Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
File:                     E7pcaYHZl-kImp3nvIorcpwiE2g.mft (raw, json)
Hash identifier:          ojTEWXeDCisMe4ctXvu7zRuhf4NS459eqxu1fSz+nTE=
Subject key identifier:   AC:05:E4:7D:D4:D8:62:13:89:CB:5F:10:9B:29:DC:F6:CB:62:F6:0D
Authority key identifier: 13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68
Certificate issuer:       /CN=A91AE7C5/serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
Certificate serial:       23
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
Manifest number:          23
Signing time:             Wed 13 May 2026 08:58:28 +0000
Manifest this update:     Wed 13 May 2026 08:58:28 +0000
Manifest next update:     Wed 20 May 2026 08:58:28 +0000
Files and hashes:         1: E7pcaYHZl-kImp3nvIorcpwiE2g.crl (hash: pGMUw8/0Zm2AGZDMfSnYtkNavQiMa9lTkRCZ/5BZ80E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl
                          rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:09:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AE7C5, serialNumber=13BA5C6981D997E9089A9DE7BC8A2B729C221368
        Validity
            Not Before: May 13 08:58:28 2026 GMT
            Not After : May 20 08:58:28 2026 GMT
        Subject: CN=6a043d34-c482
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:26:73:18:ed:9c:5e:15:26:39:ef:a2:51:66:
                    8c:e1:a8:0c:4b:54:97:8c:52:3e:bb:a1:b8:f7:02:
                    2d:65:56:59:a9:5e:61:87:e7:2d:d7:7a:bc:8d:32:
                    81:70:73:70:38:3d:e2:64:fa:61:45:a0:3a:6e:f1:
                    dd:9e:b7:ae:ac:d1:ec:81:7e:1f:9b:4d:99:a8:56:
                    b8:84:09:92:60:87:b2:01:21:62:e7:cf:59:f1:d6:
                    92:ca:21:8c:d6:3e:c1:f3:7a:b3:12:7f:d2:71:46:
                    23:4f:d9:6b:6c:1f:dd:17:41:d9:fe:8f:92:2e:77:
                    41:eb:bf:be:7f:99:ce:a2:19:be:cd:0e:40:51:df:
                    fd:df:e9:98:c1:17:87:07:cd:26:53:45:c7:20:43:
                    63:5c:41:b8:95:12:6b:df:4b:d9:8d:0b:92:7f:ef:
                    19:01:74:1f:80:f7:e1:94:87:39:9c:6f:6b:8d:e5:
                    83:7b:8d:16:87:b0:de:1e:8c:9c:dd:60:e3:6b:7c:
                    9c:9d:ac:8a:c0:ab:c0:92:5f:44:50:3c:45:5c:7b:
                    06:ef:10:a0:c5:b2:4c:61:c1:91:a6:ce:3c:20:01:
                    b4:d8:05:21:08:47:db:5a:39:61:60:bf:bd:66:f4:
                    e6:c3:4b:36:9b:f6:f5:dd:fd:0a:89:7e:71:d3:17:
                    da:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:05:E4:7D:D4:D8:62:13:89:CB:5F:10:9B:29:DC:F6:CB:62:F6:0D
            X509v3 Authority Key Identifier:
                keyid:13:BA:5C:69:81:D9:97:E9:08:9A:9D:E7:BC:8A:2B:72:9C:22:13:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/E7pcaYHZl-kImp3nvIorcpwiE2g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AE7C5/17B1FD441B5011F1BD5AD0E8243D8C67/E7pcaYHZl-kImp3nvIorcpwiE2g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:8c:62:42:f0:66:e2:d4:17:77:61:9f:2a:32:51:60:8f:c4:
         43:fa:d5:4f:fa:ac:f7:11:6a:e3:23:12:14:67:ce:df:7a:ce:
         2d:1a:46:4c:e6:55:de:6b:f8:1c:40:4b:0b:d1:c6:f5:cc:e8:
         8f:50:e5:79:9f:07:2e:8c:57:c3:18:a4:70:0e:f3:d5:0c:4b:
         01:3b:9e:d1:ae:28:23:ff:14:2c:37:22:ea:f0:a5:52:df:b9:
         4d:c9:27:56:00:de:7f:d4:28:81:4a:f5:d8:a9:38:f6:ec:3e:
         f8:a1:5e:7c:6d:4a:23:5a:ae:d1:d9:a4:98:77:94:96:e2:f0:
         57:74:a6:01:a6:89:53:4a:52:23:78:a1:57:7f:d3:2a:98:a8:
         dd:ea:58:c9:d6:41:33:4f:39:85:89:34:57:cd:d3:32:73:9d:
         e7:d1:22:2b:b1:cd:27:c8:41:4c:07:0b:20:05:3a:e3:33:c0:
         df:ee:f5:6d:fc:71:55:c7:e2:fb:b9:80:03:9e:da:98:d4:9b:
         26:e9:59:af:21:66:8e:ed:0f:a1:a1:ee:5c:4c:95:c2:c1:a5:
         19:60:a1:19:51:55:5a:3c:62:cf:78:21:c0:4a:60:65:38:9c:
         7c:25:8c:d1:b8:bd:de:ba:47:0e:db:14:ae:13:f2:11:99:05:
         cc:d2:f0:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:45:22 2026 by rpki-client