Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
File:                     dEy0Bnedz3q-afF952ykOS2ebsM.mft (raw, json)
Hash identifier:          +bFFZ+CsLdgZr5ZXcmaO12fLK3q9zGUm4R5SH1MTxKs=
Subject key identifier:   E5:70:A2:63:73:8C:B5:05:C9:E1:B5:A5:D4:89:9F:61:98:E9:99:CA
Authority key identifier: 74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3
Certificate issuer:       /CN=A911535B/serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
Manifest number:          353C
Signing time:             Tue 12 May 2026 14:56:12 +0000
Manifest this update:     Tue 12 May 2026 14:56:11 +0000
Manifest next update:     Tue 19 May 2026 14:56:11 +0000
Files and hashes:         1: dEy0Bnedz3q-afF952ykOS2ebsM.crl (hash: Kcy59/v7CPDTsKX1Q1vOlFKZtIUsw85TIbNwcA1NjAM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl
                          rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:56:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911535B, serialNumber=744CB406779DCF7ABE69F17DE76CA4392D9E6EC3
        Validity
            Not Before: May 12 14:56:11 2026 GMT
            Not After : May 19 14:56:11 2026 GMT
        Subject: CN=6a033f8c-36e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:fa:7d:91:c1:e3:07:b1:be:0e:f8:e1:35:18:
                    ac:45:9c:79:34:96:8d:db:2c:9a:23:9c:56:9d:6e:
                    a1:02:8d:4f:8b:7c:53:26:8c:6a:ae:6a:3e:35:1c:
                    fd:7a:75:53:13:42:5e:c5:29:1e:14:32:79:47:d4:
                    f0:3d:48:38:53:7f:a8:fb:72:01:fd:58:fc:ae:dc:
                    26:9e:70:78:bf:8f:87:ff:ac:be:b6:c1:40:8f:6d:
                    6c:77:a0:27:2e:6d:76:08:c7:dd:30:23:83:33:5e:
                    35:f1:6c:7b:f2:fa:3c:68:a5:6e:91:4c:42:72:fe:
                    6b:11:4c:55:a1:de:a3:26:44:af:7d:76:73:14:0c:
                    bd:c8:ba:2b:a3:b3:bd:c3:36:5f:ce:5e:ad:04:e2:
                    78:33:7f:1f:13:e3:95:6f:5f:11:13:92:4a:02:83:
                    2f:57:66:ba:3a:16:55:eb:91:6e:81:b5:6f:ce:95:
                    dd:99:11:30:5b:c3:1a:a4:a3:6c:ee:9e:20:11:ae:
                    3a:d5:6f:9b:00:2f:d4:b5:c1:21:94:bd:f0:68:83:
                    c5:3d:dc:98:84:eb:65:88:6f:77:03:22:d5:b9:42:
                    c8:26:eb:5e:f1:39:9b:bd:de:db:d2:03:ab:4b:83:
                    7d:67:35:29:5c:d7:cf:42:fe:3b:11:8e:cf:9c:b9:
                    ad:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:70:A2:63:73:8C:B5:05:C9:E1:B5:A5:D4:89:9F:61:98:E9:99:CA
            X509v3 Authority Key Identifier:
                keyid:74:4C:B4:06:77:9D:CF:7A:BE:69:F1:7D:E7:6C:A4:39:2D:9E:6E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEy0Bnedz3q-afF952ykOS2ebsM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911535B/566792961D9A11E28AC17D8708B02CD2/dEy0Bnedz3q-afF952ykOS2ebsM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         40:20:c1:b8:90:94:51:24:02:f4:67:18:c2:e7:30:1d:54:86:
         74:2f:6b:06:16:18:79:72:a8:c6:3e:5e:58:a2:d9:0d:66:32:
         87:4a:0f:0a:2a:af:cc:a2:66:1e:77:e3:90:f0:3c:4c:f5:27:
         fe:64:a8:3c:54:b6:d8:bd:de:c5:a7:05:6e:c1:b5:a9:b1:10:
         63:75:97:61:ad:2f:ee:83:9a:43:3d:a5:c9:ec:85:cc:99:25:
         06:e6:ce:13:07:a6:40:4a:62:09:45:0f:83:1f:e2:6c:f1:9a:
         e1:72:50:7a:7c:7f:13:8f:f3:13:aa:95:da:32:03:3a:fa:b8:
         35:3c:8d:cd:2d:f8:64:95:f2:58:79:9e:44:27:ad:8c:e7:95:
         7f:ca:20:1e:93:32:7d:80:1e:b8:8a:5c:81:06:74:cb:61:15:
         63:2b:dc:de:49:b9:d4:14:a1:f6:08:0d:80:eb:5d:3c:44:ba:
         cd:2a:23:21:c7:25:e5:c7:95:d2:ba:30:7e:42:5e:e9:d5:7b:
         4a:06:c2:0f:25:08:74:0d:a2:91:a8:5a:ff:c9:94:e5:16:81:
         7e:69:97:f0:6c:84:da:62:b0:d7:e2:c2:23:4f:9e:a5:0b:a3:
         df:7b:dc:ed:13:fe:2f:18:68:e3:f7:86:23:6c:91:b4:d9:b9:
         28:24:f3:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:18:26 2026 by rpki-client