Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
File:                     q4PFkhuEDFQXM78Ucyl13UlzP_w.mft (raw, json)
Hash identifier:          s73V63wppnW9lY4tuhTok+V2Z89M50Vr49Or8MDlqSI=
Subject key identifier:   94:6C:38:E3:2A:E6:7E:DF:E4:4C:B8:E4:3A:42:BF:36:D7:B8:A9:16
Authority key identifier: AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC
Certificate issuer:       /CN=A91F523F/serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
Certificate serial:       0114
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
Manifest number:          0114
Signing time:             Thu 21 May 2026 06:01:11 +0000
Manifest this update:     Thu 21 May 2026 06:01:11 +0000
Manifest next update:     Thu 28 May 2026 06:01:11 +0000
Files and hashes:         1: q4PFkhuEDFQXM78Ucyl13UlzP_w.crl (hash: qLIvPTJHuntDOAzz4pbkntO3/qZpedZFsl6/u0wj55E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl
                          rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 06:01:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F523F, serialNumber=AB83C5921B840C541733BF14732975DD49733FFC
        Validity
            Not Before: May 21 06:01:11 2026 GMT
            Not After : May 28 06:01:11 2026 GMT
        Subject: CN=6a0e9fa7-2a50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e5:d1:f3:1d:d8:f2:fb:37:8f:f2:7f:25:06:
                    92:85:3b:db:e0:f9:f9:2a:af:70:3f:8d:69:99:8d:
                    98:ce:d3:6a:85:5e:3f:ba:d3:f0:51:6d:4d:1c:9e:
                    ed:b1:36:46:34:e6:2c:1e:b4:e0:f9:38:0a:aa:6a:
                    58:3c:a4:d8:0f:62:86:12:88:ab:d0:30:01:1d:48:
                    a5:3a:1e:d2:23:3b:16:c9:07:4c:04:36:e6:48:ea:
                    c4:a5:94:f3:7a:94:1c:3e:28:ef:2d:c2:72:05:1f:
                    ef:d6:ff:29:09:51:3c:a7:ce:8e:4c:1d:ed:46:19:
                    6a:7a:e4:ab:fc:7f:9e:a1:f2:cf:87:94:7f:e5:f4:
                    70:f9:46:29:25:19:33:7f:0b:77:09:70:a7:17:4c:
                    d4:0c:6b:78:b8:4e:13:c9:f2:ed:5d:e0:4a:26:4c:
                    7b:92:01:8e:47:4f:de:56:b2:cc:bd:91:78:b0:68:
                    34:57:3a:f2:06:f5:0c:3e:9f:ae:e1:d7:27:08:a7:
                    52:7f:89:92:e1:29:5c:f6:23:dd:c1:af:c8:91:c0:
                    0e:a3:b6:80:32:dd:ee:a6:c8:20:92:75:44:77:27:
                    f2:84:89:5a:f0:69:95:16:78:5c:9c:33:02:c2:c7:
                    60:86:11:b6:54:e8:63:d6:06:ca:5d:40:41:99:26:
                    29:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:6C:38:E3:2A:E6:7E:DF:E4:4C:B8:E4:3A:42:BF:36:D7:B8:A9:16
            X509v3 Authority Key Identifier:
                keyid:AB:83:C5:92:1B:84:0C:54:17:33:BF:14:73:29:75:DD:49:73:3F:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/q4PFkhuEDFQXM78Ucyl13UlzP_w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F523F/56A4CB8AB05311EF9C2B8D3FC4F9AE02/q4PFkhuEDFQXM78Ucyl13UlzP_w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:76:a7:83:fe:6d:30:87:04:1c:fe:51:45:ba:ad:c4:23:7f:
         0c:18:75:63:6e:d8:df:83:a7:9b:4b:52:39:e6:50:02:60:04:
         47:97:c1:48:19:a2:7b:e8:13:c2:60:da:95:88:f4:30:63:56:
         05:27:3f:21:28:aa:be:d1:20:b2:14:c1:70:4a:79:ab:1b:ab:
         c1:98:fb:86:3c:32:d6:51:ea:bf:01:35:d4:9a:a8:b5:aa:75:
         ef:e0:14:8a:c7:db:eb:f3:ea:b5:90:d7:63:44:ec:21:26:8f:
         d8:68:74:33:c3:5a:a0:bf:14:b0:91:45:4b:ea:d0:55:9c:71:
         c5:9b:88:bf:56:f5:4a:63:b5:3a:ba:e7:25:db:70:e8:32:f4:
         34:9f:0d:54:f8:14:79:ba:71:87:ae:5b:5f:e2:24:11:1f:7f:
         bd:e6:2a:28:b3:d8:ba:55:da:67:80:3d:14:25:f1:d6:a9:49:
         4c:c1:65:6d:55:1c:87:d7:f3:28:ea:c6:64:39:d8:51:39:6b:
         5d:03:80:99:11:17:8c:8b:3c:fd:dc:b0:89:ee:e0:c1:4c:2c:
         6d:17:df:5a:b0:8e:3e:af:12:06:21:5d:c9:d7:9e:10:34:c5:
         3e:2c:da:a9:c4:e2:86:bd:70:a9:2a:27:c6:14:45:3b:d5:d1:
         d7:ae:5a:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:49 2026 by rpki-client