Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
File:                     CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft (raw, json)
Hash identifier:          fgf7tKLy/uuIQz+fRz0mCcAdvodb5GkcU+lTAYqfymc=
Subject key identifier:   E2:3B:09:F6:2F:97:B4:64:0C:1B:2D:2F:C4:FC:54:76:0C:F2:81:F6
Authority key identifier: 09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5
Certificate issuer:       /CN=A91C612E/serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
Certificate serial:       0CBE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
Manifest number:          1500
Signing time:             Wed 20 May 2026 18:23:38 +0000
Manifest this update:     Wed 20 May 2026 18:23:37 +0000
Manifest next update:     Wed 27 May 2026 18:23:37 +0000
Files and hashes:         1: CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl (hash: SXghyAp2XXqZQsmtxpDt3k/s7vIa4cjKkq40mEj1phs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl
                          rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 18:23:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3262 (0xcbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C612E, serialNumber=0955D91F2CAA52BB4F7C70F0E656F24314EAFBD5
        Validity
            Not Before: May 20 18:23:37 2026 GMT
            Not After : May 27 18:23:37 2026 GMT
        Subject: CN=6a0dfc29-e913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ff:de:46:02:d0:38:f7:46:93:25:51:94:af:
                    e6:b4:1c:6e:22:7a:b2:43:8c:21:64:12:97:24:03:
                    cc:74:53:99:5d:27:c0:77:8b:6a:42:b2:aa:dc:9c:
                    a9:04:75:55:ca:e0:54:ce:51:6b:ea:33:6d:f3:2b:
                    84:9a:02:d9:b2:2e:65:cc:b3:95:05:bb:6d:15:15:
                    a4:c9:3c:68:ca:c1:c2:a7:a8:0f:6e:81:3b:36:a9:
                    2c:51:f7:9d:c4:1f:d9:4d:54:4c:22:24:84:12:5a:
                    cd:12:16:a4:af:5c:06:5f:32:f2:ec:24:47:06:53:
                    00:c8:23:79:04:f7:c4:5c:57:cb:bc:fc:f0:4b:b9:
                    eb:19:1c:e1:70:69:95:5b:c3:3d:61:56:1a:65:95:
                    e8:f2:b7:7c:37:4d:eb:9b:e6:17:0a:59:b5:87:70:
                    66:23:da:ea:60:33:6e:8f:78:e0:95:dd:b3:4f:bc:
                    24:85:57:2a:3a:1c:06:f3:70:6d:85:32:c0:7c:87:
                    07:23:47:34:d5:c1:49:9f:4d:fd:18:4d:61:73:2c:
                    70:2f:97:92:34:55:75:dd:26:d5:09:f2:73:db:a1:
                    bc:4c:d7:50:62:04:cd:b6:79:6e:3d:b1:2d:a4:16:
                    23:fa:9d:18:a6:15:ac:85:85:4d:e0:21:d6:85:ed:
                    8c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:3B:09:F6:2F:97:B4:64:0C:1B:2D:2F:C4:FC:54:76:0C:F2:81:F6
            X509v3 Authority Key Identifier:
                keyid:09:55:D9:1F:2C:AA:52:BB:4F:7C:70:F0:E6:56:F2:43:14:EA:FB:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CVXZHyyqUrtPfHDw5lbyQxTq-9U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C612E/65BC17D20B6111EAAF042F68C4F9AE02/CVXZHyyqUrtPfHDw5lbyQxTq-9U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:64:18:b2:1e:47:74:38:c8:cf:60:a0:29:6b:c1:ae:52:68:
         69:16:e2:f1:cc:d9:81:56:66:0f:43:a8:33:98:e2:26:d2:4b:
         b7:10:15:4c:cd:b3:f9:d0:f3:f0:89:c5:8a:3e:6b:fd:6e:b8:
         5f:ae:ba:bd:b0:99:f9:d1:6e:be:c3:38:f3:57:05:f7:b8:60:
         60:57:c1:d5:fa:7b:60:e0:06:ef:a3:d4:7b:48:95:55:23:a3:
         36:af:f5:71:0f:1e:5d:05:81:e7:9f:d9:3b:ac:79:a1:3d:8c:
         14:f8:d4:d4:c0:6d:32:c9:26:2e:fc:89:a4:eb:91:49:b2:08:
         92:3f:6e:94:20:8f:21:be:38:f4:cb:a7:2c:00:3e:15:78:d0:
         cb:35:4d:89:ba:36:a2:04:b2:a9:b2:35:f1:23:f1:55:77:e5:
         02:bd:e4:27:f2:80:30:48:a5:d7:4b:13:11:c5:c0:ee:2a:60:
         04:9a:33:af:b3:f2:0a:f6:14:e2:c0:16:d9:3f:b1:01:3b:20:
         30:40:0d:42:67:aa:5d:ee:52:c6:28:05:b4:4a:47:ba:3b:2d:
         54:87:e8:5d:14:ce:1e:45:93:2b:fe:87:04:8c:2f:89:bb:2f:
         ed:91:14:0f:6c:15:d5:19:17:a0:99:9e:ad:98:17:4d:61:db:
         88:e0:6b:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:38 2026 by rpki-client