Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
File:                     xlWPj8DY0EKe14fq-We-_HoJ3BM.mft (raw, json)
Hash identifier:          BbPvJsOYloGgsgXcTyDOeZSez0fpAKYsBroSrjLP3LA=
Subject key identifier:   D7:0D:7B:9A:5A:C3:8E:20:CE:97:82:DF:3F:CF:ED:23:BE:3B:48:63
Authority key identifier: C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13
Certificate issuer:       /CN=A91383B0/serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
Certificate serial:       2C5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
Manifest number:          2C5C
Signing time:             Tue 12 May 2026 15:31:57 +0000
Manifest this update:     Tue 12 May 2026 15:31:57 +0000
Manifest next update:     Tue 19 May 2026 15:31:57 +0000
Files and hashes:         1: xlWPj8DY0EKe14fq-We-_HoJ3BM.crl (hash: +8MLSES8W3SzfVqduyt8b5TqP4Fg3BqEUfPLYrvwDD8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl
                          rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:31:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11356 (0x2c5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91383B0, serialNumber=C6558F8FC0D8D0429ED787EAF967BEFC7A09DC13
        Validity
            Not Before: May 12 15:31:57 2026 GMT
            Not After : May 19 15:31:57 2026 GMT
        Subject: CN=6a0347ed-28fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:46:17:3a:65:17:98:03:fc:96:cd:dd:c6:5d:
                    14:46:68:8b:9a:ca:ab:dc:74:be:38:7d:ef:96:32:
                    0c:45:4c:21:2b:7b:61:9f:fc:31:8e:85:b6:f6:dd:
                    d9:6a:80:8c:29:9d:5a:7c:bd:62:57:bc:58:65:44:
                    f5:78:e6:89:6f:f5:3d:3f:ad:1c:47:d4:e4:30:dc:
                    96:27:74:8c:29:1e:5e:ea:83:3c:36:c5:b6:af:41:
                    d7:e2:a1:0e:2f:8a:90:d4:cf:15:62:06:96:5c:45:
                    fa:ca:8b:47:73:a3:09:79:8f:e5:67:90:68:13:17:
                    19:9e:de:75:cc:3b:01:a9:bd:6c:4f:04:e4:73:be:
                    5d:04:ac:77:11:0e:13:63:b0:71:27:4a:e3:a9:ad:
                    c7:a6:a9:36:44:7a:b0:a5:de:82:97:43:32:78:8c:
                    8c:08:fb:b6:c9:15:bd:ba:6e:3d:96:62:1a:92:6d:
                    93:12:a7:c2:1d:9c:84:9b:e3:01:e2:c1:6a:04:92:
                    b3:a0:fe:cb:dc:0c:8c:13:40:c8:e0:68:fe:ba:aa:
                    ea:de:4f:c8:91:f9:ee:d4:6e:02:3b:2e:49:af:c4:
                    be:94:9b:bf:04:94:35:a0:4c:7d:5d:fb:09:34:a2:
                    c9:58:d3:21:db:35:a6:3b:9d:f4:7a:dc:40:49:a0:
                    5a:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:0D:7B:9A:5A:C3:8E:20:CE:97:82:DF:3F:CF:ED:23:BE:3B:48:63
            X509v3 Authority Key Identifier:
                keyid:C6:55:8F:8F:C0:D8:D0:42:9E:D7:87:EA:F9:67:BE:FC:7A:09:DC:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xlWPj8DY0EKe14fq-We-_HoJ3BM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91383B0/484604B2DBC211E38F55144F5911EA32/xlWPj8DY0EKe14fq-We-_HoJ3BM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         68:17:ca:a9:4e:1f:f7:e5:e6:30:23:de:03:29:2d:30:da:f7:
         b1:4d:aa:5a:2c:e5:c9:17:a5:13:93:dc:e8:b0:1d:06:46:98:
         b0:dd:5e:3a:1a:b6:44:16:6d:3f:1a:c0:9d:a2:8d:a5:2c:7f:
         c6:bd:e9:16:6b:55:b9:60:9d:61:7c:7f:20:8a:da:08:34:58:
         47:f5:49:d6:a2:2e:f6:18:ec:88:70:65:03:6b:7a:3f:c5:83:
         e0:17:94:af:a0:c0:68:8f:c9:f5:ed:f4:b8:1c:1a:28:ac:c8:
         20:d5:4f:66:f8:9e:f1:99:8c:af:2f:a1:62:bf:93:c7:45:97:
         e0:21:3d:fd:26:85:8f:eb:4b:0a:99:a3:3f:fd:85:89:ff:63:
         de:b4:a8:f1:e3:5a:14:6e:56:1e:5f:19:96:f7:6b:7a:73:dd:
         36:42:ec:f1:aa:c5:b5:9c:68:9a:a1:e6:e1:14:36:13:2d:ab:
         af:77:e9:82:c4:65:5c:62:ca:e1:fc:cb:0f:a7:1b:be:3e:b2:
         8d:b5:cb:1a:23:73:fa:45:02:8f:0c:c6:0c:b4:86:33:c8:b1:
         95:1f:7c:36:73:89:d6:cb:62:e1:04:8f:94:40:87:2d:fb:25:
         47:07:5c:f4:bf:d2:af:f9:12:01:5f:f7:85:72:e3:c8:77:dd:
         49:af:20:d3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICLFwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzgzQjAxMTAvBgNVBAUTKEM2NTU4RjhGQzBEOEQwNDI5RUQ3ODdFQUY5NjdCRUZD
N0EwOURDMTMwHhcNMjYwNTEyMTUzMTU3WhcNMjYwNTE5MTUzMTU3WjAYMRYwFAYD
VQQDEw02YTAzNDdlZC0yOGZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqkYXOmUXmAP8ls3dxl0URmiLmsqr3HS+OH3vljIMRUwhK3thn/wxjoW29t3Z
aoCMKZ1afL1iV7xYZUT1eOaJb/U9P60cR9TkMNyWJ3SMKR5e6oM8NsW2r0HX4qEO
L4qQ1M8VYgaWXEX6yotHc6MJeY/lZ5BoExcZnt51zDsBqb1sTwTkc75dBKx3EQ4T
Y7BxJ0rjqa3Hpqk2RHqwpd6Cl0MyeIyMCPu2yRW9um49lmIakm2TEqfCHZyEm+MB
4sFqBJKzoP7L3AyME0DI4Gj+uqrq3k/Ikfnu1G4COy5Jr8S+lJu/BJQ1oEx9XfsJ
NKLJWNMh2zWmO530etxASaBanQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNcNe5pa
w44gzpeC3z/P7SO+O0hjMB8GA1UdIwQYMBaAFMZVj4/A2NBCnteH6vlnvvx6CdwT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzODNCMC80ODQ2MDRCMkRC
QzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBFS2UxNGZxLVdlLV9Ib0oz
Qk0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hsV1BqOERZMEVLZTE0ZnEtV2UtX0hvSjNCTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
ODNCMC80ODQ2MDRCMkRCQzIxMUUzOEY1NTE0NEY1OTExRUEzMi94bFdQajhEWTBF
S2UxNGZxLVdlLV9Ib0ozQk0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAaBfKqU4f9+XmMCPeAyktMNr3sU2qWizlyRelE5Pc6LAdBkaYsN1eOhq2RBZt
PxrAnaKNpSx/xr3pFmtVuWCdYXx/IIraCDRYR/VJ1qIu9hjsiHBlA2t6P8WD4BeU
r6DAaI/J9e30uBwaKKzIINVPZvie8ZmMry+hYr+Tx0WX4CE9/SaFj+tLCpmjP/2F
if9j3rSo8eNaFG5WHl8ZlvdrenPdNkLs8arFtZxomqHm4RQ2Ey2rr3fpgsRlXGLK
4fzLD6cbvj6yjbXLGiNz+kUCjwzGDLSGM8ixlR98NnOJ1sti4QSPlECHLfslRwdc
9L/Sr/kSAV/3hXLjyHfdSa8g0w==
-----END CERTIFICATE-----
Generated at Wed May 13 14:31:08 2026 by rpki-client