Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
File:                     vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft (raw, json)
Hash identifier:          j5mFczOEMxlDAXxru1lohtqpP3iZAyT9BeqwHciBJM0=
Subject key identifier:   95:58:92:E8:75:7F:9F:FA:53:31:78:E4:B0:16:9A:2C:B0:A9:0E:47
Authority key identifier: BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2
Certificate issuer:       /CN=A91EC3C9/serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2
Certificate serial:       C0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
Manifest number:          C0
Signing time:             Thu 21 May 2026 07:01:42 +0000
Manifest this update:     Thu 21 May 2026 07:01:42 +0000
Manifest next update:     Thu 28 May 2026 07:01:42 +0000
Files and hashes:         1: vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl (hash: aZsMUxyVQEZeFeFXMIeBL0oGOLpCBlGzqvnogM7FSgQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl
                          rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:01:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 192 (0xc0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC3C9, serialNumber=BCE9FA6C377C9434B12C77BEFCDD42A5B7034FF2
        Validity
            Not Before: May 21 07:01:42 2026 GMT
            Not After : May 28 07:01:42 2026 GMT
        Subject: CN=6a0eadd6-312a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:e6:10:8f:13:4e:aa:a0:5b:63:47:b4:24:af:
                    7b:cf:b5:a7:d2:d1:3a:9c:ed:4b:f4:d7:89:e1:ab:
                    73:73:4f:56:c9:f3:fd:a2:88:82:86:1c:59:a6:cf:
                    e1:cd:08:d4:b7:11:79:15:b9:48:f0:3e:86:9c:3e:
                    48:7a:1b:39:d9:22:fa:f4:58:42:ab:88:f0:c9:ff:
                    97:8b:42:8f:45:25:70:27:9c:03:40:2b:a8:7c:18:
                    27:3c:80:4b:56:73:6e:77:4f:37:3e:8d:04:3b:b8:
                    3e:82:9c:3b:e7:79:18:df:b5:aa:8b:24:d9:f0:7e:
                    d8:df:cb:c1:fd:3f:22:1e:95:cb:2b:87:02:df:bd:
                    da:6c:b7:01:e2:85:78:f8:b8:f2:df:db:be:e1:c4:
                    ee:a8:19:73:1a:8e:95:89:60:fc:73:02:39:f7:4b:
                    5a:4c:1c:93:e1:4a:bf:06:2c:17:4a:62:a8:36:55:
                    d8:90:df:59:de:ac:34:a7:6f:f4:d5:0a:36:5b:d7:
                    bc:e4:40:a2:06:08:21:74:11:74:5f:07:c7:a1:66:
                    61:8b:14:ca:b9:ec:7f:2e:9d:85:6e:a3:03:8f:e0:
                    b8:c6:b9:6e:9b:6a:dc:ad:ab:80:ce:a9:a6:b3:9d:
                    de:58:5e:6d:4f:33:98:26:16:36:98:14:5b:0e:f6:
                    18:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:58:92:E8:75:7F:9F:FA:53:31:78:E4:B0:16:9A:2C:B0:A9:0E:47
            X509v3 Authority Key Identifier:
                keyid:BC:E9:FA:6C:37:7C:94:34:B1:2C:77:BE:FC:DD:42:A5:B7:03:4F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/vOn6bDd8lDSxLHe-_N1CpbcDT_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC3C9/C12CDAE4318E11F09C36DA7BC4F9AE02/vOn6bDd8lDSxLHe-_N1CpbcDT_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c2:b6:5f:c7:f5:13:7f:8d:50:b7:e5:a1:ae:6f:41:f1:33:ff:
         18:d7:05:68:b4:c4:ff:36:03:f2:5e:39:3d:3e:91:cd:57:a3:
         fb:07:d7:97:17:1c:ef:33:6b:ae:5c:87:8b:15:c2:be:ec:81:
         c3:c4:9f:76:8d:59:d6:fd:80:fa:23:56:7a:f6:d2:6a:4c:31:
         52:21:39:c1:26:2d:4c:5f:6e:18:0c:01:3e:dd:d5:7e:13:54:
         da:ff:a5:2d:55:03:bb:ae:d4:41:46:c4:b6:d4:b9:78:c4:6d:
         59:e0:19:1d:16:03:5f:e2:5f:9b:f1:da:c1:a6:34:66:ad:c7:
         c8:c6:31:b6:57:53:2e:f7:df:d7:18:21:d9:a6:63:24:63:13:
         38:a2:bf:f2:3d:68:23:8f:4f:8e:e7:0a:fd:1a:1a:0d:e5:79:
         96:65:72:e6:50:bc:3a:80:40:06:e0:2e:1f:5f:30:06:8c:a5:
         7f:21:4f:96:43:6c:44:bb:88:f5:53:a6:1c:84:7a:e0:2b:c1:
         2a:f2:8d:91:b5:90:65:b6:78:d8:59:6f:68:47:a7:35:d4:4c:
         01:e3:5d:73:f3:f9:85:97:d2:e7:09:00:ba:f3:0a:30:c0:a8:
         dc:dc:1d:52:73:fe:74:83:60:1e:e5:68:95:ca:0f:92:ac:83:
         06:28:26:b8
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAMAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUMzQzkxMTAvBgNVBAUTKEJDRTlGQTZDMzc3Qzk0MzRCMTJDNzdCRUZDREQ0MkE1
QjcwMzRGRjIwHhcNMjYwNTIxMDcwMTQyWhcNMjYwNTI4MDcwMTQyWjAYMRYwFAYD
VQQDEw02YTBlYWRkNi0zMTJhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAteYQjxNOqqBbY0e0JK97z7Wn0tE6nO1L9NeJ4atzc09WyfP9ooiChhxZps/h
zQjUtxF5FblI8D6GnD5Iehs52SL69FhCq4jwyf+Xi0KPRSVwJ5wDQCuofBgnPIBL
VnNud083Po0EO7g+gpw753kY37WqiyTZ8H7Y38vB/T8iHpXLK4cC373abLcB4oV4
+Ljy39u+4cTuqBlzGo6ViWD8cwI590taTByT4Uq/BiwXSmKoNlXYkN9Z3qw0p2/0
1Qo2W9e85ECiBgghdBF0XwfHoWZhixTKuex/Lp2FbqMDj+C4xrlum2rcrauAzqmm
s53eWF5tTzOYJhY2mBRbDvYYvwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJVYkuh1
f5/6UzF45LAWmiywqQ5HMB8GA1UdIwQYMBaAFLzp+mw3fJQ0sSx3vvzdQqW3A0/y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzNDOS9DMTJDREFFNDMx
OEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxEU3hMSGUtX04xQ3BiY0RU
X0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3ZPbjZiRGQ4bERTeExIZS1fTjFDcGJjRFRfSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzNDOS9DMTJDREFFNDMxOEUxMUYwOUMzNkRBN0JDNEY5QUUwMi92T242YkRkOGxE
U3hMSGUtX04xQ3BiY0RUX0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwrZfx/UTf41Qt+Whrm9B8TP/GNcFaLTE/zYD8l45PT6RzVej+wfXlxcc7zNr
rlyHixXCvuyBw8Sfdo1Z1v2A+iNWevbSakwxUiE5wSYtTF9uGAwBPt3VfhNU2v+l
LVUDu67UQUbEttS5eMRtWeAZHRYDX+Jfm/HawaY0Zq3HyMYxtldTLvff1xgh2aZj
JGMTOKK/8j1oI49PjucK/RoaDeV5lmVy5lC8OoBABuAuH18wBoylfyFPlkNsRLuI
9VOmHIR64CvBKvKNkbWQZbZ42FlvaEenNdRMAeNdc/P5hZfS5wkAuvMKMMCo3Nwd
UnP+dINgHuVolcoPkqyDBigmuA==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:27 2026 by rpki-client