Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
File:                     xVznjEX0hWCLgkNgYAPYCooWzNY.mft (raw, json)
Hash identifier:          /RiYAoz6fotxQUhY41DpeRaqfGU4efuflOQAfZ6OlUQ=
Subject key identifier:   55:60:3D:35:A0:F7:47:15:B2:B9:3C:B8:CA:B8:06:E0:A4:BD:F3:CB
Authority key identifier: C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6
Certificate issuer:       /CN=A91E6E96/serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
Certificate serial:       055C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
Manifest number:          0551
Signing time:             Wed 20 May 2026 23:29:45 +0000
Manifest this update:     Wed 20 May 2026 23:29:45 +0000
Manifest next update:     Wed 27 May 2026 23:29:45 +0000
Files and hashes:         1: xVznjEX0hWCLgkNgYAPYCooWzNY.crl (hash: AZkp1E/BccgJNKrfCckOcBlCmxDCLRvliSreJvjCKvI=)
                          2: 64DE26F6386011EC83DC2E23C4F9AE02.roa (hash: bVXZbXIetCBnuQjaSLYLUQur0ysTmVtMviP//NDBnCI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl
                          rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:29:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1372 (0x55c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6E96, serialNumber=C55CE78C45F485608B8243606003D80A8A16CCD6
        Validity
            Not Before: May 20 23:29:45 2026 GMT
            Not After : May 27 23:29:45 2026 GMT
        Subject: CN=6a0e43e9-7005
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:09:3a:58:36:da:0f:81:60:12:17:38:60:a9:
                    8e:5a:ee:d0:5f:d7:77:19:5a:74:6b:24:b0:44:1c:
                    22:72:04:6f:ec:20:1b:7e:65:b8:ad:ad:c4:23:aa:
                    a7:3c:ff:f7:9b:25:2e:d5:63:37:2e:de:6d:f3:e2:
                    7c:ff:91:5b:d0:a2:9b:d7:34:99:ef:5c:d6:1c:e0:
                    1c:75:e0:b2:57:21:f8:a1:83:59:54:a7:40:eb:ee:
                    45:3d:73:51:a6:f8:73:90:74:40:76:62:1a:5a:85:
                    bc:b5:e6:31:2f:1c:db:c1:ce:1e:c4:3b:df:b5:51:
                    3b:50:e2:90:a3:3a:af:3c:cd:a3:c1:d8:c6:6f:7e:
                    63:3c:a8:22:79:c3:07:c4:ab:82:56:95:8e:88:08:
                    6a:2e:3d:89:d4:fa:cb:4e:5a:da:59:bd:3e:95:bc:
                    76:78:c7:b2:7d:ea:b7:df:78:60:df:a3:4e:ad:83:
                    14:7d:79:f6:1d:f5:54:de:c0:eb:97:6c:c0:0a:93:
                    33:9a:31:c4:bd:3e:65:cf:e4:d1:0f:70:cf:4d:16:
                    8a:c1:ad:1a:aa:cc:42:bd:ce:dd:f4:7b:23:34:8b:
                    c6:02:bf:5a:bc:36:c4:35:a3:4f:73:82:64:35:37:
                    2b:d8:a0:17:43:73:3e:27:d7:ed:50:c3:1d:36:f3:
                    e1:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:60:3D:35:A0:F7:47:15:B2:B9:3C:B8:CA:B8:06:E0:A4:BD:F3:CB
            X509v3 Authority Key Identifier:
                keyid:C5:5C:E7:8C:45:F4:85:60:8B:82:43:60:60:03:D8:0A:8A:16:CC:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xVznjEX0hWCLgkNgYAPYCooWzNY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6E96/7B9D3DEA385C11EC9C258778C4F9AE02/xVznjEX0hWCLgkNgYAPYCooWzNY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:33:3d:74:f5:ea:fc:56:b8:ce:c8:97:c8:85:cd:73:d5:fa:
         1c:20:45:a8:ba:96:87:53:3e:74:be:1a:ee:06:60:02:43:d4:
         33:9d:31:3f:9b:3c:93:af:2d:e7:a1:19:28:cb:c9:28:fe:23:
         db:0b:39:a9:a3:52:04:24:17:3e:30:f6:77:4f:6e:a0:0f:5c:
         3a:40:5c:a5:b0:92:ce:c3:3e:31:12:0c:74:62:ee:2a:1c:bb:
         9c:b6:28:63:cd:07:a9:ab:70:20:ab:f3:d1:99:8e:18:73:3e:
         dd:2e:4e:70:70:71:e9:ed:01:51:b1:4c:1a:f2:7d:b5:43:34:
         59:b0:7f:d0:98:4e:4f:bb:52:f9:c1:a1:bd:3d:d4:d1:77:60:
         d7:b7:f5:30:44:07:ec:14:6d:07:eb:4a:a9:73:cb:ab:e3:bd:
         b9:07:d0:fa:ae:ba:4d:c5:8f:16:0b:84:85:46:03:6c:3d:fd:
         53:13:44:0c:57:a4:5b:24:03:ff:0a:f8:31:37:3d:e5:dd:04:
         e2:18:a7:eb:ce:af:62:93:94:1f:e8:d4:0e:7b:bf:14:d8:c3:
         f4:fb:8f:3d:e8:c7:22:de:33:80:fd:2c:4f:0f:3b:93:6e:cf:
         ef:cd:86:58:8a:5f:55:93:0e:88:02:00:5b:40:3a:0b:01:61:
         d8:a3:14:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:01 2026 by rpki-client