Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
File:                     7unhDCkeVsgtdwcgELDlgAg_5yk.mft (raw, json)
Hash identifier:          l/waLAOXHVHRA7GLLbcy/g06G2WFpS5oBbqKCFeYV6g=
Subject key identifier:   D0:DB:FD:55:EE:64:BC:D1:65:1B:7C:B6:CB:18:F9:5E:7F:C1:2A:39
Authority key identifier: EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29
Certificate issuer:       /CN=A91E82F0/serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
Manifest number:          01D8
Signing time:             Thu 21 May 2026 03:34:49 +0000
Manifest this update:     Thu 21 May 2026 03:34:49 +0000
Manifest next update:     Thu 28 May 2026 03:34:49 +0000
Files and hashes:         1: 7unhDCkeVsgtdwcgELDlgAg_5yk.crl (hash: Nagn8sY1494pH+DHpXFiiGbA8LHwfirCKGgxC+fAI9o=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl
                          rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 03:34:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E82F0, serialNumber=EEE9E10C291E56C82D77072010B0E580083FE729
        Validity
            Not Before: May 21 03:34:49 2026 GMT
            Not After : May 28 03:34:49 2026 GMT
        Subject: CN=6a0e7d59-6e48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:4c:ef:1b:69:3e:d2:c0:0d:1d:bc:56:58:91:
                    11:8c:82:51:bc:87:2a:3c:7c:23:5b:56:39:c3:4a:
                    85:18:32:c4:cc:ed:ab:6b:0f:c5:dd:2c:c2:5b:51:
                    70:a7:73:00:8b:e8:4d:a7:0c:03:c1:b1:0b:e3:f4:
                    42:1f:e2:55:68:6c:c9:09:34:2b:7b:fe:be:d1:2d:
                    76:c2:fc:01:cb:ee:2e:5a:76:3c:f4:b8:e7:9e:9c:
                    40:5a:2c:7b:85:52:8b:1e:d1:88:01:05:13:86:9a:
                    6e:60:5b:49:36:22:aa:54:1a:a5:02:f6:26:2d:da:
                    9a:57:47:9d:04:57:2e:d1:d9:ee:bb:d8:01:2c:92:
                    27:87:4d:e1:01:af:19:35:fb:c2:ab:8e:24:b2:52:
                    73:6e:e7:67:5d:b3:9f:99:0a:85:68:ea:ef:3e:cd:
                    39:28:d2:65:2b:96:04:87:4d:84:2b:cb:b4:8d:96:
                    01:01:3c:ca:59:da:64:96:ce:65:c0:0b:91:cc:51:
                    56:5c:88:58:0a:a4:df:34:b2:04:24:5e:fe:55:31:
                    a4:ab:51:47:05:6b:09:af:bf:7c:a1:54:5e:be:60:
                    31:8b:fb:07:71:89:71:13:de:6d:2b:4f:74:2a:ee:
                    ac:d6:8e:1a:d5:03:56:f4:60:46:3f:15:30:c8:24:
                    96:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DB:FD:55:EE:64:BC:D1:65:1B:7C:B6:CB:18:F9:5E:7F:C1:2A:39
            X509v3 Authority Key Identifier:
                keyid:EE:E9:E1:0C:29:1E:56:C8:2D:77:07:20:10:B0:E5:80:08:3F:E7:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/7unhDCkeVsgtdwcgELDlgAg_5yk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E82F0/5C57E5C0828311EE90C8816AC4F9AE02/7unhDCkeVsgtdwcgELDlgAg_5yk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         45:cb:fb:a1:e4:2e:03:01:f2:bc:f4:8e:2a:47:47:c1:09:16:
         cf:82:e0:7e:2e:39:2f:b3:a8:fc:51:f3:e6:97:fd:5c:93:9f:
         73:40:ab:92:44:a4:c3:13:07:eb:ba:9e:d1:90:bb:aa:15:18:
         ca:f0:7d:9f:81:87:fd:44:f1:7c:43:ba:94:e9:b1:23:c6:ab:
         fc:4a:41:38:2c:e3:bf:d3:ce:eb:6b:38:6a:df:56:9e:76:20:
         09:7c:4c:a3:c2:22:ba:cb:5b:6b:0b:3f:26:1c:f9:b8:22:4b:
         a0:17:98:cd:4d:fa:54:30:9c:0a:35:f2:89:d6:96:01:a6:d8:
         3e:f3:2e:48:0b:2a:be:ed:5a:04:68:87:aa:df:5e:c2:25:98:
         21:47:36:0e:eb:09:b8:75:26:3e:f1:d6:c6:35:19:2d:50:26:
         46:39:3d:bd:76:76:3e:26:ae:2e:56:86:10:ec:db:e8:ca:49:
         dc:6f:19:f3:52:b1:5f:c8:5a:26:9f:a1:72:f1:0e:f7:eb:8f:
         7b:2f:77:12:3a:44:25:25:f3:f4:d7:5f:2c:d6:af:93:38:53:
         9d:ed:1a:48:60:0c:db:3d:c0:5c:a3:6a:90:c4:d3:48:7e:8f:
         51:59:03:b5:ce:0b:c7:80:eb:48:43:f7:1e:b5:7b:ec:54:63:
         a1:e9:96:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:44 2026 by rpki-client