Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
File:                     mFJq8YqDozT1eZgqMXm23R6X3i4.mft (raw, json)
Hash identifier:          cH+y+yR0O0m/+FMhdUBLfMzFwr45nkE0nqyh4aX7Z0s=
Subject key identifier:   7C:CB:5A:F0:53:56:75:E3:8A:01:83:CC:AA:C3:10:33:6F:A3:D4:2E
Authority key identifier: 98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E
Certificate issuer:       /CN=A91308CE/serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
Certificate serial:       3538
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
Manifest number:          3538
Signing time:             Tue 12 May 2026 14:54:48 +0000
Manifest this update:     Tue 12 May 2026 14:54:48 +0000
Manifest next update:     Tue 19 May 2026 14:54:48 +0000
Files and hashes:         1: mFJq8YqDozT1eZgqMXm23R6X3i4.crl (hash: xqbmqeznGeghSkykfYgg0udosV+3WjABK6NAxkMlaKY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl
                          rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:54:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13624 (0x3538)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91308CE, serialNumber=98526AF18A83A334F579982A3179B6DD1E97DE2E
        Validity
            Not Before: May 12 14:54:48 2026 GMT
            Not After : May 19 14:54:48 2026 GMT
        Subject: CN=6a033f38-8687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:92:00:8a:8c:2b:4c:a4:01:82:27:f9:e0:0e:
                    4d:66:28:a7:11:00:4f:76:c5:74:73:00:c4:1b:69:
                    e6:dd:97:f2:65:d8:2c:67:13:5a:7f:09:d5:9a:26:
                    a3:fc:99:16:f9:dd:c7:52:c2:27:d0:38:e5:d0:80:
                    82:4e:c3:c3:91:2c:4a:e4:40:b5:24:29:b6:39:eb:
                    a2:16:e5:69:94:8c:fc:0a:5a:56:97:03:24:32:8f:
                    70:65:c8:a9:57:78:ee:29:ab:c9:a6:12:0e:7b:0b:
                    e9:40:58:00:18:45:4e:83:1d:06:bd:df:a2:60:7a:
                    f0:bc:05:40:96:ac:5d:13:5a:63:6c:d6:0e:a5:2d:
                    fb:1f:ea:c7:83:28:0c:ec:c9:ef:ff:1b:3b:20:8b:
                    21:39:af:ce:7d:5b:7e:f9:db:bb:06:26:52:96:f4:
                    20:e5:6a:b1:15:a0:b1:e7:da:65:f2:8a:d6:36:03:
                    3c:12:82:13:2c:d8:93:c7:2e:56:ad:df:1a:b5:64:
                    e7:5a:bf:2c:69:74:d0:66:ee:1f:cb:64:40:c0:2f:
                    eb:dc:4e:90:55:11:b1:4e:fc:8c:31:2b:4f:62:26:
                    28:6e:8f:ee:78:88:ec:dd:7a:f1:aa:9e:a2:f0:06:
                    6f:15:92:77:a8:ec:fb:ea:1e:88:af:e3:67:bd:9f:
                    c1:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:CB:5A:F0:53:56:75:E3:8A:01:83:CC:AA:C3:10:33:6F:A3:D4:2E
            X509v3 Authority Key Identifier:
                keyid:98:52:6A:F1:8A:83:A3:34:F5:79:98:2A:31:79:B6:DD:1E:97:DE:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mFJq8YqDozT1eZgqMXm23R6X3i4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91308CE/257CF7261D9911E2967B9D8308B02CD2/mFJq8YqDozT1eZgqMXm23R6X3i4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:ad:81:d5:a0:48:75:9f:d0:08:3b:13:6d:e5:ef:6e:47:
         b3:6d:2e:35:a7:3b:da:85:b6:91:dc:b7:fa:c3:b5:d8:76:27:
         9b:50:c2:55:6b:da:f7:15:9f:92:a3:c9:2f:4b:2f:86:1c:c7:
         82:e6:e7:17:0a:41:03:78:3e:c8:15:a1:1d:24:18:36:54:57:
         b1:db:72:7f:37:03:c5:c4:65:3c:80:6e:3a:4a:11:b2:1e:cd:
         29:59:40:bd:11:f5:6d:b0:1b:20:d5:a8:ac:f8:8c:36:c0:be:
         97:5d:d0:c3:38:60:8f:07:63:da:6f:f7:9a:5e:90:e6:6b:00:
         0f:b7:e0:f1:6f:0c:79:69:d1:8d:24:85:f0:57:6e:5c:54:15:
         f9:a5:9e:b2:4c:a5:be:0b:6c:40:2e:7c:53:ad:f5:46:09:c0:
         a5:81:b7:91:0e:21:ea:f8:ac:f8:66:fd:e9:f4:f2:1b:78:9b:
         d9:24:4b:97:6d:64:65:ed:97:2d:ab:3c:aa:15:08:44:7d:02:
         29:88:b6:2f:b4:bd:33:74:b4:39:1c:65:1e:18:91:76:d4:5e:
         ba:8b:be:80:4a:c2:70:8c:df:06:ef:f7:b7:0d:26:35:81:82:
         ba:4f:7b:d6:90:26:77:9e:89:6a:70:82:2d:9c:cd:2e:6a:f1:
         63:00:f6:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:00:09 2026 by rpki-client