Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
File:                     f3UA8ZRiBwd03Is7S5avThubtUU.mft (raw, json)
Hash identifier:          MX671lKzZGSReil1RsGMDCO4QTQ6rtHm/x/uQiL0pdw=
Subject key identifier:   3A:0A:D3:F4:08:C3:3C:E8:66:53:31:82:23:C8:5A:A4:07:4F:53:74
Authority key identifier: 7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45
Certificate issuer:       /CN=A91A840E/serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545
Certificate serial:       2EC6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
Manifest number:          2EC6
Signing time:             Wed 20 May 2026 15:29:18 +0000
Manifest this update:     Wed 20 May 2026 15:29:18 +0000
Manifest next update:     Wed 27 May 2026 15:29:18 +0000
Files and hashes:         1: f3UA8ZRiBwd03Is7S5avThubtUU.crl (hash: TiX8vcivPdu7VoV0xoR0rXfs/JkUtro9bOT6whshpvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl
                          rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:29:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11974 (0x2ec6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A840E, serialNumber=7F7500F19462070774DC8B3B4B96AF4E1B9BB545
        Validity
            Not Before: May 20 15:29:18 2026 GMT
            Not After : May 27 15:29:18 2026 GMT
        Subject: CN=6a0dd34e-c881
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:98:22:ef:84:4c:78:46:08:6f:57:3d:86:6d:
                    69:75:af:c1:ec:d7:0d:c8:e8:54:89:4c:bb:49:65:
                    a1:99:51:a5:16:2d:09:05:4b:fb:a6:e1:67:90:f1:
                    e8:f3:e2:f2:26:e7:01:04:ff:80:8b:36:7d:3e:8c:
                    b5:bc:af:c5:a3:5b:9d:a9:34:2f:fa:c5:7f:5f:df:
                    50:e1:11:8a:85:68:6d:07:16:85:01:68:c8:38:9a:
                    3a:65:34:a6:b3:87:05:35:5b:aa:f7:b5:07:14:3c:
                    06:ed:9e:8b:ba:63:a4:a8:e9:b8:b1:18:cc:aa:40:
                    ce:17:8c:3f:31:56:03:1e:bc:82:f5:94:e9:07:ca:
                    13:1c:59:71:76:f7:f8:da:95:41:78:e6:b3:c8:51:
                    e3:39:4b:0a:da:fe:fd:9b:fc:3c:d2:56:fe:37:57:
                    9a:23:a2:f7:59:0d:af:0d:79:4a:16:29:33:51:5d:
                    29:99:16:58:aa:86:22:5b:e7:fa:0d:07:a3:1d:42:
                    7a:4d:18:df:c3:c6:37:7b:23:ef:ae:bb:da:19:ba:
                    bc:90:24:74:22:4a:cc:f2:4a:aa:d3:3f:e9:73:16:
                    ea:9f:bc:2f:2b:fd:fa:24:f5:12:1a:d5:ff:d8:3a:
                    f5:04:a5:47:1c:f2:36:0f:c2:5d:29:1f:64:6b:ee:
                    b2:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:0A:D3:F4:08:C3:3C:E8:66:53:31:82:23:C8:5A:A4:07:4F:53:74
            X509v3 Authority Key Identifier:
                keyid:7F:75:00:F1:94:62:07:07:74:DC:8B:3B:4B:96:AF:4E:1B:9B:B5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/f3UA8ZRiBwd03Is7S5avThubtUU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A840E/DA10FF6662EE11E3AAD99F835911EA32/f3UA8ZRiBwd03Is7S5avThubtUU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:a4:63:42:6e:27:98:34:47:4b:ac:15:da:78:46:48:35:f4:
         4c:5c:59:9c:81:b1:2b:ac:51:6f:1c:22:a5:ec:a0:a7:e0:12:
         47:f1:bc:e4:e5:81:e1:94:8d:00:49:47:0b:a5:15:e1:7a:54:
         62:04:66:8e:cd:97:98:cd:e9:05:18:ef:51:8b:7b:72:8f:7e:
         a8:de:c3:06:16:b6:b5:3e:6f:c7:3a:89:20:cf:fe:52:87:7b:
         ed:58:59:52:ef:7d:0a:3d:12:59:e7:aa:0d:25:8d:9a:7e:0e:
         da:a4:7d:d5:f4:79:b1:55:90:d8:19:f0:f7:c4:a5:29:0e:a2:
         27:8a:5c:e9:2b:d9:cf:b9:b8:f4:63:71:4b:87:15:ec:65:39:
         28:36:aa:a2:b2:18:81:40:0f:54:a0:a5:22:2e:bc:6e:2d:02:
         1d:70:73:8e:16:57:b4:ab:26:f7:59:21:6a:0a:0b:d2:26:e5:
         f6:a1:80:b6:70:23:50:e0:30:c2:20:07:36:ec:58:d8:06:d2:
         88:75:5b:cd:27:94:6f:69:c2:73:03:94:3b:c1:4a:e6:5e:c5:
         5b:40:6a:12:91:1d:04:7e:6f:ec:f8:14:25:51:e4:cf:ce:87:
         a4:cb:d5:f9:6f:4c:25:19:58:ff:34:f7:70:a3:91:90:27:c2:
         c6:68:4a:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:28:43 2026 by rpki-client