Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
File:                     neMlQlgPqEMWU4o96yhx6CVW97g.mft (raw, json)
Hash identifier:          99JjIkcjdOcrMkAgasM8JwUqQ0eaXjYfCU8fiiPuDqA=
Subject key identifier:   D4:13:71:42:CD:A3:9C:2E:15:BC:11:21:3B:37:E6:06:F1:54:16:C9
Authority key identifier: 9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8
Certificate issuer:       /CN=A91B42CA/serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
Certificate serial:       074F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
Manifest number:          54B9
Signing time:             Wed 20 May 2026 15:04:26 +0000
Manifest this update:     Wed 20 May 2026 15:04:26 +0000
Manifest next update:     Wed 27 May 2026 15:04:26 +0000
Files and hashes:         1: neMlQlgPqEMWU4o96yhx6CVW97g.crl (hash: vnpzllzzF8r4VQEUPV0NwcP5iRq8N09s7u9cEpd4stE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl
                          rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:04:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1871 (0x74f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B42CA, serialNumber=9DE32542580FA84316538A3DEB2871E82556F7B8
        Validity
            Not Before: May 20 15:04:26 2026 GMT
            Not After : May 27 15:04:26 2026 GMT
        Subject: CN=6a0dcd7a-3a02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a3:c7:55:38:de:9b:83:22:a0:18:8c:b4:b4:
                    0c:77:7c:5e:04:39:a9:72:7e:d9:04:ff:8d:73:99:
                    a7:44:db:9a:b5:c3:4d:6d:49:b7:0f:b6:9d:77:bc:
                    32:18:2a:e0:31:fc:41:08:07:1b:52:b3:f3:ef:b3:
                    05:64:ac:4c:e3:e7:fc:11:4c:75:ca:7d:6a:4f:fa:
                    01:39:01:38:2a:21:67:d8:4e:35:2a:e4:51:03:57:
                    57:78:03:a3:14:ab:f8:28:41:b0:bd:5d:3e:4b:6d:
                    5a:a0:d5:5a:f5:5f:50:52:6d:e6:d5:03:9b:16:b7:
                    85:d6:35:56:7c:ec:7f:27:a9:4f:52:8f:51:d8:af:
                    5b:79:da:3c:4b:b2:39:4a:76:4a:ed:a8:3c:ec:78:
                    ef:00:25:03:38:78:b0:b0:6d:9f:d0:bd:98:d7:54:
                    0d:d3:c2:4d:47:d6:05:70:98:73:b6:b3:02:68:0b:
                    fa:03:2c:22:9f:1d:f8:f9:ed:87:af:bc:7c:55:7e:
                    10:4b:5d:22:2d:45:16:c0:52:be:85:89:68:fc:86:
                    d2:1d:c6:4f:20:8b:71:74:30:36:6e:11:92:8d:99:
                    3e:da:1f:02:3c:68:fc:65:ce:44:6a:54:f0:a7:b7:
                    ff:1c:7c:23:95:e7:62:f4:67:8f:73:cc:59:86:03:
                    8b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:13:71:42:CD:A3:9C:2E:15:BC:11:21:3B:37:E6:06:F1:54:16:C9
            X509v3 Authority Key Identifier:
                keyid:9D:E3:25:42:58:0F:A8:43:16:53:8A:3D:EB:28:71:E8:25:56:F7:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/neMlQlgPqEMWU4o96yhx6CVW97g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B42CA/D34DB97E1DA011E283A1619208B02CD2/neMlQlgPqEMWU4o96yhx6CVW97g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:7f:f3:b1:4b:ac:46:d7:2d:f5:3a:e9:7d:76:b3:a5:c3:d1:
         09:ec:0f:f9:fb:a8:6b:16:c0:2f:48:ca:55:6f:ac:a4:97:ce:
         99:4a:ca:80:ee:98:65:d4:d7:f3:74:42:21:a2:4e:a2:1b:ee:
         1e:1b:40:15:d7:ec:1c:68:60:bb:6b:2b:ca:21:66:70:d5:4f:
         41:1f:14:19:fb:9c:ee:3a:c9:63:97:6d:a9:d3:83:ff:c5:be:
         3f:c9:e8:5c:36:ea:99:fb:d9:06:24:c8:59:d3:c0:60:56:4c:
         99:60:d0:fe:80:5a:6e:c3:7d:9e:c1:b8:06:b6:10:39:c9:57:
         07:b0:26:37:dc:b7:9a:cd:76:79:7f:c2:3f:25:65:d0:ac:a1:
         6c:7a:2d:66:1b:d2:c7:ee:89:19:32:79:11:47:c2:18:4e:f6:
         e9:64:0b:c7:80:a9:36:03:87:ac:09:fc:95:58:03:ca:e8:7f:
         6c:fb:3f:c5:68:a4:5b:64:f5:60:7b:cd:a1:08:a5:d7:f6:79:
         35:af:df:5c:a7:2e:d0:9f:96:7c:b6:7d:17:b6:bf:7d:b7:a9:
         fe:4c:88:9e:81:29:f6:1a:bb:b5:20:22:bf:b9:62:c5:fa:29:
         da:0c:a0:ae:1f:35:2b:17:9c:4a:8a:78:dc:7e:e3:11:37:7f:
         ff:14:f9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:38:30 2026 by rpki-client