Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
File:                     E5kSHmqxW_iSv4n71dqfNIaDl_g.mft (raw, json)
Hash identifier:          LWG63/yBKnkcMLtRf/nO26lv9YLwvD9+qya74cagyL0=
Subject key identifier:   52:1A:1C:5F:C6:99:3B:11:19:06:2D:1A:0D:38:89:E7:47:75:EF:CE
Authority key identifier: 13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8
Certificate issuer:       /CN=A91DA736/serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8
Certificate serial:       C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
Manifest number:          C2
Signing time:             Wed 19 Aug 2026 07:36:06 +0000
Manifest this update:     Wed 19 Aug 2026 07:36:06 +0000
Manifest next update:     Wed 26 Aug 2026 07:36:06 +0000
Files and hashes:         1: E5kSHmqxW_iSv4n71dqfNIaDl_g.crl (hash: Pc7y4j1jYfTUiltTWB6+BVbqeKLQ+xA9LCrigNkF2dY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl
                          rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 07:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DA736, serialNumber=1399121E6AB15BF892BF89FBD5DA9F34868397F8
        Validity
            Not Before: Aug 19 07:36:06 2026 GMT
            Not After : Aug 26 07:36:06 2026 GMT
        Subject: CN=6a855ce6-fe21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:37:bd:17:b1:83:5f:4b:b0:3d:f5:a1:42:ff:
                    65:9d:e6:f4:2d:18:b3:3e:3c:a7:cb:d5:60:df:5f:
                    6a:d4:94:c2:e9:6c:2b:b6:e1:b9:ba:bb:ad:9a:83:
                    88:d4:90:ce:96:05:e4:d5:38:2a:01:12:a6:00:a7:
                    fd:3a:09:48:9b:28:c0:64:58:26:2f:89:10:7f:b4:
                    a2:fa:7c:c4:69:b1:52:3f:e5:01:fc:33:e2:d8:9f:
                    d3:b9:d6:de:1d:29:08:f4:be:85:14:d2:56:6c:74:
                    ea:b7:1f:b7:35:c4:4e:65:5f:1c:fb:62:e5:de:19:
                    3a:f9:56:d9:fc:9d:89:5a:da:8c:a5:e8:fe:6a:9d:
                    cc:7d:20:d5:81:bd:09:fa:c1:51:fe:17:8d:13:bf:
                    a5:cb:34:87:34:78:4c:4e:5c:a7:1e:17:6f:3f:b2:
                    fb:c5:ff:1f:e4:24:8c:f7:4d:c7:22:10:e4:87:bb:
                    c0:0a:b6:5d:28:59:d6:b2:e3:16:c6:30:44:30:12:
                    79:3f:81:86:89:d1:bf:45:b4:55:ba:01:57:9b:53:
                    2c:8f:60:3b:04:6c:6b:cd:55:35:44:d2:0c:6a:4a:
                    71:f8:ab:5a:53:c7:73:3d:68:df:f5:21:3f:91:61:
                    d9:05:0e:ae:47:94:67:cd:a1:29:07:0f:4a:5a:15:
                    a5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:1A:1C:5F:C6:99:3B:11:19:06:2D:1A:0D:38:89:E7:47:75:EF:CE
            X509v3 Authority Key Identifier:
                keyid:13:99:12:1E:6A:B1:5B:F8:92:BF:89:FB:D5:DA:9F:34:86:83:97:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E5kSHmqxW_iSv4n71dqfNIaDl_g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DA736/9C87F384732111F081D8BE0CC4F9AE02/E5kSHmqxW_iSv4n71dqfNIaDl_g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         13:20:b2:52:71:56:06:b4:54:ba:ca:52:08:55:dc:33:69:65:
         94:f5:b3:c7:58:6c:b3:c7:83:90:64:c9:7d:5f:1b:71:00:fa:
         c2:d5:4a:0c:36:e8:0c:d7:5c:9b:86:54:62:a4:8a:30:53:c4:
         42:4a:ca:ff:1f:b4:87:9b:e8:cb:2b:34:fa:2f:bd:de:39:a0:
         cb:4e:81:35:3a:86:09:7a:9b:4a:6f:5c:fb:c3:93:de:fa:cc:
         6d:6a:4f:6b:8c:d0:df:1d:4a:72:76:c9:50:67:97:97:aa:a8:
         64:d9:12:88:51:ba:bb:86:33:9c:57:7e:49:be:18:c0:db:bb:
         28:a0:bd:4b:45:dc:70:c0:3b:74:3f:38:7b:0a:80:2a:d1:52:
         46:a0:6d:a1:82:88:cc:d7:30:c9:5f:a2:ab:d7:35:39:df:7a:
         9b:3a:04:1a:57:f9:19:b4:74:cc:60:80:13:c7:05:99:74:23:
         2b:38:19:1a:83:f1:5a:fd:40:a7:94:c2:24:d9:fd:6d:1a:1b:
         10:6e:f7:ff:de:2a:ff:02:29:c0:d6:67:79:f7:b1:8b:8b:7e:
         c8:e4:58:5b:32:6e:82:f3:9d:89:16:c1:66:dd:4f:0f:1a:83:
         d8:48:50:2d:a8:2f:9d:0a:c6:26:76:ba:5b:72:e4:f6:7d:e4:
         54:c8:5f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:54:05 2026 by rpki-client