Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
File:                     jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft (raw, json)
Hash identifier:          xPZol1JumnC2q/jqzXTLdB8NeXGhrUIHA724mU8ONNM=
Subject key identifier:   49:6A:27:4F:3D:6A:C4:0D:33:D7:95:99:A1:9F:7A:62:22:18:49:DF
Authority key identifier: 8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48
Certificate issuer:       /CN=A91684D0/serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
Certificate serial:       0290
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
Manifest number:          028F
Signing time:             Wed 13 May 2026 01:44:12 +0000
Manifest this update:     Wed 13 May 2026 01:44:12 +0000
Manifest next update:     Wed 20 May 2026 01:44:12 +0000
Files and hashes:         1: jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl (hash: uFQHIKot+EgilWULtd3ursyJfB1Z8BGMRtFeHK+Ka4E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl
                          rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:44:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 656 (0x290)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91684D0, serialNumber=8CDA084E23D5B7509AA3A92DACA0B1ADC9D9FB48
        Validity
            Not Before: May 13 01:44:12 2026 GMT
            Not After : May 20 01:44:12 2026 GMT
        Subject: CN=6a03d76c-a637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:b1:f1:99:a0:81:a2:a0:22:a8:42:35:63:b9:
                    3c:f4:d0:36:2e:48:05:fb:59:3a:3e:54:af:d9:60:
                    13:37:f8:67:ad:8c:ba:1f:ff:9c:3e:a4:53:d9:3d:
                    54:17:3c:05:5e:b3:c0:d0:af:5b:ce:f7:cc:93:62:
                    ad:f5:b5:3c:3d:09:7b:36:4a:82:95:6b:25:aa:ef:
                    b4:d0:fa:9b:e2:5b:a6:45:36:78:21:e0:41:1c:58:
                    6e:0c:e4:81:64:af:d8:dd:cf:68:b8:81:ab:7e:30:
                    26:d6:76:cc:27:85:da:5b:3e:a1:5f:ce:9d:81:54:
                    bc:ec:3b:8b:78:c0:94:ae:00:cd:aa:96:b4:e3:de:
                    cb:67:4d:5d:18:8d:94:1e:e4:40:5c:23:71:10:40:
                    1b:48:59:20:04:44:71:0d:93:11:e2:45:fd:97:3c:
                    b3:85:2b:27:75:3e:5f:80:48:bd:3f:46:48:e3:79:
                    7b:ae:c1:2e:2c:5e:ef:f8:57:30:ee:ad:79:54:f6:
                    8a:07:26:9d:db:3a:0b:6a:21:57:58:49:13:fe:52:
                    ae:42:c8:a2:5f:2e:fb:ab:1f:3d:5c:5c:e1:46:cb:
                    61:af:d0:5d:58:8f:ea:96:27:af:c8:4d:a8:8e:d5:
                    71:a9:2f:5d:77:d0:0f:ee:7d:e8:f3:cd:0a:d4:94:
                    49:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:6A:27:4F:3D:6A:C4:0D:33:D7:95:99:A1:9F:7A:62:22:18:49:DF
            X509v3 Authority Key Identifier:
                keyid:8C:DA:08:4E:23:D5:B7:50:9A:A3:A9:2D:AC:A0:B1:AD:C9:D9:FB:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/jNoITiPVt1Cao6ktrKCxrcnZ-0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91684D0/DCCD58B65E8F11ED8C996963C4F9AE02/jNoITiPVt1Cao6ktrKCxrcnZ-0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         99:aa:59:29:f8:d4:cc:2f:29:e3:71:57:13:b9:20:9e:51:8a:
         1f:8b:74:3a:a0:3d:b0:1a:b5:8c:c5:4d:f6:9f:3d:fb:52:f2:
         c7:09:be:da:0a:32:39:4c:30:8f:96:39:88:dc:88:b7:a3:b3:
         53:dd:41:98:6d:b0:47:49:44:2c:f1:17:f1:96:4f:bb:f5:ef:
         31:b0:e3:19:e5:32:01:66:d7:26:9e:34:92:22:1c:6d:0d:d8:
         a7:8c:e2:c5:3d:76:1b:69:b1:f4:3b:a1:45:45:1c:a5:3d:85:
         f0:6d:77:1d:ad:78:4d:e6:65:7b:61:7d:b4:e4:23:9a:8f:f3:
         c7:77:15:ab:d6:a7:b0:92:20:5c:63:f2:8a:93:8c:7b:a7:60:
         57:68:e0:3b:e5:b6:aa:f2:3d:dd:53:f4:31:ea:77:8e:44:d2:
         19:a1:88:2a:53:b9:56:79:89:a8:6a:97:bf:81:68:7a:97:24:
         46:86:5a:00:39:66:85:c5:8e:24:d3:56:1f:c8:15:7e:d0:e2:
         dd:ff:90:6f:62:c9:04:39:b3:81:2b:84:f2:78:2b:9d:07:39:
         bf:be:d9:81:ff:ef:5b:de:1d:15:92:b2:f9:64:c6:f0:2d:64:
         9e:91:a6:7d:1c:2b:fc:ae:ce:39:05:59:89:ea:f4:c8:2d:d0:
         50:66:4e:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:12:29 2026 by rpki-client