Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
File:                     -nL57HMUa01gWMiKYGr6AzMOA1E.mft (raw, json)
Hash identifier:          mxrDbGdTbCqz992OZabfaM1TTxl9mno0Kb4ysYCxLmc=
Subject key identifier:   C0:66:F2:D6:57:24:3F:C5:43:3F:7F:F8:21:87:6B:95:5A:6B:90:D6
Authority key identifier: FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51
Certificate issuer:       /CN=A91B2D56/serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
Manifest number:          5A
Signing time:             Mon 11 May 2026 08:13:59 +0000
Manifest this update:     Mon 11 May 2026 08:13:58 +0000
Manifest next update:     Mon 18 May 2026 08:13:58 +0000
Files and hashes:         1: -nL57HMUa01gWMiKYGr6AzMOA1E.crl (hash: XOeXgiyOOEpr3xQwkWpTuHdismJ1xHwwuGcixah+Dxk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:13:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D56, serialNumber=FA72F9EC73146B4D6058C88A606AFA03330E0351
        Validity
            Not Before: May 11 08:13:58 2026 GMT
            Not After : May 18 08:13:58 2026 GMT
        Subject: CN=6a018fc6-5444
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:52:32:37:8e:f1:31:48:d6:c9:ba:eb:c2:73:
                    b0:01:0b:e2:e7:24:8e:80:13:98:3f:35:be:d5:7b:
                    72:d3:f2:d7:1e:d6:fe:3c:22:96:84:18:eb:30:45:
                    93:da:a7:2f:7d:78:6e:c7:fd:ec:ec:62:22:68:78:
                    0e:2e:e6:21:19:ae:a2:90:bd:58:63:14:39:84:63:
                    85:89:8c:77:da:3d:a4:7b:98:8b:a9:31:61:0e:38:
                    7a:c4:00:05:1f:d3:b8:f4:de:fa:6e:e9:45:88:0a:
                    6c:4f:00:f4:25:99:31:32:9a:23:bd:2e:40:89:0a:
                    3a:45:d0:b9:34:a2:0a:15:df:68:c2:56:88:86:43:
                    b6:ba:7c:ca:69:0a:ad:94:c2:cd:dd:b1:50:99:a7:
                    38:0a:00:7b:b4:90:87:5a:cd:d0:ea:04:59:1d:b9:
                    a3:f2:28:d1:47:47:47:d1:bb:9c:5f:ad:4d:63:c0:
                    ac:a3:2a:c1:c4:b8:81:b8:c3:55:ae:56:d1:20:46:
                    01:ae:67:8e:b6:31:24:5d:50:2c:a6:74:4e:08:01:
                    df:90:d1:48:77:f1:f5:d8:8c:b5:5d:58:48:c5:3d:
                    6c:d4:79:0b:83:83:24:d6:30:33:4e:ef:ec:04:12:
                    4b:32:9c:b1:ed:7d:30:45:d9:bb:73:75:45:43:b3:
                    07:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:66:F2:D6:57:24:3F:C5:43:3F:7F:F8:21:87:6B:95:5A:6B:90:D6
            X509v3 Authority Key Identifier:
                keyid:FA:72:F9:EC:73:14:6B:4D:60:58:C8:8A:60:6A:FA:03:33:0E:03:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-nL57HMUa01gWMiKYGr6AzMOA1E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D56/F692367AC52211F095D1B217C4F9AE02/-nL57HMUa01gWMiKYGr6AzMOA1E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:ab:e8:c1:1a:a3:10:b0:e8:ea:7d:d7:fa:bd:67:40:d3:f3:
         50:8a:30:7f:f4:df:50:1f:52:7b:74:8c:1b:87:ec:fc:5e:74:
         70:7f:d7:3f:f3:fc:83:d6:bd:fe:63:ea:df:ae:4c:21:3b:1a:
         21:33:3f:93:08:be:7f:34:39:bb:28:5f:6d:e7:f9:b5:6d:0a:
         82:92:1f:11:d0:b8:77:a1:9d:94:f8:c5:d0:c7:11:d6:6c:13:
         ee:7b:b9:3e:82:76:ab:88:28:ba:0b:7f:9e:51:0b:36:a3:42:
         8e:0c:c2:88:b5:39:5b:c4:0a:9d:1c:de:14:53:4a:12:65:97:
         6a:9d:2f:4b:c0:7b:9d:4f:e5:e6:06:91:9b:bd:8f:62:01:ee:
         91:ae:a8:8a:98:7c:09:06:19:2e:60:56:37:fd:ad:b9:10:4d:
         d4:99:56:db:49:62:c6:3f:4c:51:60:5c:88:e8:87:22:32:34:
         43:ae:58:ad:1a:60:11:5a:8d:94:88:44:33:33:80:d6:82:3b:
         e5:d3:3b:7f:86:b3:b8:9f:df:81:73:f3:c3:ed:1c:da:52:e0:
         0a:73:c3:e8:91:fc:26:4d:de:be:fb:ec:1e:36:59:1d:8e:d6:
         05:44:91:0b:6d:96:27:a3:95:bd:24:83:9e:27:73:fe:e2:38:
         de:fa:86:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:49:19 2026 by rpki-client