Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.mft
File:                     eVZfOC7NGS_QQkpxnNcG0bey5ak.mft (raw, json)
Hash identifier:          i/iu00TcAf5Y7tWm22QiM5+vU5cyLQMqndDkxEd+tpc=
Subject key identifier:   6B:99:04:BD:A8:4F:DB:61:2C:44:2D:1B:A3:31:62:39:61:00:B2:93
Authority key identifier: 79:56:5F:38:2E:CD:19:2F:D0:42:4A:71:9C:D7:06:D1:B7:B2:E5:A9
Certificate issuer:       /CN=A916DD4C/serialNumber=79565F382ECD192FD0424A719CD706D1B7B2E5A9
Certificate serial:       05
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVZfOC7NGS_QQkpxnNcG0bey5ak.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.mft
Manifest number:          05
Signing time:             Tue 19 May 2026 09:07:25 +0000
Manifest this update:     Tue 19 May 2026 09:07:24 +0000
Manifest next update:     Tue 26 May 2026 09:07:24 +0000
Files and hashes:         1: eVZfOC7NGS_QQkpxnNcG0bey5ak.crl (hash: KQ5TyIW5z00sBJPyg+nxG1lIKrQBQlvbSiChm9MzQYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.crl
                          rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVZfOC7NGS_QQkpxnNcG0bey5ak.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 09:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916DD4C, serialNumber=79565F382ECD192FD0424A719CD706D1B7B2E5A9
        Validity
            Not Before: May 19 09:07:24 2026 GMT
            Not After : May 26 09:07:24 2026 GMT
        Subject: CN=6a0c284d-0379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:df:34:f7:db:fd:d2:0c:6e:21:47:8c:a1:ec:
                    9e:1d:6a:a6:b4:0d:19:22:18:e4:66:a7:fe:96:2e:
                    2b:a8:c7:cd:41:67:ad:db:1e:ea:f8:e6:f2:1b:9b:
                    e8:b3:50:0d:dc:09:ea:03:fa:0c:c9:87:b2:60:d6:
                    7c:a6:30:78:39:ee:85:44:88:77:d6:24:3a:a2:2d:
                    cd:d0:87:17:87:99:af:8e:f8:f3:53:be:3f:85:06:
                    0c:30:86:59:a4:b1:a2:c6:5b:db:68:8a:c8:c7:38:
                    40:46:77:60:98:c9:12:c1:a0:d6:37:54:cf:a4:c0:
                    19:e8:e0:1e:4f:3a:a7:8c:00:7d:e8:81:ca:7e:dd:
                    0c:20:2d:e5:6a:bd:31:0f:64:67:3b:2e:b6:32:d1:
                    17:ec:77:fd:33:c7:e9:ba:ba:2f:37:94:04:e6:82:
                    e3:9b:f2:57:aa:e1:b5:f2:fb:92:a2:9b:d4:6f:75:
                    ae:ab:82:2b:6a:d0:27:2e:43:96:d0:77:05:25:95:
                    f7:b5:04:8c:cf:e4:3f:26:c8:75:a8:c4:f8:c1:36:
                    4d:64:23:58:0e:cb:c4:55:28:ab:58:b9:29:9d:8d:
                    2c:13:e8:17:c5:31:38:11:ac:dd:02:2f:b5:c0:93:
                    57:69:b7:fb:52:dd:31:2a:a5:63:52:2d:31:ee:01:
                    88:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:99:04:BD:A8:4F:DB:61:2C:44:2D:1B:A3:31:62:39:61:00:B2:93
            X509v3 Authority Key Identifier:
                keyid:79:56:5F:38:2E:CD:19:2F:D0:42:4A:71:9C:D7:06:D1:B7:B2:E5:A9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/eVZfOC7NGS_QQkpxnNcG0bey5ak.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916DD4C/EF0C93CE4F5011F1B08C87E5BC833773/eVZfOC7NGS_QQkpxnNcG0bey5ak.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:a3:c3:57:6a:ae:c1:3f:14:3b:1c:cf:e3:c4:2e:f9:f9:
         b6:d0:c4:e9:02:c2:00:3e:02:c7:1e:68:00:07:74:b6:03:4f:
         c4:be:eb:8c:db:15:e8:c3:70:c2:a7:de:67:f2:01:db:a7:80:
         df:00:1b:0d:b5:8a:8d:fe:3d:87:4d:ac:0f:51:de:8e:59:c9:
         b9:55:f8:cd:68:85:5e:bc:30:00:c4:bb:4d:fe:bf:c1:31:d9:
         32:f9:f3:e2:a2:8b:7c:61:f4:f0:9f:ae:97:d9:ea:06:5f:97:
         48:f0:93:6b:24:a7:69:92:4c:54:8b:41:6d:86:a8:e0:b8:23:
         bf:0f:11:a1:e0:12:87:90:6a:e2:b8:88:ab:a8:57:95:b9:95:
         d4:f8:b4:fd:58:2a:e5:c6:86:5c:f8:89:6d:9b:a6:55:13:3f:
         3a:fa:ae:c3:be:7f:cb:9a:8a:67:b4:a7:eb:7a:22:06:4f:f8:
         b9:f5:36:86:97:c9:3f:92:fb:a8:8d:0b:45:5e:8b:15:3a:17:
         f1:be:68:84:93:10:09:f7:74:3a:35:f7:6d:39:27:62:c9:5e:
         87:e4:6f:a2:3b:e5:51:da:58:79:e9:ea:56:39:9b:6f:2b:87:
         e4:a9:b6:f4:3e:67:ac:70:2d:eb:30:8a:c3:c8:fa:46:01:3d:
         5f:16:38:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:34:20 2026 by rpki-client