Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
File:                     E2EsNInrrttWOQK8neWS_I2DxVs.mft (raw, json)
Hash identifier:          UTXawr7MUJvEV0g1We2I+/XHYadLJ7PK+YPMsV+KB1E=
Subject key identifier:   8B:A6:61:CF:5C:67:2C:41:F3:0D:10:DB:AD:8B:6F:13:F8:A6:EE:F1
Authority key identifier: 13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B
Certificate issuer:       /CN=A91D513A/serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
Certificate serial:       3544
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
Manifest number:          3543
Signing time:             Wed 20 May 2026 15:16:35 +0000
Manifest this update:     Wed 20 May 2026 15:16:35 +0000
Manifest next update:     Wed 27 May 2026 15:16:35 +0000
Files and hashes:         1: E2EsNInrrttWOQK8neWS_I2DxVs.crl (hash: JqfRPMlMkIT3TJgwDWc83KSJZ4Df5OfqvE2egLinpa8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl
                          rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13636 (0x3544)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D513A, serialNumber=13612C3489EBAEDB563902BC9DE592FC8D83C55B
        Validity
            Not Before: May 20 15:16:35 2026 GMT
            Not After : May 27 15:16:35 2026 GMT
        Subject: CN=6a0dd053-3e15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:d6:3b:d5:0b:a8:79:00:25:57:9b:d4:b0:fa:
                    7f:52:1c:a9:59:48:9f:90:ae:02:fc:c1:b9:19:b6:
                    e1:7f:6e:51:5b:c2:90:e1:3b:f1:6a:3d:ac:7a:d5:
                    ad:8d:26:f8:a9:d3:f8:e9:c3:17:2a:ec:d4:33:9f:
                    4d:3c:88:fb:ea:09:17:86:73:8c:dc:a4:58:eb:9a:
                    94:a2:50:83:6e:36:40:1e:b6:da:29:32:9b:4f:01:
                    06:e3:33:d9:4b:98:14:75:31:77:ac:62:9e:db:14:
                    c8:88:76:93:40:54:b1:f5:7b:cf:95:b9:a1:12:a2:
                    bf:2a:a8:84:b9:d4:a5:e0:e7:4b:4c:31:b2:19:46:
                    8d:7b:6e:ec:60:8f:58:99:9f:af:ac:2d:99:50:04:
                    be:4d:11:48:d5:85:2e:f3:b3:f2:85:f0:c3:bb:c6:
                    bf:74:23:6b:3f:c8:b1:9e:34:78:86:42:9a:02:6d:
                    87:92:7a:23:7f:ad:41:ef:44:58:81:a0:b1:a0:e1:
                    36:4b:13:26:e5:e3:6b:74:34:e8:ad:55:7c:94:58:
                    63:5e:c4:2a:c2:d6:1f:5e:16:b4:e0:9e:77:ef:07:
                    22:5f:a6:99:a4:31:cf:af:3a:1b:21:57:df:42:2f:
                    ca:51:7f:7c:cc:a5:31:4a:b5:4d:89:9e:98:23:d3:
                    65:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A6:61:CF:5C:67:2C:41:F3:0D:10:DB:AD:8B:6F:13:F8:A6:EE:F1
            X509v3 Authority Key Identifier:
                keyid:13:61:2C:34:89:EB:AE:DB:56:39:02:BC:9D:E5:92:FC:8D:83:C5:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E2EsNInrrttWOQK8neWS_I2DxVs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D513A/401BF81E1DAA11E2A572E2A508B02CD2/E2EsNInrrttWOQK8neWS_I2DxVs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         14:90:76:95:e8:ce:c6:e0:ac:11:e3:e8:62:90:e2:86:27:1d:
         de:ad:93:d1:b7:d0:8d:fd:07:82:f9:87:f9:b3:18:08:dd:29:
         13:a6:d9:5b:fa:74:a7:4c:9a:4e:c5:db:62:e9:7b:7a:a4:2b:
         9d:91:65:d0:e2:83:be:df:9c:20:30:ec:19:a5:35:37:2a:15:
         aa:dd:47:8f:05:a0:b5:b7:49:3f:08:e9:7e:46:d6:ef:2c:3c:
         3f:53:54:72:ca:8e:8a:c3:95:f4:b4:af:8d:a3:c0:04:7f:67:
         42:18:bd:62:3c:8a:75:ed:98:4b:59:7c:f2:95:37:6a:ab:85:
         95:23:04:58:bc:b8:08:a1:30:69:6f:42:86:ab:9f:d2:e3:36:
         29:80:7d:67:05:9e:13:2f:83:3c:15:d4:30:9d:f7:98:cb:d4:
         5f:cd:12:08:87:3f:22:6c:09:13:5e:06:33:b6:1d:3c:9c:4c:
         b4:cb:a1:62:5e:07:26:86:75:8c:d8:de:a8:13:0c:68:c7:58:
         47:5d:23:f3:7e:1d:1e:9a:3d:e3:f8:9e:16:69:75:ab:27:64:
         85:f0:fa:c5:ea:e3:28:26:56:4c:46:87:45:c8:8a:6f:17:e6:
         0c:e6:c4:9b:1c:5a:f5:8e:6c:b7:c3:18:93:d5:46:6c:31:ee:
         ea:dc:e5:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:33 2026 by rpki-client