Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
File:                     Fq85Z82e72n-cs9m28bg-wDKONQ.mft (raw, json)
Hash identifier:          vbYuZB1oMWYleO/TpSnZqTag3AoTWdh+wG0OdmGxsjg=
Subject key identifier:   B5:D8:57:85:AD:18:41:DA:1A:0D:26:29:75:AA:88:26:5B:56:03:FF
Authority key identifier: 16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4
Certificate issuer:       /CN=A91D34D0/serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
Certificate serial:       015A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
Manifest number:          015A
Signing time:             Thu 21 May 2026 05:06:56 +0000
Manifest this update:     Thu 21 May 2026 05:06:55 +0000
Manifest next update:     Thu 28 May 2026 05:06:55 +0000
Files and hashes:         1: Fq85Z82e72n-cs9m28bg-wDKONQ.crl (hash: WNbGbJ3e/xHzV4ZWLtoXL+6CtJWcdNx7DpogCl38raI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl
                          rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 346 (0x15a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D34D0, serialNumber=16AF3967CD9EEF69FE72CF66DBC6E0FB00CA38D4
        Validity
            Not Before: May 21 05:06:55 2026 GMT
            Not After : May 28 05:06:55 2026 GMT
        Subject: CN=6a0e92f0-e3b9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:92:7b:27:38:4d:86:51:0a:6d:9b:8f:c3:c2:
                    40:63:6a:22:19:d1:61:b6:3b:3c:90:16:d5:4a:69:
                    19:31:48:4b:d6:34:7d:e1:5f:b5:d0:56:12:b6:06:
                    85:4e:41:1f:a5:3c:61:96:6b:73:73:64:b7:5d:e0:
                    ab:45:2f:72:6f:c3:80:18:e7:a7:1b:1d:05:dc:27:
                    a3:33:0a:41:d4:c5:a8:48:60:7c:13:4a:e7:f9:1f:
                    7c:68:32:aa:b6:1a:03:4b:d9:98:28:77:af:5e:2a:
                    93:6a:ec:b1:c5:7b:bd:d6:c0:70:40:a8:0e:d0:42:
                    b9:f5:4b:8f:12:47:e0:c0:49:42:31:b9:7e:78:da:
                    ab:ae:73:68:66:9a:98:2b:0d:62:fb:47:b9:ac:0b:
                    a6:31:44:5f:c8:d0:7a:68:65:29:55:91:c9:ae:78:
                    d8:a8:fc:c6:eb:46:98:fe:36:2d:1f:2f:4a:dd:48:
                    5f:b4:68:e9:e3:ae:aa:b3:ea:7f:33:f2:0d:1a:f4:
                    e7:3a:74:47:a8:36:31:87:45:c6:db:9d:2f:d3:e3:
                    51:14:1b:07:e7:39:71:e8:33:9d:60:e9:4d:20:f9:
                    1d:87:62:bb:89:3e:42:79:b3:49:41:75:4a:0a:7e:
                    af:21:66:65:1e:ae:fe:74:7b:b7:4f:35:5e:99:ea:
                    45:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:D8:57:85:AD:18:41:DA:1A:0D:26:29:75:AA:88:26:5B:56:03:FF
            X509v3 Authority Key Identifier:
                keyid:16:AF:39:67:CD:9E:EF:69:FE:72:CF:66:DB:C6:E0:FB:00:CA:38:D4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Fq85Z82e72n-cs9m28bg-wDKONQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D34D0/F5403EF245B711EFA3D9A049C4F9AE02/Fq85Z82e72n-cs9m28bg-wDKONQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:32:fe:c2:5e:bf:63:6a:a0:fc:68:a1:6d:c5:1f:cf:a1:57:
         c6:72:54:f2:00:40:40:02:d1:a6:27:de:69:c2:2e:4e:36:9d:
         8c:c7:0b:6f:c1:8f:91:5d:d4:66:88:5b:df:5f:3b:cf:b6:8f:
         05:f2:5b:54:b8:70:4b:17:60:22:53:25:99:ac:51:6f:cf:3b:
         07:63:39:33:d8:48:88:4b:9c:1a:69:04:57:02:e9:d8:48:87:
         57:9f:42:2f:a0:7e:47:c3:81:5c:ed:bd:01:78:4c:8c:5e:d5:
         d0:b7:74:f8:a4:0f:14:5c:99:94:fe:67:45:da:ed:c8:ef:fc:
         ed:df:3a:6a:bb:74:e9:d5:5a:79:5e:b3:df:c2:a4:79:18:f6:
         ad:dc:8e:1e:f9:04:a5:54:2a:8e:0c:39:47:d3:72:24:7a:2c:
         d1:47:6f:d6:05:83:53:6f:fb:ff:04:a5:7a:15:6a:29:aa:68:
         f3:bf:ee:04:fe:b0:58:2b:e2:a6:80:67:d0:af:50:bd:f7:a5:
         04:1c:2b:e5:90:f1:1b:bd:21:58:80:12:47:1c:51:81:d4:aa:
         38:50:c7:20:b7:b5:3b:41:20:90:6d:60:d4:11:ad:7b:83:3b:
         77:97:e1:7b:4e:1e:5f:47:31:a8:af:90:13:55:23:47:dd:fb:
         7a:2f:f1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:59 2026 by rpki-client