Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          x+48wQSFhL3XLpoBtW+VWPyT5lJColDtIjyhQFS9pUE=
Subject key identifier:   8F:10:DF:DC:F2:B9:0B:18:5B:BF:50:CD:91:3D:1B:30:57:A2:7E:0D
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          353C
Signing time:             Wed 20 May 2026 14:54:30 +0000
Manifest this update:     Wed 20 May 2026 14:54:29 +0000
Manifest next update:     Wed 27 May 2026 14:54:29 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: iCu3BrG8+gGPZJYv11aRSiwRQqhnR8vtr8Ak3Vd3pDA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:54:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: May 20 14:54:29 2026 GMT
            Not After : May 27 14:54:29 2026 GMT
        Subject: CN=6a0dcb26-7add
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:55:35:17:37:0f:e1:01:4b:f0:e1:96:ca:16:
                    17:dd:48:ce:47:4d:cf:14:3a:c2:bf:15:5e:7a:e7:
                    fa:e3:70:89:85:25:16:0e:e0:0f:be:17:de:7a:d7:
                    31:1a:03:48:9a:cc:13:34:25:1f:42:c4:e3:1f:38:
                    35:9e:a7:d4:6f:dd:1f:ac:dc:e7:ef:71:2b:da:ad:
                    a1:5e:3f:7f:ef:7a:c6:16:68:19:e1:dc:c1:6c:1c:
                    21:ad:1b:57:6c:e3:8d:aa:1c:4b:8c:8e:6f:e1:81:
                    a1:76:62:39:ff:3d:88:46:9b:75:9b:d9:eb:34:85:
                    b4:c1:5f:31:be:7a:b3:82:52:f3:50:97:6c:05:95:
                    eb:d2:17:ff:f2:c8:d0:c8:76:8e:b7:8e:94:9e:a7:
                    91:b8:ba:b4:55:2d:14:dd:3e:13:66:05:29:f2:89:
                    53:72:eb:e4:f1:dc:e1:5c:0d:c4:3a:b4:a0:ee:84:
                    a4:e2:7b:c5:d4:70:d5:1a:95:6a:66:ae:15:69:1f:
                    55:69:6c:21:6c:39:1a:3f:ea:80:ec:99:74:5d:4b:
                    02:25:df:bd:79:52:81:ce:be:28:62:65:66:b8:5b:
                    e6:f3:79:8f:89:05:a7:7a:0b:84:18:01:02:cd:6f:
                    a8:18:c8:5a:d2:d9:22:90:90:82:88:3a:1e:79:1b:
                    f4:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:10:DF:DC:F2:B9:0B:18:5B:BF:50:CD:91:3D:1B:30:57:A2:7E:0D
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:03:63:cc:54:f2:53:86:f7:c7:2e:54:9c:f5:ab:7e:26:01:
         01:6f:ff:9f:6c:02:d2:ee:a0:b7:d1:13:33:68:a2:e1:82:d8:
         51:ad:83:3c:69:3f:ff:55:83:89:6c:95:86:3f:3a:44:c6:f5:
         7a:fb:44:be:41:91:a9:ea:d2:fb:cd:e7:4d:8b:31:01:f6:7c:
         64:d7:f1:b3:80:c1:3d:c1:fe:cd:95:56:2d:9b:61:18:71:40:
         ff:de:db:6f:26:d9:d2:65:f0:c6:c2:15:e7:c7:fe:be:fc:80:
         ac:00:65:e6:2b:91:3d:17:c6:49:74:e0:66:48:9a:25:4e:2e:
         ba:ae:11:6f:c9:11:8b:95:1d:c7:78:a9:ca:5d:29:b4:ce:49:
         73:d1:4f:49:9e:f1:2d:10:97:ad:ef:95:e6:7f:e6:21:a2:0a:
         b8:54:7c:d1:11:36:4b:42:0b:07:b9:3e:f9:12:52:41:12:b0:
         3e:3a:e2:df:43:1e:4f:3b:61:89:4c:f1:26:8e:61:e6:61:3e:
         60:d4:6b:61:0e:bf:29:73:19:25:5c:85:56:30:7f:8a:6e:f3:
         56:23:f5:b4:a8:5e:04:17:0b:88:4e:a3:b2:0f:23:60:5f:ed:
         cd:80:08:00:0a:6f:ed:0f:42:ef:46:73:c2:d6:42:ff:08:73:
         96:f3:35:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:43 2026 by rpki-client