Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
File:                     l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft (raw, json)
Hash identifier:          TC4+PhMikJ1F5Yfn6RSR45OS34H0Caf3u/x2bhkZqx8=
Subject key identifier:   E9:70:EC:48:6E:A3:45:1B:51:B1:2D:92:45:EB:BF:D6:80:ED:BC:2F
Authority key identifier: 97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8
Certificate issuer:       /CN=A91161EB/serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
Manifest number:          15
Signing time:             Tue 19 May 2026 08:52:46 +0000
Manifest this update:     Tue 19 May 2026 08:52:45 +0000
Manifest next update:     Tue 26 May 2026 08:52:45 +0000
Files and hashes:         1: l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl (hash: gfxslEwTQF2MDg6F7LbjYvCxjmhlVINucGK5XhxQX/o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl
                          rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:52:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91161EB, serialNumber=9755368BF2DB10E72E94567A292B0A589763E0D8
        Validity
            Not Before: May 19 08:52:45 2026 GMT
            Not After : May 26 08:52:45 2026 GMT
        Subject: CN=6a0c24dd-da30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c8:b5:1b:11:9c:a9:4e:63:e3:c8:ce:06:8a:
                    18:3d:48:78:40:df:3d:2f:1d:01:44:64:57:b0:7c:
                    be:fd:76:5a:6b:10:4d:fb:be:4f:43:3b:9e:2e:3c:
                    e9:d4:2a:24:df:30:7a:d1:f0:7b:58:1d:22:73:e4:
                    86:42:09:8b:52:04:6a:04:bd:9a:14:d3:ae:ce:a9:
                    5d:cf:ae:2b:3b:33:b6:03:05:f6:c1:31:df:20:cb:
                    63:10:db:4f:7c:8d:12:00:36:4a:1e:be:ae:dd:67:
                    de:a0:db:c6:4b:1a:59:15:ed:56:9e:41:63:f7:1b:
                    d3:04:06:87:60:8c:74:29:05:35:8f:00:85:1a:a1:
                    48:2f:89:62:e7:2e:9c:39:d7:af:f8:72:f4:3c:04:
                    80:69:c7:25:42:28:e4:d5:24:03:e4:1e:b2:e2:1d:
                    5e:c0:bd:16:54:9f:92:f6:44:b8:69:cf:c0:a3:b6:
                    35:cc:bc:bc:a3:49:75:da:77:03:8e:74:73:15:04:
                    90:cc:f3:1f:33:47:22:3e:21:a9:04:79:a3:44:49:
                    a3:aa:46:ca:64:9b:e9:ec:d9:45:df:7d:30:da:93:
                    ae:6e:65:14:59:0b:35:b3:f7:fb:37:e1:25:a5:13:
                    ca:2a:fe:eb:72:57:94:11:42:17:d5:80:f5:5e:43:
                    cd:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:70:EC:48:6E:A3:45:1B:51:B1:2D:92:45:EB:BF:D6:80:ED:BC:2F
            X509v3 Authority Key Identifier:
                keyid:97:55:36:8B:F2:DB:10:E7:2E:94:56:7A:29:2B:0A:58:97:63:E0:D8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/l1U2i_LbEOculFZ6KSsKWJdj4Ng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91161EB/1624FCE4350211F1B1FD6D749B833773/l1U2i_LbEOculFZ6KSsKWJdj4Ng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:0f:6d:f2:24:59:56:2e:4e:ae:b8:2f:2c:d1:5e:74:03:4f:
         13:3b:52:97:b0:7a:66:0e:16:96:b8:09:08:2f:f7:7d:2a:ba:
         72:50:f2:8a:46:65:ec:da:e9:0d:34:2b:fd:2c:62:57:24:42:
         1b:7e:6f:bd:04:f8:e3:a9:7a:81:05:50:c0:9b:f3:f6:63:ac:
         be:e5:e7:e0:4d:27:fe:e1:e4:65:58:1a:5d:c5:3d:42:f2:a5:
         4e:01:e4:44:6a:59:f4:f3:f0:d0:5a:45:28:49:46:b1:29:77:
         fd:f6:6f:08:d7:76:44:0f:37:25:1d:78:9b:64:89:ec:59:4f:
         1d:bc:19:ad:7f:1d:fe:47:6f:54:8b:40:29:f5:9b:02:9c:4d:
         51:94:1f:cf:75:ed:d0:f8:aa:bd:5e:44:15:23:20:be:31:0a:
         4c:b4:9f:27:3e:fa:d6:bc:67:0f:4e:6b:20:1f:f2:3c:be:05:
         3c:92:0c:fb:f7:56:ac:44:63:68:7c:08:6a:d4:c5:c2:97:cf:
         3b:b7:c6:db:d6:9a:19:46:a0:ed:06:01:cc:fc:f4:11:ae:94:
         47:ff:91:e2:74:6c:7e:cd:ef:8b:85:32:70:12:f8:9b:ec:2e:
         f9:63:4f:85:72:7f:cd:c1:3c:a3:86:2f:88:ee:d3:63:cb:18:
         8a:97:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:24 2026 by rpki-client