Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
File:                     SFseanLJRvLiQ6KAe3DF3V6stzA.mft (raw, json)
Hash identifier:          QXIophHBWkItDMGGvj7YRVjnVFlusQVadqDwecieTYg=
Subject key identifier:   85:54:01:B6:3B:13:89:88:E1:D9:DC:81:3D:42:79:89:16:4F:97:0C
Authority key identifier: 48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30
Certificate issuer:       /CN=A91D4413/serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
Certificate serial:       2165
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
Manifest number:          2C81
Signing time:             Tue 24 Mar 2026 15:51:21 +0000
Manifest this update:     Tue 24 Mar 2026 15:51:21 +0000
Manifest next update:     Tue 31 Mar 2026 15:51:21 +0000
Files and hashes:         1: SFseanLJRvLiQ6KAe3DF3V6stzA.crl (hash: fUG6Drvh+iiCdKnPZ8zEHnXjettqJzQ4eetpOH+Wtys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl
                          rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 31 Mar 2026 15:51:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8549 (0x2165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D4413, serialNumber=485B1E6A72C946F2E243A2807B70C5DD5EACB730
        Validity
            Not Before: Mar 24 15:51:21 2026 GMT
            Not After : Mar 31 15:51:21 2026 GMT
        Subject: CN=69c2b2f9-6a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:5f:b7:99:fe:86:d4:cd:6e:eb:e8:52:72:34:
                    97:15:c0:df:23:9d:a7:44:ee:c0:9f:c5:d9:31:1e:
                    d4:01:dc:cc:aa:70:99:99:3b:b1:d0:23:02:48:f3:
                    cb:6e:9a:1a:6d:e7:33:62:42:4a:e1:75:ab:f8:ee:
                    1c:08:40:39:af:ab:7a:65:ee:ab:06:0d:16:17:80:
                    3e:c2:4b:81:64:f3:7f:b0:15:39:a6:12:63:92:dc:
                    f8:cb:53:41:86:26:29:8f:d0:88:50:c3:23:72:6d:
                    3c:68:0f:c1:5f:63:bf:d2:af:b0:5e:5b:62:b0:79:
                    27:bc:67:58:f6:ff:68:a3:a5:f2:9b:69:a6:44:2a:
                    ab:85:01:fe:96:8a:bd:6f:73:a6:65:7f:12:a5:51:
                    1b:2d:12:5e:f2:e4:45:a2:b1:a3:10:20:6f:0c:66:
                    55:e8:3f:a2:fa:93:ce:ec:6e:db:5c:a0:2b:ea:1f:
                    60:cd:e2:c5:52:81:22:7e:c6:e4:59:80:57:f5:8d:
                    f5:a6:10:1e:74:13:56:6b:19:6c:2a:65:74:c3:31:
                    fc:d3:74:76:f0:a0:20:4b:c1:f2:9e:07:e8:ce:97:
                    67:4d:39:76:49:90:7e:18:93:b2:9b:80:21:58:92:
                    5f:c4:c8:78:48:14:51:2a:6b:e3:2d:7a:f8:40:20:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:54:01:B6:3B:13:89:88:E1:D9:DC:81:3D:42:79:89:16:4F:97:0C
            X509v3 Authority Key Identifier:
                keyid:48:5B:1E:6A:72:C9:46:F2:E2:43:A2:80:7B:70:C5:DD:5E:AC:B7:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SFseanLJRvLiQ6KAe3DF3V6stzA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D4413/0816E754FFB411E59443102CC4F9AE02/SFseanLJRvLiQ6KAe3DF3V6stzA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:ff:cc:3c:ae:17:0f:93:1b:ee:d7:e6:52:42:e9:ae:cf:fe:
         7b:4e:23:b9:73:11:17:32:a3:d6:69:0b:c5:0e:98:1e:a4:2f:
         5d:2b:bf:79:de:0b:28:62:c4:ec:e9:1b:49:c6:b1:cb:97:82:
         4d:69:ce:49:5d:79:f7:0f:e7:70:0c:d1:5d:a6:ab:fc:7c:1f:
         50:31:c5:f4:6a:69:c1:d8:8c:d3:ab:db:17:44:cb:aa:43:71:
         cf:ce:f3:ad:06:42:c6:c2:5d:b0:00:35:c8:c9:38:7b:8a:41:
         d0:56:ee:1d:5d:ea:93:f7:28:b6:08:f9:f0:b7:f6:5b:95:f6:
         83:16:e2:6a:96:52:a4:dd:31:51:5a:aa:10:89:80:b7:67:84:
         0a:9f:16:65:09:6c:d4:86:62:d9:58:bf:b8:a2:8c:b4:ef:32:
         52:96:58:91:75:04:51:cf:fe:fa:86:a7:88:e9:43:3b:67:d3:
         a2:0e:cf:65:77:b3:25:67:42:c8:53:0d:e7:64:08:a0:1d:71:
         79:4b:a1:5f:c9:f5:ab:3e:d5:eb:c7:01:ee:b2:70:9e:04:29:
         54:87:9b:c0:3e:78:8f:9b:cd:4b:49:f3:69:34:7f:90:92:9c:
         75:8a:3d:a2:f5:2a:9e:72:31:ea:ef:20:89:ed:ca:c2:64:43:
         28:ff:f8:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:10:16 2026 by rpki-client