Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
File:                     RNKGOHOg4Xndk_snhK0EhGYj5-4.mft (raw, json)
Hash identifier:          heWqHBCvAQe7XQ+zA67b+PfwjzbKUc22aZuGzAPzyRQ=
Subject key identifier:   96:D9:26:57:54:5F:CF:74:4E:44:C5:28:31:D2:57:00:75:52:D5:64
Authority key identifier: 44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE
Certificate issuer:       /CN=A914E4E2/serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE
Certificate serial:       55
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
Manifest number:          55
Signing time:             Tue 19 May 2026 08:07:27 +0000
Manifest this update:     Tue 19 May 2026 08:07:27 +0000
Manifest next update:     Tue 26 May 2026 08:07:27 +0000
Files and hashes:         1: RNKGOHOg4Xndk_snhK0EhGYj5-4.crl (hash: ejnLDcNxUSTCvv6YiiBcJcjergMdf8WxS/1Ppt/JOJA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl
                          rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:07:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E4E2, serialNumber=44D2863873A0E179DD93FB2784AD04846623E7EE
        Validity
            Not Before: May 19 08:07:27 2026 GMT
            Not After : May 26 08:07:27 2026 GMT
        Subject: CN=6a0c1a3f-50d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b1:cd:38:96:fe:73:17:37:84:59:79:3e:31:
                    6a:03:fb:9a:5f:7e:05:8d:b2:e0:c0:85:6e:f3:ad:
                    b0:7c:39:74:dc:61:a0:ce:71:83:30:ba:d0:28:16:
                    b4:33:1b:7f:bb:ca:31:ef:0d:64:1c:66:06:91:f7:
                    c6:e0:4b:ad:13:83:59:92:c1:f1:6b:27:6f:06:cc:
                    35:62:b5:ea:97:f5:a6:c8:c3:74:af:12:c4:60:71:
                    cb:a7:13:e6:f3:4c:49:d8:95:d6:4d:0f:b4:6a:d8:
                    f2:07:f8:57:02:3f:84:20:66:9a:fa:2c:d2:58:85:
                    8d:a6:6f:4b:87:5b:41:28:ab:80:23:40:a2:d9:2f:
                    82:cd:9c:76:7e:4c:1a:66:03:68:94:58:a2:ac:1f:
                    0f:eb:c4:cf:65:65:26:4e:f8:ad:39:04:4b:d0:ea:
                    4a:ff:06:97:92:d2:6f:8c:71:74:5a:da:62:c3:9a:
                    f0:bb:17:bf:f1:4a:41:64:74:5a:17:b0:a5:3f:83:
                    af:c4:23:64:19:06:22:b1:c8:cd:23:52:5f:a8:ee:
                    8f:96:3d:1b:fc:ec:63:b4:87:e3:c4:c5:22:30:05:
                    90:77:66:69:7f:f7:64:2e:51:0e:90:7d:c7:cb:61:
                    35:f5:f7:3d:a0:96:8b:d3:a4:bd:c4:2e:a7:fd:35:
                    66:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:D9:26:57:54:5F:CF:74:4E:44:C5:28:31:D2:57:00:75:52:D5:64
            X509v3 Authority Key Identifier:
                keyid:44:D2:86:38:73:A0:E1:79:DD:93:FB:27:84:AD:04:84:66:23:E7:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RNKGOHOg4Xndk_snhK0EhGYj5-4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E4E2/4BDEF5D6DAFA11F09AF616207CD3641D/RNKGOHOg4Xndk_snhK0EhGYj5-4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:b6:5a:5b:d2:1a:55:f7:d0:e2:20:25:f3:f9:3c:d6:e1:35:
         d1:cc:4f:b0:e8:b9:23:fd:c7:a2:09:42:bd:0d:9c:04:57:55:
         14:24:15:d7:66:a5:a0:c9:b2:40:84:75:a7:28:09:32:37:0c:
         97:d6:72:92:6a:18:93:49:0e:35:87:cb:c9:ff:60:37:14:de:
         cb:9f:2a:9b:8b:fc:47:f9:c3:07:63:dc:ad:e4:90:50:39:fe:
         ad:9b:64:4c:1b:78:d5:af:e7:b2:79:f6:ec:92:e8:53:9c:2e:
         01:b4:de:40:0e:d9:60:5e:02:b6:c1:3f:2e:04:d9:9f:b8:e7:
         04:18:45:71:94:53:c9:c1:c8:9b:01:e7:fe:5e:9f:79:9e:92:
         82:d8:b8:73:3b:cc:89:69:e8:6d:9a:a2:be:bc:e0:c2:5d:91:
         a8:94:40:e8:a2:10:36:d2:4f:f7:f6:95:a5:b1:6a:a9:8e:d0:
         70:17:ab:21:63:a0:53:44:53:b4:0e:d5:f4:17:8a:66:7d:bd:
         10:8a:70:7b:70:b3:a4:fd:93:7c:2d:50:15:b2:89:33:a3:e6:
         b8:4d:92:6f:13:10:71:b3:54:cf:eb:ef:f6:5a:77:ba:2c:c7:
         eb:4b:b7:21:13:0d:37:2d:64:6a:2b:9e:3b:5d:d0:24:5f:74:
         f1:04:cc:60
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBVTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE0
RTRFMjExMC8GA1UEBRMoNDREMjg2Mzg3M0EwRTE3OUREOTNGQjI3ODRBRDA0ODQ2
NjIzRTdFRTAeFw0yNjA1MTkwODA3MjdaFw0yNjA1MjYwODA3MjdaMBgxFjAUBgNV
BAMTDTZhMGMxYTNmLTUwZDQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQC/sc04lv5zFzeEWXk+MWoD+5pffgWNsuDAhW7zrbB8OXTcYaDOcYMwutAoFrQz
G3+7yjHvDWQcZgaR98bgS60Tg1mSwfFrJ28GzDViteqX9abIw3SvEsRgccunE+bz
TEnYldZND7Rq2PIH+FcCP4QgZpr6LNJYhY2mb0uHW0Eoq4AjQKLZL4LNnHZ+TBpm
A2iUWKKsHw/rxM9lZSZO+K05BEvQ6kr/BpeS0m+McXRa2mLDmvC7F7/xSkFkdFoX
sKU/g6/EI2QZBiKxyM0jUl+o7o+WPRv87GO0h+PExSIwBZB3Zml/92QuUQ6QfcfL
YTX19z2glovTpL3ELqf9NWblAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUltkmV1Rf
z3RORMUoMdJXAHVS1WQwHwYDVR0jBBgwFoAURNKGOHOg4Xndk/snhK0EhGYj5+4w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRFNEUyLzRCREVGNUQ2REFG
QTExRjA5QUY2MTYyMDdDRDM2NDFEL1JOS0dPSE9nNFhuZGtfc25oSzBFaEdZajUt
NC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvUk5LR09IT2c0WG5ka19zbmhLMEVoR1lqNS00LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTRF
NEUyLzRCREVGNUQ2REFGQTExRjA5QUY2MTYyMDdDRDM2NDFEL1JOS0dPSE9nNFhu
ZGtfc25oSzBFaEdZajUtNC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQADtlpb0hpV99DiICXz+TzW4TXRzE+w6Lkj/ceiCUK9DZwEV1UUJBXXZqWgybJA
hHWnKAkyNwyX1nKSahiTSQ41h8vJ/2A3FN7Lnyqbi/xH+cMHY9yt5JBQOf6tm2RM
G3jVr+eyefbskuhTnC4BtN5ADtlgXgK2wT8uBNmfuOcEGEVxlFPJwcibAef+Xp95
npKC2LhzO8yJaehtmqK+vODCXZGolEDoohA20k/39pWlsWqpjtBwF6shY6BTRFO0
DtX0F4pmfb0QinB7cLOk/ZN8LVAVsokzo+a4TZJvExBxs1TP6+/2Wne6LMfrS7ch
Ew03LWRqK547XdAkX3TxBMxg
-----END CERTIFICATE-----
Generated at Thu May 21 09:37:05 2026 by rpki-client