Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
File:                     j5ZyrK2aUfA9SLxDtjOpVzSY494.mft (raw, json)
Hash identifier:          6c/V4XUJ3X8iQeEfmLjU8306a1uJu4iwRQc7aAKAt30=
Subject key identifier:   D6:35:DD:82:7A:C3:D5:5A:31:BD:D9:90:18:85:84:30:EF:D9:0E:54
Authority key identifier: 8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE
Certificate issuer:       /CN=A91FC1DE/serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
Certificate serial:       02ED
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
Manifest number:          02EC
Signing time:             Thu 21 May 2026 01:22:30 +0000
Manifest this update:     Thu 21 May 2026 01:22:29 +0000
Manifest next update:     Thu 28 May 2026 01:22:29 +0000
Files and hashes:         1: j5ZyrK2aUfA9SLxDtjOpVzSY494.crl (hash: BJ7hziimJ2P75rzonLz0ynujwSTRE/DK+mX8+BdGo7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl
                          rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:22:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 749 (0x2ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FC1DE, serialNumber=8F9672ACAD9A51F03D48BC43B633A9573498E3DE
        Validity
            Not Before: May 21 01:22:29 2026 GMT
            Not After : May 28 01:22:29 2026 GMT
        Subject: CN=6a0e5e56-5561
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e0:51:70:8e:83:06:0e:8e:ec:f5:72:ea:f2:
                    b4:07:4e:b6:d8:e2:1b:ec:0b:a0:34:32:51:92:4c:
                    7c:d7:c8:42:ef:59:24:0f:ab:b2:db:64:db:21:2f:
                    f4:eb:88:f2:de:4b:35:0d:13:af:ae:40:a5:82:79:
                    8b:7a:95:27:50:e5:ef:2f:db:ec:28:0f:46:89:77:
                    b1:63:92:37:11:15:b9:f8:d9:29:dd:ad:df:19:6e:
                    08:77:8f:46:d5:a0:88:2d:db:b0:1d:c1:1e:1f:50:
                    7b:d3:db:d3:b9:03:67:64:fa:de:5a:49:02:a2:e2:
                    67:80:65:cb:c1:c4:c6:f8:05:8a:6c:ad:87:95:f6:
                    73:33:92:47:02:a1:e6:71:68:11:5c:42:7f:21:9d:
                    9e:7d:03:73:8c:58:bb:2f:41:cb:a9:4d:fc:52:52:
                    d5:7d:af:e7:97:f0:d2:84:9c:e6:a6:cf:5c:fb:ca:
                    22:5d:52:76:7c:65:3c:06:b4:1b:b8:cb:29:43:38:
                    c0:52:7c:6b:90:95:bf:9b:a9:9e:7b:70:a8:7b:3c:
                    ca:0a:07:00:b5:6f:be:84:9a:34:8d:51:53:9c:e0:
                    1e:ac:d9:2c:01:f9:09:e3:4a:15:a7:b4:b0:6b:e0:
                    60:4a:78:85:67:fb:54:3d:92:5e:31:53:a0:ae:37:
                    66:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:35:DD:82:7A:C3:D5:5A:31:BD:D9:90:18:85:84:30:EF:D9:0E:54
            X509v3 Authority Key Identifier:
                keyid:8F:96:72:AC:AD:9A:51:F0:3D:48:BC:43:B6:33:A9:57:34:98:E3:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j5ZyrK2aUfA9SLxDtjOpVzSY494.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FC1DE/732D69B6277911ED9D48F423C4F9AE02/j5ZyrK2aUfA9SLxDtjOpVzSY494.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         da:8b:dc:91:a7:34:5d:0e:74:e7:82:8a:ed:64:29:d2:56:05:
         9c:5e:c5:3f:b5:14:79:03:96:22:b9:14:a2:b0:32:a0:96:b0:
         45:59:87:29:8f:1f:62:1d:25:c3:3b:e6:b8:d1:91:b6:39:c5:
         7e:fc:e5:d7:0b:bd:fa:38:41:47:83:65:75:fa:b6:d6:4d:77:
         7c:b5:38:a6:61:d6:5d:cb:51:5a:16:6b:bb:38:da:94:59:bc:
         5d:10:6f:2f:ae:ff:a7:c8:88:76:7b:56:db:5e:4d:fe:ff:6a:
         a2:9a:01:41:f1:fd:24:65:f4:7a:9a:df:80:4b:f1:c9:e0:aa:
         d2:63:63:ee:a4:33:8d:b4:cc:43:a6:ce:8c:d1:0b:9a:52:64:
         91:09:28:9b:36:86:f1:76:eb:79:4d:e6:5a:ea:a1:ed:fb:08:
         2a:53:81:07:0c:5b:b5:82:d0:73:2b:57:50:ac:c7:01:81:af:
         dc:f0:8e:b8:cc:93:ed:68:83:c9:65:08:e0:8f:e3:1a:5d:09:
         4e:dc:9f:b9:c5:6e:2a:66:16:d7:8a:40:0f:7c:93:29:d2:7b:
         4d:ae:f9:db:a4:d8:c2:38:9b:e5:d8:d3:11:65:ac:8a:98:b6:
         55:2c:a3:cb:62:07:35:cf:06:4a:36:00:29:c7:74:38:ce:0b:
         3f:57:c1:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAu0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkMxREUxMTAvBgNVBAUTKDhGOTY3MkFDQUQ5QTUxRjAzRDQ4QkM0M0I2MzNBOTU3
MzQ5OEUzREUwHhcNMjYwNTIxMDEyMjI5WhcNMjYwNTI4MDEyMjI5WjAYMRYwFAYD
VQQDEw02YTBlNWU1Ni01NTYxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4uBRcI6DBg6O7PVy6vK0B0622OIb7AugNDJRkkx818hC71kkD6uy22TbIS/0
64jy3ks1DROvrkClgnmLepUnUOXvL9vsKA9GiXexY5I3ERW5+Nkp3a3fGW4Id49G
1aCILduwHcEeH1B709vTuQNnZPreWkkCouJngGXLwcTG+AWKbK2HlfZzM5JHAqHm
cWgRXEJ/IZ2efQNzjFi7L0HLqU38UlLVfa/nl/DShJzmps9c+8oiXVJ2fGU8BrQb
uMspQzjAUnxrkJW/m6mee3CoezzKCgcAtW++hJo0jVFTnOAerNksAfkJ40oVp7Sw
a+BgSniFZ/tUPZJeMVOgrjdmDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNY13YJ6
w9VaMb3ZkBiFhDDv2Q5UMB8GA1UdIwQYMBaAFI+WcqytmlHwPUi8Q7YzqVc0mOPe
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQzFERS83MzJENjlCNjI3
NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVmQTlTTHhEdGpPcFZ6U1k0
OTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2o1WnlySzJhVWZBOVNMeER0ak9wVnpTWTQ5NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QzFERS83MzJENjlCNjI3NzkxMUVEOUQ0OEY0MjNDNEY5QUUwMi9qNVp5cksyYVVm
QTlTTHhEdGpPcFZ6U1k0OTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEA2ovckac0XQ5054KK7WQp0lYFnF7FP7UUeQOWIrkUorAyoJawRVmHKY8fYh0l
wzvmuNGRtjnFfvzl1wu9+jhBR4Nldfq21k13fLU4pmHWXctRWhZruzjalFm8XRBv
L67/p8iIdntW215N/v9qopoBQfH9JGX0eprfgEvxyeCq0mNj7qQzjbTMQ6bOjNEL
mlJkkQkomzaG8XbreU3mWuqh7fsIKlOBBwxbtYLQcytXUKzHAYGv3PCOuMyT7WiD
yWUI4I/jGl0JTtyfucVuKmYW14pAD3yTKdJ7Ta7526TYwjib5djTEWWsipi2VSyj
y2IHNc8GSjYAKcd0OM4LP1fBEg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:20:52 2026 by rpki-client