Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
File:                     Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft (raw, json)
Hash identifier:          n8+L0GLmdGgzkBm0XlXzbAG5KmAC6gwa01Zs2OJjqGI=
Subject key identifier:   3D:DA:7C:E9:E9:0C:AA:28:CF:0F:A3:5C:73:F4:82:46:EF:42:EC:16
Authority key identifier: 3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7
Certificate issuer:       /CN=A91F1303/serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
Certificate serial:       C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
Manifest number:          C5
Signing time:             Tue 23 Jun 2026 07:08:39 +0000
Manifest this update:     Tue 23 Jun 2026 07:08:39 +0000
Manifest next update:     Tue 30 Jun 2026 07:08:39 +0000
Files and hashes:         1: Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl (hash: ns4aIFSyS2miA/QMZsrf6qny0sAvuxi+Q8OmdbaQJ8Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl
                          rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 30 Jun 2026 07:08:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F1303, serialNumber=3F17790989172F409267E0FFE744EE48B01791E7
        Validity
            Not Before: Jun 23 07:08:39 2026 GMT
            Not After : Jun 30 07:08:39 2026 GMT
        Subject: CN=6a3a30f7-7aa3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:22:5e:78:92:74:d7:b3:b5:1f:0d:e5:9f:f9:
                    bc:94:7b:7c:6d:d9:95:6f:f3:26:43:4c:d1:04:fd:
                    91:04:bf:ff:0b:c2:f9:83:cf:7c:25:61:d2:db:c5:
                    67:c6:7e:2b:da:df:fb:eb:ab:ee:e0:33:14:c7:54:
                    e8:e1:1b:80:7a:43:d7:63:2b:f7:4f:ea:8a:5f:89:
                    99:d3:48:d6:83:96:c9:49:31:36:52:7d:19:41:84:
                    6c:36:f8:d9:ab:b2:de:55:4a:14:eb:b6:61:a2:a3:
                    d4:9a:f1:e3:e5:ee:12:f4:28:cc:07:3c:64:84:e1:
                    72:06:85:07:6b:06:44:67:49:13:69:d0:c5:15:22:
                    ac:7f:9c:20:35:22:b7:07:af:06:70:26:03:1a:f8:
                    7d:35:5a:2c:7c:c5:6f:d2:39:4b:aa:e4:5e:47:3e:
                    5a:d9:89:6b:0b:c1:df:01:22:af:be:eb:5d:8c:f9:
                    75:bd:4d:ae:43:6f:81:25:bf:27:a1:32:98:f2:52:
                    73:8e:c2:b0:eb:e4:e1:31:53:f1:aa:fb:d3:19:78:
                    14:89:64:7d:81:61:d6:b1:66:5c:c7:16:28:ca:20:
                    67:e2:cc:d9:d1:b7:5c:23:a3:c2:81:cd:05:f9:78:
                    64:a5:93:83:07:70:42:b4:53:92:ee:13:2a:af:3c:
                    81:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DA:7C:E9:E9:0C:AA:28:CF:0F:A3:5C:73:F4:82:46:EF:42:EC:16
            X509v3 Authority Key Identifier:
                keyid:3F:17:79:09:89:17:2F:40:92:67:E0:FF:E7:44:EE:48:B0:17:91:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Pxd5CYkXL0CSZ-D_50TuSLAXkec.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F1303/9B424D30468511F0A881883EC4F9AE02/Pxd5CYkXL0CSZ-D_50TuSLAXkec.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b0:74:ee:e4:62:0e:74:28:aa:d0:49:fa:6e:f4:a8:cd:5c:a1:
         28:28:84:86:c1:e2:ff:2d:48:1a:bb:42:87:c0:d4:d3:69:74:
         72:39:14:18:fc:70:5c:92:42:4c:2d:e9:71:5c:8f:18:2a:49:
         a9:39:2b:24:fe:fd:69:a7:19:07:e7:4c:5a:cf:df:37:44:b8:
         08:5e:54:a5:e8:8d:f7:72:11:50:f2:ea:37:4e:a1:70:e6:db:
         2d:3c:fb:ee:e2:c1:c5:24:17:2d:10:30:2f:ec:b3:39:75:4a:
         81:d9:a3:bc:8c:4f:f4:66:25:b1:66:77:3a:f2:1d:59:1c:bd:
         d3:06:13:a8:66:6b:f4:e2:5c:29:2f:8f:7f:9e:4d:ca:1c:9d:
         17:f1:a1:0e:cf:fc:5f:b4:a0:86:9e:0f:2b:b0:19:62:0b:5e:
         54:32:c8:c5:df:42:2f:8f:22:6f:49:29:4a:ea:fa:3c:10:33:
         0c:f3:1b:5c:bc:a4:ed:36:1c:6c:21:7e:ff:2f:fa:f6:42:bf:
         67:ac:77:8d:84:b2:df:97:fd:c5:e6:bc:63:84:70:85:dd:b1:
         d2:53:7d:85:1e:a5:9e:01:7c:0d:0d:ba:37:a0:e6:fb:fa:a5:
         1c:3c:c7:b0:7b:0d:96:9c:a1:dd:62:c5:0f:17:e5:a9:a5:2b:
         6f:02:88:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 24 11:15:16 2026 by rpki-client