Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
File:                     nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft (raw, json)
Hash identifier:          FLbG38mS4TyOLGx2j/QJCOqzu8ukvIU2GQZmD7oCtO0=
Subject key identifier:   44:A1:BA:5C:71:40:3B:56:A6:B9:9D:98:70:50:9C:A0:27:9A:F9:56
Authority key identifier: 9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74
Certificate issuer:       /CN=A91CB14D/serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
Certificate serial:       0931
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
Manifest number:          0AD5
Signing time:             Wed 20 May 2026 20:15:49 +0000
Manifest this update:     Wed 20 May 2026 20:15:49 +0000
Manifest next update:     Wed 27 May 2026 20:15:49 +0000
Files and hashes:         1: nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl (hash: 6EIIAFyi7xSh1gMNClOiRwZ1LLjGO7uQA5B3FZ7gMSk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl
                          rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 20:15:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2353 (0x931)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CB14D, serialNumber=9D1EC65FDCC059D96DF5D39992FB147977B75774
        Validity
            Not Before: May 20 20:15:49 2026 GMT
            Not After : May 27 20:15:49 2026 GMT
        Subject: CN=6a0e1675-4c9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:59:fd:07:17:81:35:26:37:af:c7:d8:d1:8a:
                    7b:bb:70:5f:5b:71:a1:aa:57:38:c2:2b:3d:06:84:
                    e5:ee:06:c2:f7:8c:a8:5f:bf:ff:09:1f:be:ae:7f:
                    61:7b:a5:a6:1d:8a:ed:96:b2:c8:90:9d:67:9e:63:
                    ad:9e:35:22:24:1f:0b:41:98:c8:09:54:b7:bd:a7:
                    fe:27:19:9b:f0:bd:03:23:54:da:bb:bf:86:06:7a:
                    3d:b4:6b:9e:5b:5e:89:69:cd:79:40:ae:e3:ed:db:
                    72:48:4c:b9:1d:1c:70:39:34:4b:7e:29:43:f1:7f:
                    b0:f8:97:61:d1:e6:65:a6:6d:6b:64:bc:fb:69:f0:
                    e8:cc:90:c3:e2:67:e1:30:c9:f2:bf:1d:47:90:58:
                    06:d3:fb:4f:c9:6e:2b:bb:d7:32:7d:f5:ca:95:63:
                    26:15:5f:53:77:64:04:b5:4a:a9:95:4c:2b:ca:c2:
                    b6:f4:86:24:56:86:dd:79:55:a5:73:28:04:10:0e:
                    82:31:b1:01:08:7e:9f:12:7b:ed:3c:1d:63:da:89:
                    c5:50:0f:91:92:c9:59:45:8f:cd:5f:82:df:19:ba:
                    22:4f:4b:72:66:a7:d1:e0:3b:53:0e:66:b9:7f:a1:
                    53:c5:fd:3b:01:38:66:64:73:45:1b:79:35:8e:67:
                    61:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:A1:BA:5C:71:40:3B:56:A6:B9:9D:98:70:50:9C:A0:27:9A:F9:56
            X509v3 Authority Key Identifier:
                keyid:9D:1E:C6:5F:DC:C0:59:D9:6D:F5:D3:99:92:FB:14:79:77:B7:57:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CB14D/30FE0AFEC4C611EAA8D5BE66C4F9AE02/nR7GX9zAWdlt9dOZkvsUeXe3V3Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:46:07:d8:08:1e:45:e6:c5:ec:b6:d7:95:bc:9f:71:76:1e:
         ee:18:3f:03:3a:dc:19:b5:12:a6:b2:58:57:79:ba:0c:4d:79:
         f1:08:86:be:c7:ae:91:6f:fa:f6:88:e8:63:b0:0a:01:51:ba:
         e4:96:30:fa:1d:07:37:67:61:20:ee:f0:25:fa:c4:51:bc:42:
         3d:27:fb:7f:25:84:58:d2:a2:7d:33:43:81:9b:f8:d1:2d:27:
         f9:d7:0a:2a:0a:dd:95:a0:83:07:d5:06:dc:c8:78:05:88:ed:
         91:24:d6:08:d3:b9:96:6d:8f:27:a6:56:b9:1d:3c:8a:18:26:
         f7:f0:fc:49:f8:11:00:0d:a8:e1:f2:2b:48:2e:0f:ce:a2:fc:
         38:11:98:ad:7a:7b:0e:cc:75:65:0e:ab:0d:e2:7a:9f:17:97:
         5a:6c:75:64:30:7e:80:cf:f5:fe:5b:e5:d4:74:8a:0b:be:4c:
         0c:0c:9f:d3:dd:57:e2:30:9d:ad:5b:5a:d8:47:bb:f1:25:a7:
         4e:50:5d:72:82:e7:da:71:43:ba:80:9a:5d:a0:ed:8e:bd:1b:
         f1:83:f9:91:5f:f8:ca:4b:ad:a3:4f:20:30:cd:d7:97:f1:a5:
         97:33:b9:a9:14:e4:25:33:c3:3a:bf:d4:70:59:75:5f:cf:38:
         27:99:9f:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:45 2026 by rpki-client