Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
File:                     oC73fAXKEwwiKYXNdK6TjaeaT78.mft (raw, json)
Hash identifier:          76XZIFQ132ISCkS+J5iWDUKKRPVjQy4nfUXrOfeedeI=
Subject key identifier:   51:D5:6B:EE:51:80:A1:EC:5E:E5:48:80:A8:26:94:EE:A9:94:F0:3C
Authority key identifier: A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF
Certificate issuer:       /CN=A91398E5/serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
Certificate serial:       09F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
Manifest number:          21B9
Signing time:             Tue 12 May 2026 16:34:04 +0000
Manifest this update:     Tue 12 May 2026 16:34:04 +0000
Manifest next update:     Tue 19 May 2026 16:34:04 +0000
Files and hashes:         1: oC73fAXKEwwiKYXNdK6TjaeaT78.crl (hash: QXEu6xpBCCWZiz8mzxf97+k7AT/sstbUqH4EhFmX6nA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl
                          rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:34:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2548 (0x9f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91398E5, serialNumber=A02EF77C05CA130C222985CD74AE938DA79A4FBF
        Validity
            Not Before: May 12 16:34:04 2026 GMT
            Not After : May 19 16:34:04 2026 GMT
        Subject: CN=6a03567c-6be0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:1e:27:21:9b:25:9e:78:70:e5:14:ad:dd:34:
                    5c:c6:ac:03:9b:8c:12:be:cb:06:69:71:d9:03:a8:
                    18:3d:a8:97:ce:b7:30:3b:48:b3:af:ce:39:ea:f6:
                    d5:94:6c:3d:f5:ad:34:95:79:c1:91:3f:63:5e:33:
                    fc:95:eb:f3:3f:bb:5d:2c:88:c4:e9:5c:6a:11:b0:
                    a0:da:22:8f:09:ad:45:0a:9c:67:79:31:60:6c:14:
                    34:0e:2e:a4:10:f4:0e:f5:cc:68:bc:83:0d:33:1c:
                    cf:bd:de:8f:86:c7:5d:64:0e:01:1c:84:68:ca:09:
                    d1:3e:30:ea:2a:56:c8:0a:1a:54:bf:69:57:68:41:
                    20:ab:2b:18:73:e7:82:66:3d:db:e9:9a:bb:d3:d1:
                    c8:94:07:0f:54:c6:bf:ca:37:ab:56:2a:20:44:59:
                    9a:67:64:60:e2:8c:1a:76:61:a7:66:71:56:c3:4d:
                    54:36:c3:09:d0:a0:f9:12:20:de:fe:3c:85:59:04:
                    d4:76:13:d2:53:ca:37:f1:60:7c:02:a5:ee:45:6e:
                    f1:5c:e0:69:7b:4a:07:d7:d6:ec:ca:3a:51:8a:61:
                    25:76:53:e1:23:ff:2b:37:08:94:26:7a:dd:eb:2b:
                    e5:1a:ce:6c:de:2d:08:73:a6:3c:09:81:aa:be:ad:
                    ef:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:D5:6B:EE:51:80:A1:EC:5E:E5:48:80:A8:26:94:EE:A9:94:F0:3C
            X509v3 Authority Key Identifier:
                keyid:A0:2E:F7:7C:05:CA:13:0C:22:29:85:CD:74:AE:93:8D:A7:9A:4F:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oC73fAXKEwwiKYXNdK6TjaeaT78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91398E5/7840D95EE49111E791BE1869C4F9AE02/oC73fAXKEwwiKYXNdK6TjaeaT78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:7b:e8:93:94:93:a5:38:aa:83:ed:ff:87:56:ee:d5:8d:60:
         3a:14:cc:fc:58:4e:fb:c9:c3:b9:a3:a5:1a:75:35:87:d7:86:
         b9:39:1b:ad:85:a8:22:02:c6:09:e1:63:57:d7:a8:89:69:4e:
         29:10:32:49:73:17:d1:15:69:8f:1b:09:d4:be:ba:e4:af:15:
         68:74:44:a5:3e:d7:7a:75:33:e5:a2:ea:69:1d:49:85:6a:6f:
         ff:52:c4:ec:9d:32:c3:84:ea:84:9b:e4:8a:3b:23:b6:fe:64:
         80:26:cd:c0:d6:11:77:53:a1:73:60:71:f5:56:fe:28:b1:d4:
         77:b8:1a:19:e5:78:03:52:65:ee:53:7f:66:cb:e9:09:e7:1c:
         90:3e:5c:e7:06:de:af:fa:35:39:35:b9:c7:2a:85:0a:a2:40:
         65:3f:ee:38:e8:91:3f:f4:7a:3b:b5:ad:03:41:a1:78:19:41:
         43:91:b6:2d:6a:be:f1:e8:30:af:b6:33:c1:cb:b3:bf:e6:f7:
         cb:ac:2b:cc:92:9e:1c:20:86:68:ad:32:fc:ab:16:fb:3e:3e:
         9b:41:4d:24:3b:a1:8c:c1:74:78:35:ba:dc:a8:f6:db:f3:07:
         54:ba:23:60:6b:9e:01:89:df:02:6c:fa:4f:2c:63:fa:f7:af:
         33:3b:12:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:55:47 2026 by rpki-client