Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
File:                     5c6UvYXPCPR6j97JcE8dztA4Bow.mft (raw, json)
Hash identifier:          V9bR+6p/cs1mk8XQjmGV1ynxgM0YvYwc76tqT7xEfO8=
Subject key identifier:   30:94:FB:80:DC:20:F9:9C:6D:C0:E3:8B:F7:DD:71:2C:64:9A:7E:BF
Authority key identifier: E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C
Certificate issuer:       /CN=A91517A0/serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
Manifest number:          0121
Signing time:             Thu 21 May 2026 05:50:43 +0000
Manifest this update:     Thu 21 May 2026 05:50:42 +0000
Manifest next update:     Thu 28 May 2026 05:50:42 +0000
Files and hashes:         1: 5c6UvYXPCPR6j97JcE8dztA4Bow.crl (hash: OSQpyZtyG/7OmkgFNe0KIDagZlUCf4dMvGUDMGCvayw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl
                          rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:50:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91517A0, serialNumber=E5CE94BD85CF08F47A8FDEC9704F1DCED038068C
        Validity
            Not Before: May 21 05:50:42 2026 GMT
            Not After : May 28 05:50:42 2026 GMT
        Subject: CN=6a0e9d33-ae39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:5d:4d:7e:a5:28:2a:6c:16:5a:23:bf:6d:46:
                    3f:9b:77:5b:e2:8f:41:6e:49:f7:bb:99:0c:57:70:
                    14:d3:a0:8c:39:93:bc:fc:78:8e:09:e6:32:0c:9c:
                    06:5d:a3:71:d7:b4:b5:c4:3b:19:e1:aa:e2:70:ab:
                    0a:cd:a3:a3:54:e2:ee:37:f9:fe:e4:a4:a2:f5:f2:
                    f6:1a:08:fe:3c:aa:16:cd:fc:88:09:c2:41:a9:90:
                    8f:f7:73:cf:7c:9f:19:bd:e2:12:db:3e:6a:92:94:
                    d7:9e:9b:02:9f:7b:aa:f8:60:93:04:fe:d5:48:ec:
                    10:99:52:1b:9e:ca:6a:d5:f8:94:7f:c7:0e:91:e8:
                    de:b8:35:37:5b:36:39:dd:b6:4e:e5:dc:c9:bb:9c:
                    42:a2:47:17:f4:99:a4:b7:9c:68:c3:88:f8:0d:0e:
                    8e:e5:6b:5e:b4:be:9f:a5:a8:de:c9:86:71:f5:0c:
                    b4:27:34:f3:77:2a:e4:40:8e:fd:43:82:27:6a:3b:
                    3a:0d:30:79:92:a5:bc:5f:13:a5:3f:ef:de:af:26:
                    f1:c6:7d:6c:f8:4e:05:40:18:37:87:5a:c0:46:ab:
                    14:c4:da:bf:0c:0f:9b:0f:98:5e:1c:1f:57:9c:27:
                    f8:3f:b9:c4:8f:34:2a:1d:1d:5a:c9:ad:9e:99:24:
                    21:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:94:FB:80:DC:20:F9:9C:6D:C0:E3:8B:F7:DD:71:2C:64:9A:7E:BF
            X509v3 Authority Key Identifier:
                keyid:E5:CE:94:BD:85:CF:08:F4:7A:8F:DE:C9:70:4F:1D:CE:D0:38:06:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c6UvYXPCPR6j97JcE8dztA4Bow.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91517A0/955FA5529F6911EFA4FEAF65C4F9AE02/5c6UvYXPCPR6j97JcE8dztA4Bow.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:4d:06:06:a1:5f:6a:40:42:f6:62:d9:2d:98:70:51:c8:8c:
         15:cd:69:07:e8:35:54:dc:7c:27:d9:56:14:ef:70:0e:36:ac:
         70:01:2d:1b:5b:f4:cf:b8:4c:01:a5:2c:c4:95:76:0d:ca:13:
         85:cb:82:23:66:a4:87:8b:35:38:30:d4:80:50:b3:34:70:03:
         19:ca:66:88:7c:f6:28:47:95:88:d2:e8:c8:fe:62:71:f3:6d:
         29:37:ea:89:cc:11:d9:dc:99:59:ff:70:16:80:dc:0b:4e:16:
         8b:b4:25:af:21:60:b5:25:3c:4e:43:c0:33:a7:79:7a:7a:0c:
         c1:9d:51:01:fb:93:b8:f6:c9:ac:e8:d8:45:ee:8e:8b:5f:e1:
         3e:31:02:dd:a4:1a:74:54:0c:4d:44:38:ee:a5:b5:48:1e:c6:
         98:64:14:31:bc:c8:46:2b:f7:b2:8d:f8:08:ce:6d:54:34:c3:
         b5:bb:c7:32:95:5b:cd:37:ef:22:4c:41:5b:1a:ad:40:f1:ed:
         e7:a4:8d:40:41:db:cc:92:e1:13:ce:8a:45:48:2a:e6:ce:94:
         25:e6:83:78:7e:af:6a:87:e0:38:8c:21:07:84:22:45:69:1c:
         e8:88:f1:78:75:16:29:d5:40:7d:6a:72:fe:99:c1:66:27:e7:
         3f:9e:1a:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:14 2026 by rpki-client