Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
File:                     XOvYaFsXSV2z4edFmXn-hPBDg_I.mft (raw, json)
Hash identifier:          xTqNVbIqnaAz23RGrFn7aOjysKnRRqSs0IfAc/yFGU8=
Subject key identifier:   88:B8:BA:74:9E:30:0A:0D:A7:0A:0A:5F:8F:A1:AA:ED:7E:34:75:D1
Authority key identifier: 5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2
Certificate issuer:       /CN=A917C716/serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
Certificate serial:       017C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
Manifest number:          054B
Signing time:             Wed 13 May 2026 01:17:31 +0000
Manifest this update:     Wed 13 May 2026 01:17:30 +0000
Manifest next update:     Wed 20 May 2026 01:17:30 +0000
Files and hashes:         1: XOvYaFsXSV2z4edFmXn-hPBDg_I.crl (hash: cYZlkLFns62coZ0BJ8ncThjtXtY6OOBoRvk/8oPHnAs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl
                          rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:17:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 380 (0x17c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C716, serialNumber=5CEBD8685B17495DB3E1E7459979FE84F04383F2
        Validity
            Not Before: May 13 01:17:30 2026 GMT
            Not After : May 20 01:17:30 2026 GMT
        Subject: CN=6a03d12a-9cd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:f4:4c:50:48:ac:66:33:51:b9:53:4e:49:49:
                    4e:6c:80:80:fc:c5:df:01:fd:d6:bf:8f:6a:56:1f:
                    6f:81:bb:94:39:6d:64:11:2a:33:fc:e9:23:de:56:
                    5e:7f:9e:23:2d:b8:0f:b4:16:44:97:23:12:73:f9:
                    a5:2b:d9:55:91:be:af:b3:6f:1b:09:a2:ce:94:a5:
                    f7:64:96:47:c3:54:d1:e1:ca:a3:8b:f9:60:63:47:
                    7f:bc:b0:86:98:70:eb:2b:4c:1a:05:8f:2d:ea:ef:
                    6f:68:1c:f8:59:f8:94:38:bd:45:b5:d4:66:5b:41:
                    a1:7b:23:59:0a:e8:89:86:af:1f:0b:fb:f8:c3:26:
                    0b:ac:29:15:e9:f3:75:18:f7:a8:7c:d1:b6:ce:de:
                    91:51:cc:a2:20:04:0c:60:e5:8b:35:69:6c:7d:4e:
                    88:bf:6e:16:37:dc:36:24:09:e9:f9:65:66:51:48:
                    0e:a8:ef:47:7c:1a:b7:af:7c:f9:dc:04:a4:c3:a5:
                    9f:d2:fd:0c:bc:fc:0b:79:29:9a:01:0f:04:45:30:
                    fa:ac:31:c4:28:34:75:6d:9e:33:7f:47:2f:d4:2e:
                    26:5a:a4:d9:79:8a:68:3d:34:4d:74:17:df:e8:70:
                    9d:09:10:83:88:8e:5e:3b:7e:9e:a2:3e:cb:2d:d5:
                    f4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:B8:BA:74:9E:30:0A:0D:A7:0A:0A:5F:8F:A1:AA:ED:7E:34:75:D1
            X509v3 Authority Key Identifier:
                keyid:5C:EB:D8:68:5B:17:49:5D:B3:E1:E7:45:99:79:FE:84:F0:43:83:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XOvYaFsXSV2z4edFmXn-hPBDg_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C716/4DB9CAC4140211EDB9663415C4F9AE02/XOvYaFsXSV2z4edFmXn-hPBDg_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         80:9d:35:e5:11:3a:96:1d:73:b3:53:d2:58:a7:52:8e:69:cb:
         5c:ad:95:f0:1e:ad:db:70:2c:d7:68:38:c7:93:0b:c1:e1:f9:
         61:47:1e:f4:f7:36:7d:1a:a9:71:dc:b5:f1:57:ff:40:5c:0c:
         d9:46:8c:b8:c5:1c:fd:89:fd:d9:e4:c7:a8:68:16:69:37:47:
         e9:7f:74:7a:76:15:e9:c1:46:27:b8:e0:c4:ef:51:09:95:35:
         2c:e2:cd:07:9f:d2:c2:69:73:d7:2b:8f:1e:9b:1b:1f:be:a8:
         c7:83:d8:e4:f8:77:0d:f0:6f:6f:d4:65:46:6d:4a:97:b7:08:
         06:b0:88:ea:72:28:8d:e3:67:ea:7f:1e:58:a6:bc:d1:4b:7b:
         3b:c1:bf:5d:a1:95:1a:91:8b:45:18:b0:ba:41:cf:e0:6e:9e:
         91:c3:d4:41:c3:60:cf:c7:b8:bc:e7:ed:52:d8:dc:75:b6:85:
         66:3b:16:d4:f0:19:c0:c7:a7:78:93:2c:45:dc:be:24:dc:2f:
         a5:6c:22:2a:53:21:e2:26:b9:7c:5a:00:7e:f2:4c:ac:e1:1f:
         f8:79:21:0d:2f:4d:44:87:ea:ed:f0:0d:df:8e:54:dd:51:37:
         38:b7:bb:6c:0d:2f:e1:bd:de:26:a7:e7:4c:00:16:2b:f9:ae:
         ad:2a:48:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:15 2026 by rpki-client