Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
File:                     CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json)
Hash identifier:          axTwFJxilc4KkZV+ZNJEHYD+7CS8NCVBAEBbVdXiBMg=
Subject key identifier:   D0:81:8B:E5:60:72:7E:BC:05:2C:37:BC:62:41:E3:7C:DC:52:D1:40
Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
Certificate issuer:       /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
Certificate serial:       0275
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
Manifest number:          0275
Signing time:             Thu 21 May 2026 02:02:11 +0000
Manifest this update:     Thu 21 May 2026 02:02:11 +0000
Manifest next update:     Thu 28 May 2026 02:02:11 +0000
Files and hashes:         1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: /mGOu5mXEfTQJTsWaFZ6pz8D1jph69qFjTD96CHbjJ0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:02:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 629 (0x275)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
        Validity
            Not Before: May 21 02:02:11 2026 GMT
            Not After : May 28 02:02:11 2026 GMT
        Subject: CN=6a0e67a3-30cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:43:f5:c1:33:6f:1c:7c:fc:d2:30:66:30:f3:
                    b2:00:e5:69:65:1c:1f:2b:52:a7:23:61:3e:eb:89:
                    46:61:a1:4f:f5:30:44:86:78:b2:c3:11:b7:bc:d3:
                    09:12:40:46:ba:d9:5d:93:3f:ce:51:74:d7:04:0e:
                    6c:a5:3f:32:74:92:64:1e:05:f9:89:e9:37:15:06:
                    df:e4:f8:e4:61:d0:33:42:55:5c:c2:15:ae:0d:9d:
                    de:03:af:28:be:01:a2:a5:be:f4:ae:b7:a6:e1:b2:
                    64:f2:5f:d5:b0:0a:d0:81:5c:bb:f9:75:b1:6b:9e:
                    a3:3e:5f:9c:fd:cc:68:ef:da:e9:c8:2d:cb:92:4a:
                    e5:87:1d:c7:2e:c8:d6:59:56:3b:00:77:38:a8:ae:
                    4f:ad:31:16:d2:a9:25:3d:13:39:45:51:4c:54:30:
                    36:17:66:65:eb:47:07:5c:d4:02:d3:d6:b3:0f:4f:
                    09:69:dc:75:c1:cd:51:98:11:78:da:09:6b:74:ae:
                    da:d0:cf:fa:79:52:3b:98:09:27:32:c7:c1:df:55:
                    41:bf:29:08:fd:6f:5c:2d:23:be:0f:ef:f4:08:44:
                    92:ed:11:44:6d:db:c1:ea:31:ef:84:11:fa:ca:23:
                    06:b9:7f:02:56:fa:42:a1:ae:0f:7e:b1:e3:f3:87:
                    d6:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:81:8B:E5:60:72:7E:BC:05:2C:37:BC:62:41:E3:7C:DC:52:D1:40
            X509v3 Authority Key Identifier:
                keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c4:ce:3c:5e:f9:0c:95:30:5e:ee:cf:4c:f1:e5:22:9c:c3:
         7d:d5:e7:91:04:ba:57:fb:f2:7d:e5:cb:84:e0:3b:f5:c0:05:
         9b:9e:8d:fd:7a:56:0a:c6:57:32:ea:7c:a6:8f:de:28:00:4f:
         bc:8b:8c:0e:a0:84:cb:e5:76:c0:0d:71:51:be:2a:a1:90:a6:
         8f:a4:23:1a:13:de:25:22:11:c8:9f:2e:c7:96:02:2c:03:a4:
         b1:ae:cc:85:17:05:8e:da:2e:68:c8:23:fa:c1:7c:73:06:f7:
         e8:a8:2b:7c:6e:4a:e3:ee:b5:72:47:5d:00:7c:64:7c:7e:6b:
         d6:ee:84:fe:3f:c9:c5:c0:2b:ca:bc:96:4a:00:2c:90:92:76:
         f1:84:d2:f5:88:97:f8:ce:65:e9:b2:6e:1b:4a:2c:05:2e:86:
         17:fb:0a:90:d2:d2:8d:c5:ef:41:79:0a:b5:b9:84:29:14:cd:
         92:2b:78:ad:b0:2e:8a:26:fc:92:7c:e5:62:24:bc:fd:80:15:
         a4:6e:2a:f2:40:a8:31:64:2a:78:59:ad:4b:5c:9e:ac:d7:10:
         54:ac:e2:e0:76:ca:30:bf:de:d8:53:be:27:c8:6b:f3:85:0b:
         20:7a:22:e7:ba:98:55:d2:6b:64:c3:e9:ec:ad:23:3c:6a:96:
         a7:ff:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:14 2026 by rpki-client