Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
File:                     MTDg-yrjCHHxtEx3xUL__P4dl0A.mft (raw, json)
Hash identifier:          ZITSWo50TnTO0tX1H2LkzuYM8jbpBlum4FbAYSWvsSc=
Subject key identifier:   14:8B:CD:8B:4F:C8:61:88:08:E5:F0:53:E4:28:8A:D8:98:A1:A3:3A
Authority key identifier: 31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40
Certificate issuer:       /CN=A91B8833/serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740
Certificate serial:       27
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
Manifest number:          27
Signing time:             Tue 19 May 2026 08:39:44 +0000
Manifest this update:     Tue 19 May 2026 08:39:43 +0000
Manifest next update:     Tue 26 May 2026 08:39:43 +0000
Files and hashes:         1: MTDg-yrjCHHxtEx3xUL__P4dl0A.crl (hash: +lhxbzCCAMj/hDwYKBtiWa10uc3Bauy/smCk7G9Lc84=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl
                          rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:39:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8833, serialNumber=3130E0FB2AE30871F1B44C77C542FFFCFE1D9740
        Validity
            Not Before: May 19 08:39:43 2026 GMT
            Not After : May 26 08:39:43 2026 GMT
        Subject: CN=6a0c21cf-dfed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:23:d6:29:37:43:a9:51:3a:6a:39:c5:cf:2e:
                    49:ae:e5:12:25:08:88:7f:f2:8b:3e:4e:57:04:cc:
                    13:bb:c6:f8:d5:7f:53:39:62:f3:1a:1a:43:8b:bb:
                    49:3f:55:a1:0c:35:9d:47:59:51:c3:4a:f3:8d:57:
                    95:59:60:c4:58:c3:6c:c0:fa:80:74:5f:00:03:45:
                    be:3a:ce:a4:c5:d6:a4:d6:53:a7:cb:99:d3:43:38:
                    a4:58:30:ef:81:3e:3c:00:63:cd:99:03:2f:83:cb:
                    bb:26:8b:42:03:ce:10:f4:18:8c:4b:e7:2b:71:6c:
                    92:24:22:be:ca:fc:5d:b2:08:58:3e:cf:02:11:82:
                    c4:d1:d4:37:5b:2f:aa:18:b2:1f:9b:28:a1:f3:3f:
                    1b:34:53:1f:90:f7:f7:99:72:fa:bf:9a:68:33:94:
                    4f:25:76:91:fb:4a:88:fd:51:bc:fa:b2:9f:31:03:
                    36:65:49:13:81:a2:be:6b:10:db:a9:9b:cb:1f:79:
                    9d:33:97:ef:41:f7:86:1d:26:30:fc:29:35:d2:5e:
                    31:ef:35:1b:f4:97:fa:02:77:64:91:d6:13:06:4a:
                    7f:fc:9e:7a:d7:84:a2:8e:34:0b:df:8b:80:c4:67:
                    fb:a7:8b:2c:c0:c6:83:da:7b:d4:7c:c1:94:db:1c:
                    01:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:8B:CD:8B:4F:C8:61:88:08:E5:F0:53:E4:28:8A:D8:98:A1:A3:3A
            X509v3 Authority Key Identifier:
                keyid:31:30:E0:FB:2A:E3:08:71:F1:B4:4C:77:C5:42:FF:FC:FE:1D:97:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MTDg-yrjCHHxtEx3xUL__P4dl0A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8833/E2210CC41ABE11F1B69EC140363D8C67/MTDg-yrjCHHxtEx3xUL__P4dl0A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:36:89:96:2a:52:dc:b4:31:e7:ee:0a:01:e4:9c:01:ac:9f:
         27:91:6c:5f:59:a2:aa:54:36:02:3e:31:92:9a:fd:b3:60:0d:
         c6:ba:4a:f5:cd:47:09:e6:93:c6:f5:7b:35:83:e7:ed:1c:3a:
         57:09:6c:61:12:37:81:6e:4f:0d:39:77:a7:68:7a:64:aa:c2:
         a1:cf:77:26:56:b4:9a:48:6f:b4:b7:32:67:4e:08:f2:b5:16:
         5a:61:0e:13:c6:ea:e8:6e:ec:c9:09:5d:9f:f3:65:e1:39:52:
         62:d7:5b:dd:bf:03:34:a8:4f:7d:c5:22:72:67:3f:e6:b7:2f:
         49:5f:ee:b1:c0:32:ea:62:1f:70:8d:f5:d2:ad:50:31:76:67:
         45:a7:f2:0c:4c:c9:84:8d:a6:98:e8:b4:8f:2c:7c:20:12:f8:
         ab:60:6b:b0:68:2b:bd:8d:64:a3:26:45:ec:ae:fc:29:83:cb:
         68:48:96:56:11:39:2a:fb:0f:11:1e:a9:34:e1:05:c4:1e:46:
         d9:d2:dd:6f:27:67:2d:7c:1a:0a:d4:bd:d2:a2:e3:f8:e4:cb:
         3e:45:45:12:b2:57:73:7c:0f:37:c9:57:ae:4b:96:fd:50:0d:
         0d:20:97:7c:ab:e2:9f:cb:6b:4f:b1:0b:64:08:22:ec:18:ac:
         90:c7:8c:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:18:07 2026 by rpki-client