Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
File:                     FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft (raw, json)
Hash identifier:          5qoRXiKW7LiebzlpjmVtwrQzMB7+7VsMeAXXrwItUtk=
Subject key identifier:   4C:EA:4D:98:8D:75:E1:BE:E4:6F:5F:E9:9E:06:59:93:18:5D:81:52
Authority key identifier: 16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02
Certificate issuer:       /CN=A91A29D7/serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
Certificate serial:       70
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
Manifest number:          70
Signing time:             Thu 21 May 2026 07:55:22 +0000
Manifest this update:     Thu 21 May 2026 07:55:21 +0000
Manifest next update:     Thu 28 May 2026 07:55:21 +0000
Files and hashes:         1: FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl (hash: BAPEW7z15dTlKOND4LShLY4cEa8jonV8GHxSSWDn+UU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl
                          rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:55:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A29D7, serialNumber=16AC93D8D1066211F084116AD42A4344ED51C402
        Validity
            Not Before: May 21 07:55:21 2026 GMT
            Not After : May 28 07:55:21 2026 GMT
        Subject: CN=6a0eba69-f1ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:8b:1c:f4:d7:f1:bd:6f:d8:44:f7:5d:b9:c7:
                    b7:b5:1b:92:0b:f8:1d:85:66:2d:4e:ec:03:d8:b2:
                    de:2a:a5:51:f2:77:5a:ec:93:8b:17:af:bb:6c:7f:
                    11:91:e6:3d:4f:32:0f:ea:33:40:2e:be:90:1b:45:
                    8b:f4:0e:2c:2d:29:15:6e:ce:7f:34:7a:94:37:fc:
                    4f:e6:40:ac:e4:19:db:b9:64:e4:0b:2b:16:49:9a:
                    19:25:00:9b:e8:43:c8:2c:c7:0a:8c:c8:2b:57:8f:
                    94:61:4a:cd:2a:58:5b:6d:77:e1:a9:58:f3:f6:38:
                    e4:d1:f1:be:3d:90:9b:15:df:40:11:96:c9:47:83:
                    10:8c:d6:aa:1c:37:7e:ac:2a:b5:c6:5e:9b:04:a0:
                    37:70:cc:0e:c9:95:f1:3b:30:03:f1:17:26:d8:4a:
                    d7:4e:16:01:59:ae:80:c3:23:c3:6f:28:88:d6:e0:
                    42:3f:39:7b:7e:bd:a4:c4:0c:c6:8e:7f:c5:c0:cd:
                    94:75:48:e1:ef:6e:f3:63:de:61:ed:bb:b1:08:fe:
                    9c:fb:fa:cc:b4:ef:e1:8a:a5:8a:46:12:c7:f5:4b:
                    29:b2:79:a0:71:3e:31:94:ff:f1:5a:e5:4e:fb:ba:
                    18:cb:04:45:aa:c2:a6:29:35:5e:81:82:96:68:24:
                    ed:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:EA:4D:98:8D:75:E1:BE:E4:6F:5F:E9:9E:06:59:93:18:5D:81:52
            X509v3 Authority Key Identifier:
                keyid:16:AC:93:D8:D1:06:62:11:F0:84:11:6A:D4:2A:43:44:ED:51:C4:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FqyT2NEGYhHwhBFq1CpDRO1RxAI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A29D7/FB560B4EAD7311F0AF650254C4F9AE02/FqyT2NEGYhHwhBFq1CpDRO1RxAI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:dd:75:1b:43:99:0b:50:9d:eb:31:ea:37:77:2e:77:3b:aa:
         94:3d:a7:f0:22:f4:46:8d:db:7e:c5:aa:38:41:43:b3:56:75:
         3a:19:23:46:46:a3:01:28:e3:02:ee:5b:e1:5b:e8:a5:5e:2f:
         fc:b9:30:46:45:b1:e3:4d:81:9b:0a:71:12:3d:25:66:66:9d:
         95:14:68:6d:9c:ad:eb:8f:f7:45:2e:88:f5:a7:ba:eb:fb:b7:
         99:6e:e7:35:0b:3c:01:f1:20:93:c3:e7:9a:be:a0:27:c7:95:
         ab:94:5a:04:38:2e:1a:a6:a0:a4:0e:58:0f:59:06:0f:e7:74:
         e9:5c:9a:a1:d2:4d:c7:36:e4:5f:1e:42:b7:42:6b:18:a2:92:
         6e:5e:6a:94:98:f2:05:40:45:c3:96:07:ec:b8:fe:a9:05:28:
         ad:ba:60:dd:d3:3d:9b:cf:48:5f:ac:cf:8e:88:ef:a6:e1:b6:
         82:36:61:7a:a0:01:75:2f:7c:48:57:6f:8f:30:63:65:7b:18:
         04:e7:ef:21:21:48:49:6a:22:95:15:fe:8f:d1:e4:32:ea:e8:
         ac:bd:48:42:b3:60:19:3f:30:da:ca:d7:03:bf:89:62:d4:4c:
         a6:bc:a3:05:df:8d:b8:00:04:cd:45:2a:d7:6f:ca:d5:a3:fb:
         e7:df:43:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:14 2026 by rpki-client