Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
File:                     n5wj0nP2qZxl77wDDStoHkIykWc.mft (raw, json)
Hash identifier:          +n0tUHHpiJ6G7yi9cwsYQ+9BOh5+kgJQYecgMIti/lQ=
Subject key identifier:   14:FC:5E:C2:C6:DA:1C:3C:5B:70:07:E1:65:6F:2C:E2:F5:9E:06:4F
Authority key identifier: 9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67
Certificate issuer:       /CN=A9144C70/serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
Certificate serial:       043B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
Manifest number:          05DE
Signing time:             Thu 21 May 2026 00:24:47 +0000
Manifest this update:     Thu 21 May 2026 00:24:46 +0000
Manifest next update:     Thu 28 May 2026 00:24:46 +0000
Files and hashes:         1: n5wj0nP2qZxl77wDDStoHkIykWc.crl (hash: NHyI7VRMF0L29a1rkA6wZ83xyKEt2pXYIuSXgSSNfI8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl
                          rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:24:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1083 (0x43b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144C70, serialNumber=9F9C23D273F6A99C65EFBC030D2B681E42329167
        Validity
            Not Before: May 21 00:24:46 2026 GMT
            Not After : May 28 00:24:46 2026 GMT
        Subject: CN=6a0e50ce-1df3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:51:ff:9b:cd:c9:76:be:af:79:c9:c9:6c:6a:
                    a2:23:22:b5:ca:27:9c:02:1e:cb:61:17:c3:4c:34:
                    c2:7c:04:16:3e:46:c7:c2:91:fd:70:ca:d2:bd:39:
                    e6:b1:fe:2c:ba:6e:a5:8d:c7:27:b4:5e:d1:d6:d7:
                    5a:f3:23:30:7f:98:d3:e1:0b:2c:1b:a8:97:12:47:
                    4a:b1:f7:2e:32:75:eb:88:e1:36:d8:4d:25:95:41:
                    5c:cd:4c:b7:2d:f0:ba:bc:a4:26:44:a6:34:d8:71:
                    cd:bb:7c:71:b1:84:2a:b6:20:af:65:68:0e:b3:b8:
                    f9:49:30:ee:e7:28:45:60:93:86:d9:6e:10:07:8f:
                    3e:7e:c6:fc:36:42:5d:74:50:70:70:50:36:eb:4c:
                    bb:73:a6:15:cd:a0:ea:49:d5:c2:8b:05:e5:ae:63:
                    1b:61:93:92:f9:2c:95:ba:75:a4:18:2a:ad:bb:08:
                    72:e8:2a:8c:da:54:cd:53:75:3e:36:4c:29:9c:84:
                    91:31:cf:17:a4:d7:ec:68:7d:28:d5:d7:b3:fa:4b:
                    1f:0c:b1:db:95:32:81:ee:4e:42:2e:aa:70:4e:11:
                    db:3e:f9:33:18:0a:a8:c4:d9:33:a5:17:85:a4:95:
                    21:9e:21:5f:df:de:d1:bc:1f:63:bf:20:14:1d:42:
                    d3:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:FC:5E:C2:C6:DA:1C:3C:5B:70:07:E1:65:6F:2C:E2:F5:9E:06:4F
            X509v3 Authority Key Identifier:
                keyid:9F:9C:23:D2:73:F6:A9:9C:65:EF:BC:03:0D:2B:68:1E:42:32:91:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/n5wj0nP2qZxl77wDDStoHkIykWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144C70/82BC84EEAC6711ECB75CDA24C4F9AE02/n5wj0nP2qZxl77wDDStoHkIykWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:59:e8:bd:ea:15:9a:1a:f7:2b:33:59:09:bf:83:70:24:1e:
         ad:98:d3:5f:ef:da:be:5e:21:90:20:68:85:11:43:52:fb:28:
         c2:9a:a0:6e:85:f3:5c:30:14:35:f4:1b:6e:9c:ab:b2:fb:03:
         c1:a4:f1:8d:a4:3b:99:59:36:8c:2b:1d:d9:60:75:29:62:68:
         6a:13:1b:2f:6d:d5:ca:16:8f:7c:f4:26:80:24:44:f2:6d:d7:
         38:da:84:d3:fa:69:3b:44:64:73:aa:e5:ca:44:31:d4:a2:4e:
         f2:57:a6:c9:60:d8:43:13:d6:6a:88:f7:1a:e4:ff:76:0f:1b:
         3c:f0:17:14:a4:c7:83:27:79:6c:98:f5:1e:b7:51:de:74:a9:
         e7:32:47:00:e3:e6:68:31:2a:3e:78:21:3c:d1:46:e5:6b:92:
         81:58:7b:78:3f:17:d0:f2:42:d3:30:f9:f6:bd:ef:2c:03:12:
         01:a2:1e:ba:fc:9f:80:8e:6f:9f:c0:b5:40:0c:84:9d:5c:13:
         2b:ad:cd:9e:99:dc:5c:d9:ef:45:9d:2d:64:61:cb:68:8f:81:
         fe:83:e3:dc:84:f0:0b:f4:3e:35:12:a3:07:86:cb:07:96:e2:
         ee:9f:02:d9:f8:c8:d6:61:fe:44:86:f3:cf:35:00:be:ee:9b:
         54:03:f5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:10 2026 by rpki-client