Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
File:                     X3A2SNc_YGlFARjbom-WaC1a5so.mft (raw, json)
Hash identifier:          94gDloRihidr1eRNqkmcIL0BGWzpEC3l8A6hJ3Qc6Nc=
Subject key identifier:   FA:D0:18:C0:67:41:54:50:3A:41:11:29:D8:94:56:28:76:A7:76:F7
Authority key identifier: 5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA
Certificate issuer:       /CN=A91508BB/serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
Certificate serial:       353A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
Manifest number:          353A
Signing time:             Tue 12 May 2026 14:38:28 +0000
Manifest this update:     Tue 12 May 2026 14:38:27 +0000
Manifest next update:     Tue 19 May 2026 14:38:27 +0000
Files and hashes:         1: X3A2SNc_YGlFARjbom-WaC1a5so.crl (hash: sMcAnwE4iHFsgOm8pLKuZz1tLbrynGxxt9FIYwhXzwo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl
                          rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:38:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13626 (0x353a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91508BB, serialNumber=5F703648D73F6069450118DBA26F96682D5AE6CA
        Validity
            Not Before: May 12 14:38:27 2026 GMT
            Not After : May 19 14:38:27 2026 GMT
        Subject: CN=6a033b64-e1fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:d7:56:42:8b:b2:4b:49:0c:e3:8a:ed:b6:61:
                    0b:ba:4d:44:b4:8c:88:1e:aa:80:0f:96:7b:64:a7:
                    3d:40:10:68:f8:b6:d7:a0:74:39:8d:f5:0d:fd:d4:
                    a8:42:36:91:24:c0:53:f0:3c:b3:69:52:72:06:88:
                    da:59:e9:fb:c7:67:2d:d2:e7:d2:94:0d:e9:b5:cb:
                    66:41:ab:b2:27:d1:bf:de:9c:c4:23:d3:4c:d4:b8:
                    74:7e:98:56:2d:7a:ba:28:3e:dc:e9:d7:a2:62:7f:
                    5e:b7:d5:b9:c5:f7:9d:59:3d:a4:a6:0f:63:e3:cf:
                    77:ca:0a:80:c6:11:75:f7:3a:4d:1f:76:fc:75:38:
                    d0:37:f9:95:fb:dd:51:6f:23:1d:5c:26:33:22:30:
                    49:94:6c:94:ce:9e:d0:ad:c5:45:4b:49:9c:e8:ba:
                    69:21:37:ee:92:ea:84:6b:a1:e5:7f:6d:6b:94:0c:
                    4b:ce:98:7e:37:98:10:af:89:82:78:81:5c:0e:6c:
                    57:cf:61:e8:d2:f4:d2:b1:5e:a3:03:20:ab:d7:84:
                    23:85:b8:19:28:60:a9:d6:f5:89:82:10:bb:ac:92:
                    20:01:c5:43:15:d2:f2:e3:ad:30:e2:f4:98:35:ca:
                    45:94:74:c6:06:80:e2:95:28:f9:aa:1b:eb:bd:af:
                    64:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D0:18:C0:67:41:54:50:3A:41:11:29:D8:94:56:28:76:A7:76:F7
            X509v3 Authority Key Identifier:
                keyid:5F:70:36:48:D7:3F:60:69:45:01:18:DB:A2:6F:96:68:2D:5A:E6:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/X3A2SNc_YGlFARjbom-WaC1a5so.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91508BB/5A0D95881D8D11E2A9D607EB08B02CD2/X3A2SNc_YGlFARjbom-WaC1a5so.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:00:62:51:9e:bf:a6:01:6e:57:1b:05:56:d2:96:99:3f:65:
         f3:d7:df:91:17:2e:36:35:07:0a:ee:e8:9b:15:8e:e3:31:83:
         c0:f2:59:39:95:61:16:c4:3e:c4:83:1a:4f:9f:37:31:f9:f5:
         53:3e:6a:0b:f2:4f:9e:b7:0f:1c:ab:a4:05:27:fa:68:67:d9:
         49:bd:59:d9:08:42:1c:ab:6a:dd:56:69:71:86:73:79:fa:4f:
         6b:78:7d:c0:90:e4:af:fb:55:04:d4:7c:43:d7:d1:f5:f8:f6:
         8d:ca:67:b4:94:22:2d:ef:1e:ec:06:06:a3:26:53:17:67:f6:
         bc:d5:70:3c:7b:95:87:d2:e3:13:1c:51:aa:88:58:d3:5b:89:
         fd:3d:10:fc:0e:00:8e:52:d7:96:89:b8:78:4e:5b:71:70:28:
         ea:89:d6:42:d7:04:df:07:3c:fc:c0:23:ef:10:48:50:f0:85:
         07:b1:e7:68:35:d6:38:4f:2a:b6:ed:13:a7:0e:6f:5b:0b:54:
         7c:d0:59:a8:43:e7:c3:b6:e3:81:36:e3:89:f4:1c:1b:d5:3b:
         56:7c:9f:20:24:4f:34:49:3e:94:dc:c6:72:58:4d:9f:38:ac:
         0d:82:72:11:25:5f:19:2e:43:a7:96:f9:a4:e1:38:cb:c5:24:
         77:82:5b:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:25 2026 by rpki-client