:22:92:E3:CC:A8:F1:8B:B4
Authority key identifier: 4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92
Certificate issuer:       /CN=A91AF431/serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
Manifest number:          62
Signing time:             Fri 27 Mar 2026 07:34:14 +0000
Manifest this update:     Fri 27 Mar 2026 07:34:13 +0000
Manifest next update:     Fri 03 Apr 2026 07:34:13 +0000
Files and hashes:         1: S7U1I5SOxqyZE7LVCcHXspRtnpI.crl (hash: iip7ni1Dx9KM8hNGnk2Fv+DFzaYN8N/pwqXcEHEd5YM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl
                          rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 03 Apr 2026 07:34:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AF431, serialNumber=4BB53523948EC6AC9913B2D509C1D7B2946D9E92
        Validity
            Not Before: Mar 27 07:34:13 2026 GMT
            Not After : Apr  3 07:34:13 2026 GMT
        Subject: CN=69c632f5-6343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:e9:9e:5e:f0:5b:dc:29:f7:da:ca:df:17:
                    56:9a:b0:c2:d7:00:62:14:c9:b7:63:b1:95:5c:d9:
                    85:c2:95:9a:57:33:07:25:eb:12:31:d3:a2:6c:c2:
                    d3:1f:de:84:30:e6:fa:22:14:9b:91:d6:b8:d2:05:
                    99:ae:6c:f6:45:35:98:4a:92:ba:44:df:77:35:eb:
                    ad:b7:c4:db:da:a6:05:a2:b4:58:b1:a5:3e:f9:55:
                    53:81:ae:1b:95:48:3a:a7:bc:52:d2:ad:41:de:2a:
                    36:89:4d:6e:bf:09:94:0c:84:82:18:be:24:ef:01:
                    44:7e:be:6d:88:86:5a:f3:73:37:76:1d:3f:16:94:
                    82:3d:d9:ff:ab:21:da:47:be:30:c8:3f:58:8b:eb:
                    83:1c:ce:d0:e2:16:b3:ea:82:d4:25:e1:91:48:a3:
                    6b:61:83:53:12:b2:cc:4c:81:62:2f:9a:13:a6:57:
                    2d:72:cc:06:45:4b:bb:0e:a0:06:44:d4:9f:79:8f:
                    0a:8d:74:46:28:7a:03:ee:5b:63:2e:7c:6b:35:7e:
                    6d:2f:a8:26:98:66:1b:a4:20:14:7e:d1:ae:9a:96:
                    d8:73:c1:6d:60:0a:e4:fc:a3:9e:c0:72:fd:db:1a:
                    0e:a9:45:49:22:dd:92:bb:3d:de:8d:a9:0a:ad:cd:
                    a9:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:81:AF:98:F0:99:9C:90:EB:CC:2A:22:92:E3:CC:A8:F1:8B:B4
            X509v3 Authority Key Identifier:
                keyid:4B:B5:35:23:94:8E:C6:AC:99:13:B2:D5:09:C1:D7:B2:94:6D:9E:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/S7U1I5SOxqyZE7LVCcHXspRtnpI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AF431/FF7D18DA991811F0B450CF4FC4F9AE02/S7U1I5SOxqyZE7LVCcHXspRtnpI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f4:bc:07:5b:56:ee:ac:27:39:3d:9f:81:8f:c9:46:be:4b:fb:
         4c:d8:c8:3a:03:68:02:a3:37:16:77:a1:9d:77:b3:fe:1d:cd:
         73:58:e5:1a:7a:9b:cf:fd:92:15:1e:be:97:fe:38:cb:df:99:
         c7:3e:df:16:b8:cd:de:35:47:0e:52:ab:6a:b1:dc:16:db:7b:
         83:39:63:5c:af:ea:18:36:cc:9e:4a:de:55:e8:42:c1:6a:69:
         97:b6:6e:0b:19:5c:d5:82:e0:bb:89:fe:ca:80:32:57:a1:e0:
         e4:0b:56:9e:9f:f2:08:53:9d:5c:3c:01:40:5f:f9:d1:73:cb:
         6c:1b:d9:7a:0b:62:57:41:25:8d:4a:9c:ab:f7:fd:8b:9b:64:
         a1:37:ba:ec:ee:e3:1a:11:d8:b1:44:da:ec:58:94:eb:56:53:
         56:8e:1a:99:f4:83:1e:d0:10:21:ed:04:fe:0e:ed:a0:af:3a:
         6f:56:2b:b9:44:78:8f:ed:7d:35:c5:ca:3c:69:29:16:31:16:
         98:bc:15:1d:fc:c3:e6:42:e3:3a:1a:fe:d3:6c:fb:de:30:4c:
         1b:2b:0e:d6:0d:9c:cd:b2:8b:b5:8d:d2:21:94:26:3a:47:5b:
         3d:cf:42:ec:0b:60:51:85:ec:3b:c0:4f:a5:1a:e1:b9:a5:c3:
         9c:c9:7f:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 10:28:35 2026 by rpki-client