Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
File:                     7cH-eLyHvyWy4419cs2cozAibOk.mft (raw, json)
Hash identifier:          3p7Vr0JabCotkcn2yshv1O/SwdfDEe7cBdwCb6TdY1U=
Subject key identifier:   C8:3E:F8:4A:84:9C:83:26:84:20:6C:9E:21:AF:EC:E8:3F:80:DC:77
Authority key identifier: ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9
Certificate issuer:       /CN=A91B5AAA/serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
Certificate serial:       353B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
Manifest number:          4131
Signing time:             Wed 20 May 2026 14:49:47 +0000
Manifest this update:     Wed 20 May 2026 14:49:47 +0000
Manifest next update:     Wed 27 May 2026 14:49:47 +0000
Files and hashes:         1: 7cH-eLyHvyWy4419cs2cozAibOk.crl (hash: CsMI4CUc6D9ULhpSNh+gBmBEBm93myFHTqtRmIHuKWI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl
                          rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:49:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13627 (0x353b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B5AAA, serialNumber=EDC1FE78BC87BF25B2E38D7D72CD9CA330226CE9
        Validity
            Not Before: May 20 14:49:47 2026 GMT
            Not After : May 27 14:49:47 2026 GMT
        Subject: CN=6a0dca0b-7f7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:dc:5a:c9:ca:7a:a8:ed:47:5e:76:43:a3:
                    af:f7:ed:7f:ad:3c:80:88:21:3b:41:39:95:3b:64:
                    5a:1e:39:3b:38:9e:85:01:61:56:44:5e:1b:3e:65:
                    42:62:c9:1a:c0:2c:0d:92:50:90:2c:66:18:42:09:
                    92:52:52:59:16:ba:8d:d6:d2:5a:4e:55:4e:dd:91:
                    8c:1a:a6:80:df:0e:65:16:46:2a:50:d8:6f:4a:6c:
                    5a:d0:34:81:54:f1:bf:d2:1a:e9:c8:e4:c7:bf:61:
                    27:f5:cd:04:7d:98:90:23:43:cb:d1:d3:1b:cf:25:
                    a3:e4:3b:73:0b:4a:e8:d4:15:8e:21:85:77:05:ec:
                    87:13:f6:8f:72:49:b2:d9:73:b0:28:c7:a7:8d:ed:
                    8c:16:19:e6:b9:f0:e7:de:2c:90:ce:57:0a:dd:81:
                    b6:0a:34:1b:0d:e0:c8:a7:76:e4:9a:24:e2:09:d3:
                    78:d2:e9:c5:27:1f:aa:47:1c:59:6e:7b:c7:07:b0:
                    dd:e2:24:64:d2:a1:5c:c4:06:01:cf:bc:54:49:03:
                    f3:b1:c5:c5:44:e6:d1:b7:ac:23:c2:e8:fe:fa:62:
                    4c:15:86:d0:ba:c4:38:f0:4a:b2:a4:61:40:34:bf:
                    93:de:3c:15:a7:06:31:1e:04:43:ac:dc:7f:47:e3:
                    f4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:3E:F8:4A:84:9C:83:26:84:20:6C:9E:21:AF:EC:E8:3F:80:DC:77
            X509v3 Authority Key Identifier:
                keyid:ED:C1:FE:78:BC:87:BF:25:B2:E3:8D:7D:72:CD:9C:A3:30:22:6C:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7cH-eLyHvyWy4419cs2cozAibOk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B5AAA/8F5892941D9511E2A98A9A7D08B02CD2/7cH-eLyHvyWy4419cs2cozAibOk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:18:94:cd:f8:ad:9d:e9:e3:15:77:6d:22:16:a9:13:d8:a7:
         3a:d6:c1:93:ca:47:18:fc:3d:51:ff:28:de:d3:ac:67:7a:07:
         de:79:2b:cd:fa:9c:f5:fa:5d:b6:ef:87:37:01:9b:64:b5:64:
         54:72:ed:9b:03:53:1d:50:ec:be:bc:c1:cd:a6:f1:ba:16:23:
         34:10:56:5f:f7:6c:45:39:cf:9c:13:99:e9:d5:c7:96:99:02:
         47:04:23:05:1a:68:a6:23:e3:6f:ad:a2:81:2e:38:dd:9a:11:
         45:a1:b8:40:fb:3b:ed:0c:ec:e9:ba:67:26:c1:2a:38:e5:be:
         df:02:dc:0c:8f:12:1e:55:ad:1d:19:82:6c:ef:b1:7c:bc:58:
         4e:05:18:1c:76:26:6b:8b:25:92:80:af:8d:cb:e0:c8:c7:dd:
         04:bb:8c:ba:3a:8c:68:37:39:19:95:5e:5e:4c:80:64:51:e1:
         d7:68:06:89:c8:1c:32:de:89:f9:1c:57:89:74:f1:63:59:ce:
         65:3a:9e:49:ec:a6:2e:f7:10:04:36:03:40:8d:35:02:ca:39:
         3b:27:77:e5:26:89:14:5a:e5:63:73:7e:84:3c:d5:a3:f0:e2:
         b7:43:2f:78:51:79:34:7a:cc:86:0f:1d:40:33:3b:62:22:91:
         6f:d4:01:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:15 2026 by rpki-client