Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
File:                     maB2Nu64AHCDMDGWpYxBvsxoj4A.mft (raw, json)
Hash identifier:          6izgvDsSnMBgSRA6CpcFAH5trqk+jfF/z0xv7ZsNyp8=
Subject key identifier:   53:55:ED:98:8C:F8:CE:B5:CA:55:69:E1:03:34:29:4E:C3:06:55:2D
Authority key identifier: 99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80
Certificate issuer:       /CN=A91EEC3B/serialNumber=99A07636EEB8007083303196A58C41BECC688F80
Certificate serial:       0C91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
Manifest number:          2E72
Signing time:             Wed 20 May 2026 16:23:13 +0000
Manifest this update:     Wed 20 May 2026 16:23:13 +0000
Manifest next update:     Wed 27 May 2026 16:23:13 +0000
Files and hashes:         1: maB2Nu64AHCDMDGWpYxBvsxoj4A.crl (hash: PVuAPZI1TlnOBcplNellgEQ4n5XgADEItjdw86dg590=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl
                          rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:23:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3217 (0xc91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEC3B, serialNumber=99A07636EEB8007083303196A58C41BECC688F80
        Validity
            Not Before: May 20 16:23:13 2026 GMT
            Not After : May 27 16:23:13 2026 GMT
        Subject: CN=6a0ddff1-e411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:8b:7f:ef:6e:49:c0:ac:e0:10:0c:82:c7:
                    67:40:0d:09:d0:4e:f3:71:04:91:1f:08:0e:db:72:
                    3a:8b:2d:c9:43:31:fc:6d:83:29:eb:47:53:5d:23:
                    66:57:5c:c7:1e:6f:15:11:0e:e9:4d:8b:d4:0e:ee:
                    82:ad:b8:4a:a6:c8:7e:4e:2f:bd:0b:88:ae:de:4f:
                    f1:c7:6a:e7:2c:99:c6:e6:98:26:23:f8:ec:b0:49:
                    9b:9f:46:35:3d:e0:d0:d8:46:87:1d:48:46:1b:51:
                    4e:66:7b:0e:fa:fd:f5:b3:8f:ed:bb:77:b0:0c:ec:
                    0a:5b:5e:ae:0d:ae:1f:2c:c6:81:fd:3b:9d:2c:b2:
                    91:89:66:55:34:41:c1:58:59:dd:e5:5b:cc:61:b7:
                    d5:1c:2b:99:ac:c0:09:85:bf:a5:a6:c0:e3:02:b0:
                    72:3d:04:99:7d:a7:05:5d:41:70:7f:d5:92:7c:ed:
                    c8:bc:59:46:15:36:4f:7a:e4:1c:52:44:4a:3a:b4:
                    6a:a8:79:80:7b:45:d7:30:be:9c:b2:b1:aa:09:d8:
                    3a:a1:e9:4a:26:7b:6c:61:0b:6f:3b:54:42:81:d9:
                    46:33:fa:0c:2b:a8:58:c8:0d:74:21:7e:e5:16:a5:
                    86:1f:1a:1b:84:e3:4e:04:13:52:4f:b1:1b:6f:b5:
                    23:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:55:ED:98:8C:F8:CE:B5:CA:55:69:E1:03:34:29:4E:C3:06:55:2D
            X509v3 Authority Key Identifier:
                keyid:99:A0:76:36:EE:B8:00:70:83:30:31:96:A5:8C:41:BE:CC:68:8F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/maB2Nu64AHCDMDGWpYxBvsxoj4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEC3B/6B37E19C841711E785F17080C4F9AE02/maB2Nu64AHCDMDGWpYxBvsxoj4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:c7:b5:21:2e:61:10:31:11:c7:ba:8e:7d:ad:44:8e:9c:23:
         5f:b3:7b:5e:92:47:fc:60:44:b3:fe:64:64:62:56:35:02:83:
         e4:ab:0f:64:e9:d6:a7:2f:ac:0a:41:25:b0:ee:8d:0e:13:72:
         9b:da:2d:ec:5c:6c:27:10:e5:0e:83:50:f6:be:74:4f:8f:bf:
         63:3f:18:5d:4f:ac:68:3a:eb:94:34:80:69:f3:d1:b9:4d:3a:
         b4:ed:1e:11:23:3d:e5:e6:12:3f:60:12:a4:3d:25:59:cf:4a:
         cf:a9:e2:e9:97:36:81:4a:b5:52:8e:bb:52:53:03:03:0e:fb:
         e2:90:c9:08:f1:f4:0d:78:34:a4:80:c2:6d:df:27:2e:e5:cd:
         f3:b7:58:91:ba:6e:d1:d0:9a:1e:7a:65:7c:75:4c:c4:4d:e5:
         9d:7f:87:7b:c8:2a:dd:cb:96:1e:64:04:ba:5b:ab:6f:a5:ac:
         f1:e5:21:26:d8:e6:4f:e3:a8:99:e6:a7:73:42:68:19:39:d7:
         49:8d:dd:16:8c:89:af:0c:b8:e5:b2:29:c4:a6:42:e3:1e:78:
         45:08:78:c7:c8:d9:92:e8:aa:12:10:58:a4:6c:c8:3a:66:9d:
         2b:d2:c2:5f:cf:21:a9:0c:72:c2:6f:4c:d2:fa:8b:47:4a:65:
         af:f0:3e:5c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICDJEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUVDM0IxMTAvBgNVBAUTKDk5QTA3NjM2RUVCODAwNzA4MzMwMzE5NkE1OEM0MUJF
Q0M2ODhGODAwHhcNMjYwNTIwMTYyMzEzWhcNMjYwNTI3MTYyMzEzWjAYMRYwFAYD
VQQDEw02YTBkZGZmMS1lNDExMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApeaLf+9uScCs4BAMgsdnQA0J0E7zcQSRHwgO23I6iy3JQzH8bYMp60dTXSNm
V1zHHm8VEQ7pTYvUDu6CrbhKpsh+Ti+9C4iu3k/xx2rnLJnG5pgmI/jssEmbn0Y1
PeDQ2EaHHUhGG1FOZnsO+v31s4/tu3ewDOwKW16uDa4fLMaB/TudLLKRiWZVNEHB
WFnd5VvMYbfVHCuZrMAJhb+lpsDjArByPQSZfacFXUFwf9WSfO3IvFlGFTZPeuQc
UkRKOrRqqHmAe0XXML6csrGqCdg6oelKJntsYQtvO1RCgdlGM/oMK6hYyA10IX7l
FqWGHxobhONOBBNST7Ebb7UjoQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFNV7ZiM
+M61ylVp4QM0KU7DBlUtMB8GA1UdIwQYMBaAFJmgdjbuuABwgzAxlqWMQb7MaI+A
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFRUMzQi82QjM3RTE5Qzg0
MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFIQ0RNREdXcFl4QnZzeG9q
NEEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL21hQjJOdTY0QUhDRE1ER1dwWXhCdnN4b2o0QS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
RUMzQi82QjM3RTE5Qzg0MTcxMUU3ODVGMTcwODBDNEY5QUUwMi9tYUIyTnU2NEFI
Q0RNREdXcFl4QnZzeG9qNEEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjse1IS5hEDERx7qOfa1EjpwjX7N7XpJH/GBEs/5kZGJWNQKD5KsPZOnWpy+s
CkElsO6NDhNym9ot7FxsJxDlDoNQ9r50T4+/Yz8YXU+saDrrlDSAafPRuU06tO0e
ESM95eYSP2ASpD0lWc9Kz6ni6Zc2gUq1Uo67UlMDAw774pDJCPH0DXg0pIDCbd8n
LuXN87dYkbpu0dCaHnplfHVMxE3lnX+He8gq3cuWHmQEulurb6Ws8eUhJtjmT+Oo
meanc0JoGTnXSY3dFoyJrwy45bIpxKZC4x54RQh4x8jZkuiqEhBYpGzIOmadK9LC
X88hqQxywm9M0vqLR0plr/A+XA==
-----END CERTIFICATE-----
Generated at Thu May 21 09:38:10 2026 by rpki-client