Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File:                     XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier:          705Cv+fi1HN2rEgq+nCDk6kA1VZlWYaziNDQLGJW1VU=
Subject key identifier:   A2:F7:7D:3B:2F:15:E2:6B:1F:51:FB:50:AE:1F:CA:5A:52:45:B6:96
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer:       /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial:       05C2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number:          05C2
Signing time:             Wed 20 May 2026 23:09:27 +0000
Manifest this update:     Wed 20 May 2026 23:09:27 +0000
Manifest next update:     Wed 27 May 2026 23:09:27 +0000
Files and hashes:         1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: 6DnUkQCfKsObDip03dvi3xn8sj94RnXjyvotgpbJ+IY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:09:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1474 (0x5c2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
        Validity
            Not Before: May 20 23:09:27 2026 GMT
            Not After : May 27 23:09:27 2026 GMT
        Subject: CN=6a0e3f27-6f2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b7:21:2b:e9:e9:78:cd:46:df:59:7c:d1:45:
                    9f:a0:e2:29:e2:c1:00:75:3f:0f:a8:0f:fc:e4:55:
                    3c:c2:35:65:e7:3f:cf:08:ce:f8:15:26:6d:f6:6f:
                    63:1d:f0:50:33:a9:bd:e2:2d:b5:18:64:72:29:a4:
                    12:72:0e:3b:d3:7f:7e:04:73:41:76:f2:52:54:b1:
                    9b:af:c6:8e:56:f4:c7:45:ff:47:5c:c2:02:0b:73:
                    fa:77:cd:91:28:8a:19:e9:b4:3c:06:79:de:7d:58:
                    d8:d0:77:51:29:7e:d1:ec:cd:63:88:85:1e:73:30:
                    97:9f:47:4d:63:30:6f:30:9b:56:87:b3:7b:80:a9:
                    64:61:11:f2:08:84:15:4e:15:1d:41:ac:82:28:c6:
                    cb:df:a7:b8:fa:2c:c3:22:f0:21:97:81:eb:58:fa:
                    31:8f:9d:c8:3a:f7:3f:3e:0a:0f:1b:bb:a2:7b:07:
                    63:5d:ae:78:ed:85:3a:52:72:cf:ad:72:89:07:17:
                    fd:82:54:be:b5:b0:bb:b2:9b:65:cb:83:04:76:ea:
                    c3:3b:9b:c6:ee:01:57:cb:a8:f0:5c:6e:ba:70:67:
                    02:25:7d:79:d1:80:c4:5d:8a:9b:36:84:6d:50:ee:
                    3f:f5:1b:9c:5e:e1:bb:82:78:69:18:9c:8a:3a:e1:
                    3f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:F7:7D:3B:2F:15:E2:6B:1F:51:FB:50:AE:1F:CA:5A:52:45:B6:96
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ea:0b:c0:e7:c2:3c:45:7a:42:31:74:c8:1b:7e:8f:7c:1c:61:
         89:cd:45:04:4c:aa:04:c0:ee:c1:09:98:17:03:70:dd:f3:80:
         b2:52:cd:b3:34:df:e8:4a:4e:80:37:ca:ef:9c:ae:b5:92:c2:
         f0:bc:3d:6f:49:31:ff:16:f8:12:ea:d6:fa:02:98:08:96:52:
         df:25:d7:c8:bc:4c:d6:95:a5:cb:c7:e9:c3:0b:5f:97:97:cb:
         4c:5a:51:cf:37:68:a1:08:a6:69:b0:2e:c1:42:9b:98:0c:63:
         0d:56:71:06:d9:e8:af:72:97:c9:ac:e1:e7:ef:a4:84:6c:1a:
         09:44:28:b9:be:64:8c:82:c9:55:4a:21:4a:7e:59:e1:a6:2b:
         e7:c7:f2:84:c8:b7:76:fb:06:61:7f:9f:b7:47:b1:98:59:21:
         6d:ec:e2:1c:10:2f:8a:a9:79:06:ed:59:89:93:cc:ae:7a:32:
         e6:fc:ba:80:8a:4c:1b:64:87:9b:0e:ed:a2:9a:c0:f5:ca:0c:
         44:5f:a6:f6:43:a8:f3:a8:4e:be:fd:81:4c:13:2b:84:ba:09:
         c4:11:50:9e:17:a4:0b:29:5e:de:57:75:61:c8:67:69:af:85:
         44:df:9a:49:c8:3f:ac:5b:e0:2a:e2:86:5d:29:13:a1:8d:6c:
         4a:3a:c5:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:23:34 2026 by rpki-client