Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
File:                     F_XLSRgEUqiWf5wPZjdatwnQ52g.mft (raw, json)
Hash identifier:          oxeb5np1gjIV7SZHO6/BMyOoJcLEwZ07D2DhykY9unM=
Subject key identifier:   41:90:7B:10:13:12:86:B9:D9:4A:05:67:24:16:D1:6D:6F:0D:F0:31
Authority key identifier: 17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68
Certificate issuer:       /CN=A917FD40/serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
Certificate serial:       05B4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
Manifest number:          06BB
Signing time:             Sun 10 May 2026 23:10:19 +0000
Manifest this update:     Sun 10 May 2026 23:10:18 +0000
Manifest next update:     Sun 17 May 2026 23:10:18 +0000
Files and hashes:         1: F_XLSRgEUqiWf5wPZjdatwnQ52g.crl (hash: OTij5mJ7X5CXPx/vdSeUT2QxPT71rGe8zwa7zmp4Eh8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl
                          rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:10:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1460 (0x5b4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917FD40, serialNumber=17F5CB49180452A8967F9C0F66375AB709D0E768
        Validity
            Not Before: May 10 23:10:18 2026 GMT
            Not After : May 17 23:10:18 2026 GMT
        Subject: CN=6a01105b-382a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:27:e2:e3:91:aa:e7:7a:ee:8e:b6:94:86:a1:
                    9b:75:dd:75:74:64:ad:3a:f1:20:7e:37:3e:3b:a2:
                    fb:ba:2f:e0:a6:28:13:2d:6e:78:67:9f:f7:ff:79:
                    ca:56:66:e2:49:15:f4:a8:4f:f4:82:5d:e3:ce:30:
                    e5:18:a8:b5:cd:42:66:c9:88:87:f7:ac:79:0d:c9:
                    88:45:84:a3:eb:35:4a:3f:c7:bd:30:53:99:0a:4b:
                    82:e3:6e:5b:60:7c:fe:da:9f:f2:13:6d:4d:58:b2:
                    78:3e:aa:8c:1d:c8:b4:6c:52:ed:7c:15:25:40:20:
                    78:69:c5:03:8d:22:63:d8:a8:f0:77:c7:34:0b:b2:
                    15:14:22:37:c8:33:17:79:40:e3:08:6d:00:76:a3:
                    e0:b2:70:f6:cf:01:66:71:40:36:09:3f:54:c8:ff:
                    79:8d:3b:25:ca:f1:5d:c5:e1:f5:26:76:89:ff:6a:
                    a9:da:c8:42:2f:9c:07:58:8a:ef:7c:b5:44:eb:4a:
                    1f:17:d8:b8:77:fb:5b:7d:bd:89:dc:34:d6:70:c1:
                    ad:77:83:fc:51:a6:69:9c:4f:26:84:dc:da:17:a2:
                    7d:d8:52:88:8b:43:36:bb:53:fb:fc:a3:16:9c:64:
                    05:da:dd:24:00:8a:b4:11:38:d2:75:86:0d:05:cf:
                    50:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:90:7B:10:13:12:86:B9:D9:4A:05:67:24:16:D1:6D:6F:0D:F0:31
            X509v3 Authority Key Identifier:
                keyid:17:F5:CB:49:18:04:52:A8:96:7F:9C:0F:66:37:5A:B7:09:D0:E7:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_XLSRgEUqiWf5wPZjdatwnQ52g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917FD40/FC21955E0BD611EC8F99D063C4F9AE02/F_XLSRgEUqiWf5wPZjdatwnQ52g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:42:c3:2c:30:87:d2:9e:36:e8:50:b6:25:65:63:02:ac:cf:
         c0:83:22:30:44:57:81:74:ad:2a:10:5d:0b:3d:d6:ed:35:16:
         06:c2:32:ae:89:53:5c:04:a1:d5:e2:4b:ee:61:5f:56:58:2a:
         19:42:9a:9e:d6:96:e7:a2:9a:07:03:1e:7f:ce:ad:da:d4:7c:
         f9:4c:93:8f:fd:f9:a1:33:72:5c:41:de:0b:c9:cd:26:d3:e9:
         2c:97:3e:a2:a0:a2:e1:73:cb:b3:92:d5:ca:82:84:1b:e5:41:
         2b:96:8d:f1:fd:aa:50:a8:a2:ba:7d:29:e1:e7:7c:a0:14:4d:
         e2:5b:b3:c8:9c:31:5f:b9:2f:64:b2:0a:7a:dd:43:b8:ed:86:
         bb:d3:8b:d5:d9:b1:6c:a9:a5:fc:30:76:dd:42:97:5b:1c:6a:
         d3:d9:9e:3f:bf:c6:43:29:28:3d:79:48:70:be:0a:3b:ca:d0:
         ce:af:b6:a3:e1:83:c1:73:7a:70:07:b6:96:91:1f:4c:61:2d:
         24:b5:73:fc:3e:ae:1f:b7:cb:cf:c7:98:4f:18:ee:eb:8a:e4:
         4e:b5:24:d6:33:8f:09:83:28:ab:da:62:dd:1f:77:ec:82:ec:
         6d:69:f7:d7:16:4e:fd:39:ff:bf:3a:cd:9a:37:4b:0f:57:42:
         da:4a:3c:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:03:08 2026 by rpki-client