Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
File:                     5C5CACqDeHpnr4y5qFH5OZdGwTI.mft (raw, json)
Hash identifier:          q+VpVnH/hnt3znQSuJ2++tqNYdHfKcljcF8R0ys5EUE=
Subject key identifier:   DB:4B:42:EE:35:4E:98:8D:4A:FE:3F:A4:04:8B:53:EC:11:BF:AA:CE
Authority key identifier: E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32
Certificate issuer:       /CN=A91566DC/serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
Certificate serial:       0141
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
Manifest number:          0141
Signing time:             Tue 23 Jun 2026 05:32:08 +0000
Manifest this update:     Tue 23 Jun 2026 05:32:07 +0000
Manifest next update:     Tue 30 Jun 2026 05:32:07 +0000
Files and hashes:         1: 5C5CACqDeHpnr4y5qFH5OZdGwTI.crl (hash: dkDR49a0aAzx/KUXYFCKL494gQDNKsBmIQBmqMLXir8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl
                          rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 05:32:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 321 (0x141)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91566DC, serialNumber=E42E42002A83787A67AF8CB9A851F9399746C132
        Validity
            Not Before: Jun 23 05:32:07 2026 GMT
            Not After : Jun 30 05:32:07 2026 GMT
        Subject: CN=6a3a1a57-f3ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:e7:9c:24:07:ed:90:e2:76:28:40:3b:52:a7:
                    ca:d5:f2:bd:c8:cd:89:2b:d9:58:3a:24:24:e7:c6:
                    7d:70:c1:b3:82:74:b0:46:3f:35:46:59:d9:43:7d:
                    33:af:c0:29:a0:ae:52:d0:5c:b8:51:30:b5:d7:2f:
                    b9:93:98:9c:10:5f:d3:7c:18:f4:29:e3:08:37:85:
                    41:5b:52:9a:ef:2e:5e:86:55:d9:5b:7d:d8:16:f1:
                    0a:66:c7:de:3e:66:40:6c:27:11:be:cf:86:35:4e:
                    44:21:10:40:68:a0:ad:0b:9f:a5:7c:9c:b4:89:38:
                    e8:d7:e6:5e:85:e5:f9:6a:55:10:a6:ec:e1:8f:9e:
                    3d:77:bd:97:b9:cd:4a:35:ba:6b:96:c9:b3:07:e7:
                    c5:ec:89:2b:03:64:a9:a4:70:9f:0e:a6:fe:71:a3:
                    6b:8d:6b:9c:2e:d9:19:ad:f0:2b:32:dc:e0:dc:26:
                    15:21:41:90:b9:20:5d:6c:26:67:f0:32:e4:64:c8:
                    e1:75:ed:36:d9:8a:14:57:98:c8:94:c5:c8:33:a9:
                    9c:a8:9e:6c:04:aa:87:41:e0:b9:a1:3c:53:56:1d:
                    70:75:26:23:4a:3e:53:3c:53:b8:74:e9:67:00:cd:
                    53:30:58:80:23:1e:a2:14:1e:2d:27:0b:32:07:2c:
                    87:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:4B:42:EE:35:4E:98:8D:4A:FE:3F:A4:04:8B:53:EC:11:BF:AA:CE
            X509v3 Authority Key Identifier:
                keyid:E4:2E:42:00:2A:83:78:7A:67:AF:8C:B9:A8:51:F9:39:97:46:C1:32

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5C5CACqDeHpnr4y5qFH5OZdGwTI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91566DC/80CE278A846B11EF9C424D3AC4F9AE02/5C5CACqDeHpnr4y5qFH5OZdGwTI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:ba:b4:af:99:2b:0e:a9:39:4d:d6:d5:42:80:66:00:a1:e4:
         33:d4:17:31:02:fd:c3:b7:c1:b9:fe:9f:12:52:f2:a4:2e:0f:
         e5:12:c1:ef:7a:14:47:72:d2:88:b1:e9:8c:a1:cf:b0:67:7b:
         6c:95:8b:7c:74:19:9d:10:30:6a:a6:c7:71:96:08:cb:50:c9:
         b6:58:d2:ca:b7:50:5a:15:12:4d:d9:4a:6a:db:e3:0b:3f:d3:
         7a:69:e2:26:69:68:e2:3b:eb:da:f2:3c:84:45:33:09:33:fd:
         85:10:44:e1:2e:7a:d7:36:c0:78:50:10:a0:58:5f:4a:ef:bd:
         96:31:67:72:e9:0a:89:61:7f:58:ec:05:c9:d3:58:48:db:a3:
         da:98:d4:57:bf:75:de:7f:fc:0c:d4:33:e6:4b:25:90:68:2e:
         ae:37:7a:6f:91:c8:e5:4b:17:80:4e:0d:85:5b:f8:67:16:fa:
         32:80:29:27:31:ee:e0:02:af:f5:23:df:f0:f0:fd:8e:9c:af:
         15:a0:74:84:62:a7:de:57:fb:46:25:b1:0c:fa:36:14:9a:db:
         e4:3c:e3:a1:63:5e:4e:8e:53:12:32:a0:93:68:13:f3:50:e0:
         52:45:44:e7:2a:60:83:64:6a:9b:09:17:81:b3:ba:c9:b4:91:
         16:6b:49:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:28:49 2026 by rpki-client