Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
File:                     1OdEGcvjVoAT4bz3doRyhsGYhFo.mft (raw, json)
Hash identifier:          2f6UEQMTMiy9IewQx/hj8rIKh7dq+OOI+uQAZUbYQaU=
Subject key identifier:   59:51:11:6F:A8:7A:AB:AE:3E:79:EC:5A:87:8B:64:09:2A:A3:29:B2
Authority key identifier: D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A
Certificate issuer:       /CN=A91A547E/serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
Certificate serial:       09
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
Manifest number:          09
Signing time:             Mon 11 May 2026 09:20:45 +0000
Manifest this update:     Mon 11 May 2026 09:20:45 +0000
Manifest next update:     Mon 18 May 2026 09:20:45 +0000
Files and hashes:         1: 1OdEGcvjVoAT4bz3doRyhsGYhFo.crl (hash: myIhRzo+/sBQA6iYGOmXkoclb1DiIcEF6teUG1chVJI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl
                          rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:20:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A547E, serialNumber=D4E74419CBE3568013E1BCF776847286C198845A
        Validity
            Not Before: May 11 09:20:45 2026 GMT
            Not After : May 18 09:20:45 2026 GMT
        Subject: CN=6a019f6d-d7ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:90:b1:94:9e:4e:bb:8d:97:d6:6d:25:f8:0a:
                    e3:ee:f3:dd:ab:ae:69:bf:60:81:a6:52:9f:f8:49:
                    74:b4:da:ff:85:67:e5:03:5e:3b:c8:c3:42:7a:f1:
                    48:33:a8:9b:93:eb:4d:58:d6:4f:92:69:0d:46:e8:
                    1f:01:60:f2:16:83:62:bb:b9:e7:5c:be:60:83:4c:
                    61:09:6f:3c:00:59:73:5c:96:4d:06:4b:b9:7f:48:
                    f2:44:2e:47:99:b7:3b:4f:1a:46:ca:b6:51:6c:0a:
                    9a:92:e8:99:94:a6:9f:af:56:19:25:68:28:2c:91:
                    d4:c0:8e:a6:57:ca:e5:fb:08:8e:37:f6:4b:c7:e5:
                    15:04:8d:44:5a:10:80:1f:84:53:ba:b7:b3:63:35:
                    ac:6a:1d:e0:1f:03:12:e6:f5:a0:dc:f0:cd:81:d6:
                    85:7a:81:b4:d7:a5:f5:62:69:70:5e:00:70:78:34:
                    4d:bc:fd:13:2c:5d:ad:73:d1:e8:d7:02:c2:c1:85:
                    db:cf:63:64:eb:47:60:ad:3e:6c:94:2f:99:b2:e9:
                    33:60:55:7d:00:a5:af:45:2d:9b:9b:41:bc:cf:a3:
                    6c:6c:ee:f0:64:ab:f1:4d:b8:a6:26:7b:60:f7:e9:
                    ec:3c:2a:dd:46:5f:a9:0b:f6:ff:0d:74:71:10:58:
                    0e:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:51:11:6F:A8:7A:AB:AE:3E:79:EC:5A:87:8B:64:09:2A:A3:29:B2
            X509v3 Authority Key Identifier:
                keyid:D4:E7:44:19:CB:E3:56:80:13:E1:BC:F7:76:84:72:86:C1:98:84:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1OdEGcvjVoAT4bz3doRyhsGYhFo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A547E/BCBE4E2241DA11F19DDC8902B5833773/1OdEGcvjVoAT4bz3doRyhsGYhFo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:a5:4c:07:8a:82:ac:38:38:6b:ff:88:b7:c8:f4:0b:6c:33:
         e2:72:d1:ad:0d:0b:8e:25:91:31:95:46:0a:69:a3:78:72:64:
         63:21:04:ef:91:c2:e0:bc:87:84:e6:9e:81:a8:1b:54:4b:8d:
         de:87:6c:80:46:12:b7:64:d4:62:d3:c2:ef:4f:06:3f:21:5e:
         65:ac:87:07:bf:e6:a7:71:79:e1:80:1b:8e:c7:35:3f:8e:17:
         0c:4a:47:e0:24:91:c1:f5:74:45:db:33:d2:07:64:20:e2:95:
         6d:c4:65:4f:76:aa:b9:43:4f:a7:93:74:01:7a:4e:5b:b9:09:
         8a:f9:30:81:61:67:20:91:7a:1a:c5:ce:92:f6:89:35:1f:76:
         7e:b2:1a:57:42:39:af:18:af:fd:34:43:3f:29:b9:fc:20:7d:
         56:84:0d:3c:4d:9b:4b:67:2c:8e:fe:01:7e:02:2a:d5:7a:fa:
         a6:f8:ed:8f:0a:ac:5b:d0:5b:6a:90:4d:9e:da:bd:61:d3:fe:
         68:e1:89:39:1d:a7:db:4f:fe:dc:a5:ab:0c:ab:20:b8:26:ed:
         15:0e:87:df:13:48:94:10:6d:79:62:30:d2:d2:63:6a:22:53:
         f1:b9:c8:eb:d1:2a:a2:53:8c:bc:f2:a2:3d:e9:91:da:1b:bf:
         ec:8f:3c:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:49:35 2026 by rpki-client