Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
File:                     FzXLqe4W_oXz0oP6W7lHnZryzIY.mft (raw, json)
Hash identifier:          gOdyS8OMWlxEaMH16y7fkmVaKsKPDHBgWLrLHS79Bes=
Subject key identifier:   E9:C9:93:85:B3:EF:AC:EC:26:54:59:0C:95:22:B8:DF:B9:1B:2D:D5
Authority key identifier: 17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86
Certificate issuer:       /CN=A91757CB/serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
Certificate serial:       018C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
Manifest number:          018C
Signing time:             Thu 21 May 2026 04:26:32 +0000
Manifest this update:     Thu 21 May 2026 04:26:31 +0000
Manifest next update:     Thu 28 May 2026 04:26:31 +0000
Files and hashes:         1: FzXLqe4W_oXz0oP6W7lHnZryzIY.crl (hash: 9PzxdXwtZAGDffjROpe2Rn5LzQmkRFPU2g0GPuRhhMA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl
                          rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:26:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91757CB, serialNumber=1735CBA9EE16FE85F3D283FA5BB9479D9AF2CC86
        Validity
            Not Before: May 21 04:26:31 2026 GMT
            Not After : May 28 04:26:31 2026 GMT
        Subject: CN=6a0e8978-cdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:18:01:fc:1e:d4:37:60:54:cc:5d:7a:f7:27:
                    86:b1:cf:36:05:d8:20:0a:81:61:c9:49:a1:33:1f:
                    1b:16:19:08:54:48:9d:9c:f5:39:ff:2c:b9:af:f1:
                    a8:e6:9f:94:a4:18:ae:e2:c1:50:3a:6c:70:61:dd:
                    6e:9d:56:22:c4:6f:e9:cf:6d:f8:e2:21:40:9a:b3:
                    02:3e:03:53:7b:8b:49:12:7e:ec:f6:e2:33:81:18:
                    b5:2a:a2:6a:cb:4e:b1:5d:4c:55:24:cc:ac:8d:3e:
                    1a:82:c7:e3:0e:7d:00:34:da:19:59:5e:a0:11:42:
                    1e:ca:c1:e1:88:30:79:0f:0a:9a:b1:69:f0:e1:29:
                    29:dd:dd:d0:61:ff:55:9a:70:2b:8a:1a:76:35:fe:
                    b8:9c:ad:d7:97:13:2a:d9:5c:2b:23:40:9c:8d:39:
                    4b:65:86:0f:cf:f1:5e:13:2a:84:da:26:35:32:bd:
                    5f:8d:59:17:db:17:b2:40:9c:de:54:ef:39:8a:66:
                    93:b2:2d:fd:ae:ac:4a:c1:15:bf:a8:a9:9e:b0:95:
                    a4:12:49:e3:12:f0:1e:d2:10:a3:14:50:8d:49:34:
                    64:30:08:9f:97:e8:c0:75:2c:6a:15:c6:cc:94:28:
                    4d:1f:fe:10:60:4f:d9:8d:b9:78:f3:47:ee:55:70:
                    e4:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:C9:93:85:B3:EF:AC:EC:26:54:59:0C:95:22:B8:DF:B9:1B:2D:D5
            X509v3 Authority Key Identifier:
                keyid:17:35:CB:A9:EE:16:FE:85:F3:D2:83:FA:5B:B9:47:9D:9A:F2:CC:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FzXLqe4W_oXz0oP6W7lHnZryzIY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91757CB/4ED212DCF2F811EEA3506738C4F9AE02/FzXLqe4W_oXz0oP6W7lHnZryzIY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b7:10:ae:5b:b4:72:5f:07:84:d5:bd:79:16:d1:1b:c2:13:3b:
         35:a4:82:5c:9d:b9:0c:1c:e3:76:a2:34:4b:05:d5:75:9b:d4:
         7e:b1:78:a1:4a:6d:c9:7a:90:e8:fa:ae:49:85:02:20:c2:08:
         aa:85:e6:60:e2:a2:e6:54:12:a7:64:52:c9:d4:c5:51:98:ef:
         92:61:83:5b:a6:4f:1a:5c:90:c1:12:a5:b6:ea:67:07:0a:54:
         ba:d8:f5:99:c1:83:04:c7:4a:85:ca:28:6b:fd:c3:91:20:a4:
         61:c4:31:5e:15:6c:5e:b0:1c:85:9a:e6:d9:e0:7d:b5:3f:f8:
         b7:e8:08:4b:a3:62:64:50:d3:90:16:6b:3f:18:de:3d:bf:49:
         59:ab:ee:f5:9f:67:e6:da:2c:89:68:48:77:2f:12:69:53:e2:
         f8:46:29:66:b5:77:6c:c6:24:44:a8:7f:cf:d0:fd:16:90:ff:
         df:78:84:a0:6d:7b:1c:65:45:21:75:40:a1:fc:f8:f0:61:e2:
         bc:4f:0e:0e:8b:43:62:d6:00:48:31:e3:cc:f3:29:a6:4a:90:
         b1:bb:98:44:2b:ee:10:dc:c4:6a:6b:49:ac:9a:89:64:9d:29:
         69:43:64:1a:09:64:27:c0:8d:34:a6:9d:b5:15:45:35:2e:88:
         d2:5d:8d:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:44 2026 by rpki-client