Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
File:                     NhN5wakOmU8oZFtzNWRe_DpeGs0.mft (raw, json)
Hash identifier:          DB6QX39Ro9b4k1xjC2EY8zrKtgKcr1W9o+SmkqSqJfE=
Subject key identifier:   97:33:5C:84:1C:FD:3E:5A:EE:EA:57:D4:A4:53:6A:C0:07:1F:68:6F
Authority key identifier: 36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD
Certificate issuer:       /CN=A914DCD4/serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
Certificate serial:       53
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
Manifest number:          53
Signing time:             Thu 21 May 2026 08:24:54 +0000
Manifest this update:     Thu 21 May 2026 08:24:53 +0000
Manifest next update:     Thu 28 May 2026 08:24:53 +0000
Files and hashes:         1: NhN5wakOmU8oZFtzNWRe_DpeGs0.crl (hash: ZMJ0BKJ45Ok+vD+qiz2mzAnuDO2BmklGdw0WIPim/Ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl
                          rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:24:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914DCD4, serialNumber=361379C1A90E994F28645B7335645EFC3A5E1ACD
        Validity
            Not Before: May 21 08:24:53 2026 GMT
            Not After : May 28 08:24:53 2026 GMT
        Subject: CN=6a0ec156-add3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:75:35:f5:36:5e:f5:8d:3d:76:21:57:f6:82:
                    fd:b0:19:d8:ee:60:40:a0:25:3a:2e:60:df:25:ea:
                    90:5b:75:9a:3b:42:a0:a2:0a:3a:78:8d:69:83:35:
                    99:18:80:ed:9d:5d:3c:34:e2:3a:a6:fb:9f:cc:ba:
                    11:25:ca:82:70:68:d0:ff:fe:7d:66:38:ba:a3:ed:
                    a6:d3:b1:06:d3:58:6b:45:96:c4:ab:99:db:ad:17:
                    fc:83:ee:50:d3:a7:a0:a1:a0:2d:ad:56:2d:5a:2b:
                    8c:67:27:6b:e3:97:06:c2:75:d5:44:f1:5e:d1:00:
                    c5:be:16:b1:5d:ce:5e:49:a3:06:22:c3:c4:5a:5a:
                    4b:fa:10:1d:2d:bf:96:63:3f:d1:45:88:3b:06:b1:
                    18:b8:4f:f2:f3:50:f1:c6:c1:ed:9a:3c:1a:97:76:
                    09:4e:02:3b:63:a6:9d:38:44:28:d8:13:db:2b:79:
                    d3:7d:5f:22:d7:ce:2a:26:30:2c:f4:a1:93:0c:d1:
                    92:df:56:bc:98:c4:b2:e8:80:ec:53:71:dd:50:cc:
                    96:f6:be:54:02:f4:b1:f0:3c:a3:50:12:85:94:4d:
                    cb:25:63:ae:d3:0e:24:5c:ed:4a:e9:0c:d0:fc:84:
                    57:2f:69:29:a5:f9:1d:31:4f:a2:94:62:3c:6b:ff:
                    79:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:33:5C:84:1C:FD:3E:5A:EE:EA:57:D4:A4:53:6A:C0:07:1F:68:6F
            X509v3 Authority Key Identifier:
                keyid:36:13:79:C1:A9:0E:99:4F:28:64:5B:73:35:64:5E:FC:3A:5E:1A:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NhN5wakOmU8oZFtzNWRe_DpeGs0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914DCD4/B98C3A38E1AA11F0AFCE84B84A6F56BC/NhN5wakOmU8oZFtzNWRe_DpeGs0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:bf:b2:e1:66:66:e2:2b:02:4f:52:3f:06:61:40:49:5d:25:
         b5:b6:30:1a:ee:d8:e2:cf:bc:76:f9:0b:1a:36:20:b7:25:ff:
         4a:f1:e0:2d:fd:37:b6:ef:ed:32:48:77:b2:34:a2:66:dc:60:
         26:bb:c3:2e:39:07:fa:4c:4b:8d:ef:3a:b2:70:c5:98:c2:f0:
         7f:7d:a1:e5:b8:ac:8b:18:5d:a1:e0:1f:80:e4:f3:0b:58:6d:
         2a:df:60:75:2d:c5:73:fa:07:eb:91:ae:14:a7:13:8c:31:92:
         21:61:e4:22:ee:b6:1f:0d:ca:41:a9:9a:33:99:61:72:fb:72:
         13:3d:cb:a9:bf:73:87:99:99:15:18:1a:be:3c:49:b7:67:df:
         65:1b:b8:32:c0:e0:7c:ee:6a:66:ff:79:5b:cf:90:c7:86:4e:
         7c:51:72:1f:11:63:71:ab:91:f0:27:fa:d9:24:6b:34:87:5b:
         e8:17:a6:46:1f:b8:9a:19:37:3d:01:f6:6b:a1:f1:cc:b7:36:
         25:88:6b:91:fc:32:e8:32:02:80:db:5a:e0:21:04:74:9e:81:
         58:e3:ee:2c:16:24:7b:da:a1:22:c5:1b:61:cf:11:15:84:75:
         88:fa:d3:b1:21:59:17:3d:75:39:30:35:b6:a1:71:e9:3c:36:
         3a:04:5f:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:22 2026 by rpki-client