Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
File:                     A0kndy5R4IVbEP1QK4FvJDRhm_I.mft (raw, json)
Hash identifier:          LOBRho3O4ZIo6YgUnotEPiLYBOc3LrK1Jn2szV/whjo=
Subject key identifier:   A7:C3:00:CF:6B:CF:35:70:C4:A8:C3:99:EF:3A:58:67:BD:28:E7:62
Authority key identifier: 03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2
Certificate issuer:       /CN=A91676C8/serialNumber=034927772E51E0855B10FD502B816F2434619BF2
Certificate serial:       0E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
Manifest number:          0D
Signing time:             Tue 19 May 2026 09:01:12 +0000
Manifest this update:     Tue 19 May 2026 09:01:12 +0000
Manifest next update:     Tue 26 May 2026 09:01:12 +0000
Files and hashes:         1: A0kndy5R4IVbEP1QK4FvJDRhm_I.crl (hash: 85G+zCwsNM1A33XQ41xLdWs2EDd5OLFWSOdN7xlwIo8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl
                          rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:01:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91676C8, serialNumber=034927772E51E0855B10FD502B816F2434619BF2
        Validity
            Not Before: May 19 09:01:12 2026 GMT
            Not After : May 26 09:01:12 2026 GMT
        Subject: CN=6a0c26d8-ba6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:89:d0:ff:1a:f1:d8:cc:23:8a:c0:62:e8:6f:
                    9b:cc:68:b6:bd:4c:c7:a5:46:12:39:99:32:cd:cc:
                    8b:f8:9b:d8:03:37:29:51:e5:59:64:b6:b3:aa:18:
                    40:3c:82:bf:3d:87:38:d8:2f:79:de:f2:a3:ca:79:
                    c3:26:af:2e:54:8d:65:bd:29:12:b4:e0:d9:8a:09:
                    63:3e:13:bb:00:4d:7f:d6:2e:e8:d9:2e:b7:8e:cf:
                    60:0d:a8:6e:bf:b4:7a:89:8b:ec:9e:b9:77:a1:e4:
                    ea:85:a2:fa:17:d2:95:84:96:76:01:27:5e:98:bd:
                    58:da:6a:55:ca:d0:3f:29:96:9a:5f:86:ea:20:fa:
                    67:fa:ef:29:fd:1d:61:c2:39:11:cc:5e:21:39:6e:
                    63:d2:1a:5e:c4:84:58:26:8e:30:e3:40:ea:b5:ba:
                    a9:f2:65:fa:99:d8:cc:57:74:8e:25:b8:d4:6e:88:
                    a0:25:41:73:93:fe:1d:40:d5:c9:b2:e2:14:65:a7:
                    e7:e6:be:36:62:9b:fe:4a:ce:04:f5:07:14:f7:1d:
                    0f:8c:86:cc:c8:96:3b:53:00:28:a6:18:99:ff:8c:
                    a7:25:af:38:01:8e:1e:1a:59:14:be:43:3b:09:fb:
                    00:16:32:1f:30:9b:46:48:f3:5c:d6:a8:e2:c0:b6:
                    a0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C3:00:CF:6B:CF:35:70:C4:A8:C3:99:EF:3A:58:67:BD:28:E7:62
            X509v3 Authority Key Identifier:
                keyid:03:49:27:77:2E:51:E0:85:5B:10:FD:50:2B:81:6F:24:34:61:9B:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0kndy5R4IVbEP1QK4FvJDRhm_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91676C8/3A66502044A311F1BDE90A3FB1833773/A0kndy5R4IVbEP1QK4FvJDRhm_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:81:38:25:aa:77:28:f8:f7:f2:d7:27:31:c5:25:4e:34:fc:
         96:0e:60:df:ba:39:57:8e:1b:0e:64:54:b8:86:fd:bf:2d:95:
         b1:31:36:77:d2:a9:22:5b:04:c5:29:cc:ca:ba:42:d7:8a:ef:
         18:ce:4f:0a:88:b6:89:5b:6b:f1:42:8f:28:92:e4:03:fc:6b:
         18:2e:de:f5:c3:5d:73:2f:22:5e:44:cd:b3:5b:91:9e:ec:36:
         50:1c:1f:ef:c4:9b:db:28:9a:99:97:11:e1:da:b4:4d:59:ae:
         e9:c3:51:f1:17:c8:76:7a:4c:21:61:a4:b6:ef:6f:8f:68:f4:
         2e:6a:14:66:03:21:9f:16:a4:bd:59:51:7e:00:ca:46:bd:c9:
         b1:70:5d:ec:eb:e9:ab:15:7f:e3:b3:08:89:2c:d1:c8:58:6f:
         a3:e7:36:9e:39:21:5a:23:d1:62:d6:c8:50:ff:da:60:cf:30:
         07:a1:36:64:a2:ac:de:ea:94:f8:ef:fa:21:61:60:93:09:5e:
         96:08:b5:c6:6c:20:8b:4d:db:c6:37:d0:ba:3b:b0:3b:96:73:
         5a:a6:d1:42:4d:c5:f1:57:b7:e8:e7:65:34:e5:07:e4:18:96:
         ea:da:e7:3d:a3:01:93:4b:65:1d:23:b2:10:a5:d2:9e:1d:17:
         f0:1a:ac:9c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBDjANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE2
NzZDODExMC8GA1UEBRMoMDM0OTI3NzcyRTUxRTA4NTVCMTBGRDUwMkI4MTZGMjQz
NDYxOUJGMjAeFw0yNjA1MTkwOTAxMTJaFw0yNjA1MjYwOTAxMTJaMBgxFjAUBgNV
BAMTDTZhMGMyNmQ4LWJhNmMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDoidD/GvHYzCOKwGLob5vMaLa9TMelRhI5mTLNzIv4m9gDNylR5VlktrOqGEA8
gr89hzjYL3ne8qPKecMmry5UjWW9KRK04NmKCWM+E7sATX/WLujZLreOz2ANqG6/
tHqJi+yeuXeh5OqFovoX0pWElnYBJ16YvVjaalXK0D8plppfhuog+mf67yn9HWHC
ORHMXiE5bmPSGl7EhFgmjjDjQOq1uqnyZfqZ2MxXdI4luNRuiKAlQXOT/h1A1cmy
4hRlp+fmvjZim/5KzgT1BxT3HQ+MhszIljtTACimGJn/jKclrzgBjh4aWRS+QzsJ
+wAWMh8wm0ZI81zWqOLAtqA/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUp8MAz2vP
NXDEqMOZ7zpYZ70o52IwHwYDVR0jBBgwFoAUA0kndy5R4IVbEP1QK4FvJDRhm/Iw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3NkM4LzNBNjY1MDIwNDRB
MzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElWYkVQMVFLNEZ2SkRSaG1f
SS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvQTBrbmR5NVI0SVZiRVAxUUs0RnZKRFJobV9JLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTY3
NkM4LzNBNjY1MDIwNDRBMzExRjFCREU5MEEzRkIxODMzNzczL0Ewa25keTVSNElW
YkVQMVFLNEZ2SkRSaG1fSS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQAMgTglqnco+Pfy1ycxxSVONPyWDmDfujlXjhsOZFS4hv2/LZWxMTZ30qkiWwTF
KczKukLXiu8Yzk8KiLaJW2vxQo8okuQD/GsYLt71w11zLyJeRM2zW5Ge7DZQHB/v
xJvbKJqZlxHh2rRNWa7pw1HxF8h2ekwhYaS272+PaPQuahRmAyGfFqS9WVF+AMpG
vcmxcF3s6+mrFX/jswiJLNHIWG+j5zaeOSFaI9Fi1shQ/9pgzzAHoTZkoqze6pT4
7/ohYWCTCV6WCLXGbCCLTdvGN9C6O7A7lnNaptFCTcXxV7fo52U05QfkGJbq2uc9
owGTS2UdI7IQpdKeHRfwGqyc
-----END CERTIFICATE-----
Generated at Thu May 21 09:39:30 2026 by rpki-client