Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
File:                     RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft (raw, json)
Hash identifier:          +7FX0+36QM348HpcDH4brWoNxPVuzS2XyM1lEddZo4A=
Subject key identifier:   29:AB:4B:A1:07:5C:A1:DA:64:22:E0:0C:0E:75:50:87:AC:DD:44:DA
Authority key identifier: 44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87
Certificate issuer:       /CN=A91807BB/serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
Certificate serial:       0135
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
Manifest number:          0135
Signing time:             Thu 21 May 2026 05:33:08 +0000
Manifest this update:     Thu 21 May 2026 05:33:08 +0000
Manifest next update:     Thu 28 May 2026 05:33:08 +0000
Files and hashes:         1: RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl (hash: Gur+Pl31BMutjfh0faag0jC4WgwyGpNIMzq92ZGb37I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl
                          rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:33:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91807BB, serialNumber=44F9C4DA47E6371FD1C9F9F8E564D1803A0F3287
        Validity
            Not Before: May 21 05:33:08 2026 GMT
            Not After : May 28 05:33:08 2026 GMT
        Subject: CN=6a0e9914-16af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:76:f5:c6:a6:39:6d:20:03:c6:a1:0f:29:cc:
                    1c:3c:df:21:ba:0f:b3:8a:af:1d:d0:2b:92:f5:87:
                    84:f9:88:b3:58:22:d5:ce:65:8d:4e:4a:33:61:f9:
                    2d:09:77:57:40:a1:1e:84:f1:12:f1:6d:b6:c5:0b:
                    40:7f:bf:f6:b6:1c:a4:60:e6:91:9e:d6:8b:68:e0:
                    0e:42:b3:a8:bd:98:22:96:9b:95:84:84:0e:d5:ec:
                    5d:00:5f:e9:db:82:c1:b1:31:a8:4c:4d:35:f7:7b:
                    c6:86:1e:df:9c:18:d2:22:88:b1:b4:cc:f6:0e:28:
                    bf:c6:f5:0c:ca:f6:69:f8:93:c5:e4:da:7f:2e:df:
                    71:45:3d:a0:1c:85:bb:c6:35:ba:77:58:a9:43:d2:
                    43:4a:1e:a5:3b:c0:f7:d6:d8:e1:89:45:d3:14:1e:
                    06:cc:9d:c9:fa:eb:db:f8:5c:2a:4b:e4:b5:ba:5f:
                    25:47:52:41:c7:f5:3d:77:e6:d4:62:60:1d:fa:df:
                    76:a4:85:67:08:df:00:0f:32:fb:99:b5:08:b3:b0:
                    2b:f7:68:fc:59:66:ce:ec:f8:70:01:c7:b4:d3:fd:
                    b7:a6:04:88:5f:5c:7e:0b:18:b1:54:2d:4d:b3:d8:
                    fd:6d:7e:88:ef:58:2e:56:ba:d3:c3:e9:83:7f:17:
                    28:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:AB:4B:A1:07:5C:A1:DA:64:22:E0:0C:0E:75:50:87:AC:DD:44:DA
            X509v3 Authority Key Identifier:
                keyid:44:F9:C4:DA:47:E6:37:1F:D1:C9:F9:F8:E5:64:D1:80:3A:0F:32:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RPnE2kfmNx_Ryfn45WTRgDoPMoc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91807BB/0AE482907CB311EF96C9F250C4F9AE02/RPnE2kfmNx_Ryfn45WTRgDoPMoc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:be:ab:68:0f:3f:82:24:e5:6f:3e:7c:2a:ea:25:78:0b:aa:
         bd:b3:14:b8:68:d4:d8:33:ce:35:7d:3c:32:5b:27:fd:0c:05:
         93:ca:8b:28:54:52:99:94:7c:26:a6:0c:6f:08:8a:73:62:14:
         63:7c:cf:c8:c9:33:99:2e:bc:4e:18:55:4e:3c:fb:31:49:87:
         d9:47:65:06:f6:b9:64:9e:35:38:63:49:35:14:5d:0b:81:4d:
         3c:5e:3c:77:37:ed:be:6a:3d:7d:b9:0b:85:f4:47:94:72:33:
         e2:53:49:47:05:7d:f5:6a:97:81:b9:72:2d:06:37:f6:88:07:
         29:a0:8f:ad:53:0e:79:66:54:be:f4:5c:8a:1c:40:c4:09:c8:
         46:38:3f:74:4d:b8:19:ee:61:59:33:2a:ae:3f:7b:76:36:6e:
         29:a8:a0:da:db:ee:d0:95:93:a9:70:3d:eb:df:de:c2:37:74:
         3d:8d:93:73:e1:5b:64:e0:be:3e:af:9c:5a:08:9b:1c:02:ff:
         d3:7c:0f:01:c1:fe:a8:54:05:c8:30:60:e3:a1:ff:0b:8e:5d:
         60:d0:fd:5f:f1:e7:3e:78:2a:c4:bd:bd:0b:79:cf:aa:d2:9f:
         00:4b:21:44:87:1b:18:ac:e2:49:c4:9d:7c:93:c5:a9:75:8c:
         c9:c5:49:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:16:21 2026 by rpki-client