Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
File:                     xQo91YIWmexaCS_v5V5AfVvQy6U.mft (raw, json)
Hash identifier:          cdTxf5Xo61ZhF9vP1nVK3gEPkcRSjMjpVYEkLf66O6c=
Subject key identifier:   C3:71:9B:6E:14:9C:25:0C:5F:25:C4:2B:BA:24:F4:2F:83:77:20:62
Authority key identifier: C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5
Certificate issuer:       /CN=A91C2E41/serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
Certificate serial:       354C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
Manifest number:          354A
Signing time:             Mon 22 Jun 2026 15:07:38 +0000
Manifest this update:     Mon 22 Jun 2026 15:07:37 +0000
Manifest next update:     Mon 29 Jun 2026 15:07:37 +0000
Files and hashes:         1: xQo91YIWmexaCS_v5V5AfVvQy6U.crl (hash: aWjIFxn4i/3Y7n/vSkKfKB4hMrRhfzRc9yw26liwdM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl
                          rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 29 Jun 2026 15:07:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2E41, serialNumber=C50A3DD5821699EC5A092FEFE55E407D5BD0CBA5
        Validity
            Not Before: Jun 22 15:07:37 2026 GMT
            Not After : Jun 29 15:07:37 2026 GMT
        Subject: CN=6a394fba-9a5c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:2d:33:ed:64:33:a9:61:43:82:60:0e:ed:
                    b3:42:77:68:3e:d4:19:7b:13:aa:08:ea:89:d7:88:
                    f2:1a:6e:fe:33:6c:cb:e5:b1:7d:6b:d4:cb:f7:e4:
                    3a:f6:55:f3:c6:60:cb:95:e5:ed:82:60:54:f6:4b:
                    e5:bf:ec:a7:9c:23:eb:aa:d3:a6:c3:6d:da:f6:dc:
                    c5:bc:1c:14:b1:16:34:57:5c:8e:5a:e4:a0:78:54:
                    62:ed:c6:77:02:0e:ff:1b:e6:f4:73:76:28:1a:b8:
                    24:07:be:2c:60:50:33:15:c4:93:63:c8:f8:b6:69:
                    3e:40:5f:a3:ce:6f:08:09:22:d5:48:34:2b:10:22:
                    ae:69:e5:99:ed:4f:00:61:e2:99:22:1f:98:b3:58:
                    b4:ab:b9:9e:5a:d6:ad:88:47:cf:c4:00:d2:f9:01:
                    a1:0d:5c:f0:ae:7b:c7:7f:10:50:a9:ff:ad:93:39:
                    fc:76:d5:cb:da:b0:c8:b2:60:46:93:08:a3:93:c1:
                    05:1c:cb:19:f2:84:9c:c5:af:b2:45:4d:78:b9:ed:
                    6f:27:1e:ac:bc:e7:c2:6f:a0:6e:16:aa:da:47:8d:
                    0d:bf:0e:14:88:92:00:c4:4e:d4:c1:93:3b:95:2a:
                    32:82:6b:9c:03:63:6a:c7:32:75:75:03:2c:fc:ae:
                    c6:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:71:9B:6E:14:9C:25:0C:5F:25:C4:2B:BA:24:F4:2F:83:77:20:62
            X509v3 Authority Key Identifier:
                keyid:C5:0A:3D:D5:82:16:99:EC:5A:09:2F:EF:E5:5E:40:7D:5B:D0:CB:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xQo91YIWmexaCS_v5V5AfVvQy6U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2E41/8757518E1DA411E2B9219E9A08B02CD2/xQo91YIWmexaCS_v5V5AfVvQy6U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:e7:9e:d3:6b:99:7d:73:fe:55:fb:f3:85:bd:23:4b:71:7f:
         e1:5e:73:d8:f0:d7:67:71:72:41:da:d8:a7:9b:68:77:1e:13:
         f1:cd:d9:17:e5:d7:2e:4c:48:e0:db:94:d4:5c:86:ad:b4:b7:
         10:af:37:c6:3e:7f:6c:70:af:2f:f3:ca:24:4c:c4:5c:e9:89:
         15:c0:0a:89:89:0b:d0:ec:97:da:06:d3:35:bf:f2:5f:ba:ac:
         05:71:10:ae:28:ce:16:a8:7a:63:91:2e:31:22:3c:1b:07:47:
         13:26:5a:90:1d:a8:d1:14:b0:1d:c2:97:26:a8:db:5d:b3:ae:
         78:10:40:43:dc:e1:ad:c4:ac:a7:4f:b0:eb:07:4f:5a:a9:40:
         20:16:a2:10:7b:61:4d:02:b8:23:34:4e:12:63:b3:29:5c:ec:
         e8:6e:11:00:89:fa:c3:e7:b0:ee:35:45:b1:a8:23:d5:8e:bc:
         16:68:df:23:2b:58:7b:7c:88:0c:f6:b8:32:59:01:59:fd:03:
         dd:b0:f2:29:90:d2:0d:b3:45:f5:f6:37:2f:a4:86:96:dc:82:
         10:15:0a:22:4b:c6:ad:a0:49:9b:c4:6a:94:9c:12:af:21:3e:
         ff:7c:bc:65:18:e6:57:af:2d:1d:7d:f2:e9:ee:1e:c7:d8:31:
         7e:cb:64:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:25:17 2026 by rpki-client