Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          hsjmcQBm5ZLuk91Mhuh6MT+kCef73FvfaDS/uVHCH2k=
Subject key identifier:   6D:55:AC:D6:2A:79:1D:01:BB:92:41:F6:79:CF:43:31:69:22:20:9B
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       194C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          4852
Signing time:             Thu 26 Mar 2026 15:46:48 +0000
Manifest this update:     Thu 26 Mar 2026 15:46:48 +0000
Manifest next update:     Thu 02 Apr 2026 15:46:48 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: 4kZZt5Mj/oegMI7nmpd0ddt5YT0Hr8I+8hGxk5QcRGU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 02 Apr 2026 15:46:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6476 (0x194c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
        Validity
            Not Before: Mar 26 15:46:48 2026 GMT
            Not After : Apr  2 15:46:48 2026 GMT
        Subject: CN=69c554e8-fe4d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c2:04:30:cc:28:bf:5a:f8:e7:8c:20:a7:08:
                    43:b2:a0:42:25:09:31:a0:b8:f6:ee:2e:e4:51:d4:
                    62:23:ea:bd:c9:39:02:7c:26:3f:2f:a3:1e:76:03:
                    f0:50:ad:26:cc:3b:7c:d3:f4:3a:66:4a:db:42:1c:
                    3f:40:90:48:b0:40:b5:67:80:ff:fe:87:7e:39:31:
                    50:fb:fe:c3:56:f7:9b:23:a1:fe:12:95:66:37:0c:
                    42:56:bf:4e:ce:08:a2:3b:1f:68:4c:dd:05:f8:71:
                    f8:1d:8a:b9:a5:17:66:3d:05:37:a7:92:be:d5:39:
                    e4:46:8d:d8:8c:fc:04:d5:a2:f0:6d:2d:c4:e0:db:
                    43:6b:7f:8d:59:12:a9:51:d8:fe:53:37:0c:b6:6a:
                    ce:47:e0:b7:7b:ef:8c:bf:22:6b:d6:79:54:87:da:
                    09:54:c3:3b:fc:97:99:16:34:1d:bc:ff:9a:44:f2:
                    9f:a6:71:4a:bd:0d:9d:be:da:35:e7:5f:1e:e6:02:
                    a8:eb:46:73:78:7d:d2:64:76:57:34:da:05:e0:59:
                    4c:32:fb:9f:9d:83:12:10:31:f2:1b:80:2f:94:fc:
                    1a:5b:38:05:f7:3b:65:2e:ec:e8:bf:37:17:e7:a7:
                    d8:72:da:57:fe:c0:d0:31:00:05:dd:72:f2:eb:a7:
                    e8:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:55:AC:D6:2A:79:1D:01:BB:92:41:F6:79:CF:43:31:69:22:20:9B
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:f3:1f:ae:dc:b9:1e:ff:5d:f1:9c:2e:fb:cf:70:31:ec:68:
         d8:22:d8:4d:3a:08:19:2a:08:a2:ca:a7:43:de:2e:50:4d:7f:
         7b:6c:f6:de:d9:d0:f9:38:10:68:26:e6:9f:8c:84:ac:26:a2:
         4c:91:bf:68:de:8a:f3:e3:ce:a9:8e:5a:21:a2:0c:6c:65:8b:
         38:90:84:3f:2c:fe:c0:dd:de:a1:77:c7:d2:cb:bd:b3:2d:9f:
         f0:be:e8:07:bf:76:a6:be:b4:9c:3d:b3:06:1a:0e:e1:ad:5d:
         58:9b:c8:4e:c3:9a:a1:4c:5f:17:f8:c1:c5:de:ef:1e:1a:02:
         65:cf:61:00:0b:44:ce:79:81:45:70:b3:db:8a:7e:e1:ad:bf:
         29:09:a2:c3:b4:02:2b:7b:e1:1b:2e:51:c8:f8:e5:7c:ea:7b:
         a8:db:79:24:8b:84:96:20:b0:42:23:60:3f:54:ae:23:26:8e:
         7c:6d:8e:b4:2e:b0:73:99:f4:ba:c6:7d:6e:99:de:3d:8b:60:
         39:f8:d2:b6:e9:7b:90:04:e3:af:12:6b:40:bc:17:b3:31:38:
         01:60:7e:b2:60:8f:ad:55:a9:00:7b:22:bf:2e:f1:c1:3f:ec:
         a7:54:7a:db:b1:3d:86:c1:c4:47:1c:20:3a:de:aa:1c:59:ff:
         56:53:06:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 11:47:44 2026 by rpki-client