Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
File:                     PqTXApDMqv5dzJxdpfW-J_7d5F4.mft (raw, json)
Hash identifier:          0vKGmDiD2EZNjBw4bt77bGV7jeAw8x94fnYwJrW6dYE=
Subject key identifier:   D4:DE:53:48:BA:6C:AE:89:70:6B:35:2B:61:22:58:9C:CF:BE:6E:97
Authority key identifier: 3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E
Certificate issuer:       /CN=A911FA74/serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
Certificate serial:       353D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
Manifest number:          353D
Signing time:             Wed 20 May 2026 14:41:09 +0000
Manifest this update:     Wed 20 May 2026 14:41:09 +0000
Manifest next update:     Wed 27 May 2026 14:41:09 +0000
Files and hashes:         1: PqTXApDMqv5dzJxdpfW-J_7d5F4.crl (hash: nP68THlfUmfXXHqohf8X6XZAA3YjApIzbD6K4cux5nw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl
                          rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:41:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13629 (0x353d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA74, serialNumber=3EA4D70290CCAAFE5DCC9C5DA5F5BE27FEDDE45E
        Validity
            Not Before: May 20 14:41:09 2026 GMT
            Not After : May 27 14:41:09 2026 GMT
        Subject: CN=6a0dc805-6f54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:01:a9:2f:28:7d:3f:f2:50:d0:f8:99:99:9e:
                    4a:ba:9e:d3:14:c0:2a:d1:3c:77:cc:ab:3d:20:32:
                    1c:60:b9:12:93:ec:bd:87:80:27:02:39:4e:7c:01:
                    6e:e0:5c:f0:0b:63:7a:ca:3a:dd:23:11:07:bb:f0:
                    ad:83:b7:d2:0d:e7:21:fb:9e:67:5e:64:a5:93:7c:
                    e8:9a:4d:ed:b9:d0:9c:bb:d2:f9:84:cb:48:fa:83:
                    a5:39:aa:af:78:91:ef:50:1b:43:16:88:30:8b:cd:
                    41:f7:75:15:fa:8e:1d:8d:e3:17:ce:a5:df:e3:e0:
                    51:b0:ae:e5:b9:c4:ae:44:8a:44:8f:8e:89:13:69:
                    12:04:03:2b:20:42:bf:e4:19:10:af:af:56:5b:36:
                    4e:3c:99:5b:9d:38:57:19:20:94:4d:55:ff:76:4d:
                    a7:9c:8e:14:27:3c:bf:94:57:a8:a0:fb:af:93:39:
                    a5:a0:a3:e0:24:b7:ae:b8:f3:79:f4:28:4a:c6:54:
                    4c:ae:ae:a8:f8:fe:67:eb:8b:ac:b8:24:4d:f5:3d:
                    fa:25:3c:ac:cd:bc:ea:16:c2:43:08:75:54:62:32:
                    f0:2d:d9:58:01:2a:4b:c4:a5:7e:72:78:e8:1e:44:
                    1e:6e:1b:b4:b3:da:7d:d1:ff:1a:24:d9:d5:a6:8d:
                    ba:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:DE:53:48:BA:6C:AE:89:70:6B:35:2B:61:22:58:9C:CF:BE:6E:97
            X509v3 Authority Key Identifier:
                keyid:3E:A4:D7:02:90:CC:AA:FE:5D:CC:9C:5D:A5:F5:BE:27:FE:DD:E4:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PqTXApDMqv5dzJxdpfW-J_7d5F4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA74/6101B5B61D8F11E2847C5FEE08B02CD2/PqTXApDMqv5dzJxdpfW-J_7d5F4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:04:ff:6e:62:3d:4c:04:c8:cb:66:85:c0:26:11:cd:78:79:
         3e:4c:ef:ba:3d:31:9a:22:da:f9:bf:f7:a3:9c:d8:2a:cb:de:
         f0:5f:05:40:66:c1:7b:07:0b:fe:c0:aa:40:7a:46:74:2a:72:
         b9:b4:4d:f0:93:66:56:fd:e5:e0:40:21:63:5a:51:f7:2d:cd:
         ee:a8:02:59:b8:0a:78:c9:b3:05:cd:9c:83:73:35:41:c3:aa:
         64:f6:3a:2b:5b:cd:31:0d:37:93:3a:5a:64:68:cb:85:ad:68:
         9d:ed:30:20:26:88:c1:f9:90:08:34:5e:90:44:47:69:02:32:
         cf:5c:da:15:4b:ba:b8:e4:80:c7:03:fd:9c:39:88:29:f5:d3:
         21:da:60:4e:5f:12:28:a9:0a:96:e2:91:6e:18:68:6a:a2:dd:
         cf:b1:56:b1:a4:e1:4d:0d:8d:99:96:88:2d:81:0b:cf:37:45:
         56:c0:56:58:61:2d:c7:a9:2e:9f:4b:e7:92:b4:85:c7:6b:33:
         f5:b5:d4:09:3e:06:4c:bd:a7:36:e4:60:a3:16:5b:e3:e2:6c:
         46:45:be:c2:83:dd:4b:f3:c5:bf:1f:cb:a2:29:45:71:4f:b3:
         2b:4d:65:a4:b0:3b:f3:3f:1d:14:22:06:f0:84:b2:a8:21:5a:
         90:37:b8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:30:22 2026 by rpki-client