Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
File:                     d-lG0L0pqiF78bHFrwsxU2wUenE.mft (raw, json)
Hash identifier:          ENWli+aSNQAgv0onT4xM5X0daoegwE5kTFlP0EgguI8=
Subject key identifier:   36:90:EF:A3:E4:61:8A:30:39:9A:1F:B7:BE:C8:F3:C9:91:8D:85:5E
Authority key identifier: 77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71
Certificate issuer:       /CN=A91B352F/serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
Certificate serial:       3543
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
Manifest number:          353D
Signing time:             Tue 12 May 2026 15:16:13 +0000
Manifest this update:     Tue 12 May 2026 15:16:13 +0000
Manifest next update:     Tue 19 May 2026 15:16:13 +0000
Files and hashes:         1: d-lG0L0pqiF78bHFrwsxU2wUenE.crl (hash: XeJoPbp+gowMBT6+oNeZ8opPCZBJ15mcVDaOHDlTaoo=)
                          2: 92BA7F4A69DE11EF8FF0EF50C4F9AE02.roa (hash: xDho51ddKsKnW1mieTz7ANylai7wvJBRqnmFiSl8KPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl
                          rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:16:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13635 (0x3543)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B352F, serialNumber=77E946D0BD29AA217BF1B1C5AF0B31536C147A71
        Validity
            Not Before: May 12 15:16:13 2026 GMT
            Not After : May 19 15:16:13 2026 GMT
        Subject: CN=6a03443d-f109
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:71:4b:3e:8d:0a:b8:1c:b1:5b:83:0d:1b:9b:
                    99:9b:1a:9c:7e:de:c9:16:79:c7:a2:a5:1d:b1:91:
                    5d:e8:45:71:d4:0a:7e:71:d1:9d:6d:ef:f5:71:05:
                    9f:29:44:82:0e:9c:33:46:70:d9:ce:83:df:75:8e:
                    8f:e4:b6:3c:4f:9a:29:24:c0:c5:02:8c:f5:a4:c0:
                    26:0d:2f:3d:30:59:80:59:96:68:13:b5:ee:c6:73:
                    15:d1:20:84:5f:48:9b:89:0c:1a:5a:d2:c8:c7:1e:
                    39:bc:35:85:6d:ed:99:77:85:c7:39:68:da:3e:5a:
                    80:18:e3:45:bb:a6:29:14:15:90:ed:b8:ef:36:56:
                    7b:5e:1a:a0:ef:2d:fb:7e:ad:c7:26:5a:c4:61:80:
                    a6:30:4d:6c:4e:54:66:ae:15:9c:1a:ab:67:f5:8f:
                    ab:69:31:f7:ef:5a:22:f2:f7:1b:4b:f8:1c:67:05:
                    ad:bd:d8:d1:0d:a3:1c:ae:bf:2a:13:9e:f5:cf:f3:
                    7a:61:e3:11:1d:5a:c1:88:7d:bf:47:80:f7:68:bd:
                    29:88:14:19:aa:48:31:0e:88:c3:54:6a:3a:88:5f:
                    b6:1e:16:e2:9e:ca:4a:c9:17:7f:f5:6d:9b:fd:8f:
                    df:d3:23:e0:ec:9a:df:52:1b:f1:2b:c0:be:87:00:
                    28:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:90:EF:A3:E4:61:8A:30:39:9A:1F:B7:BE:C8:F3:C9:91:8D:85:5E
            X509v3 Authority Key Identifier:
                keyid:77:E9:46:D0:BD:29:AA:21:7B:F1:B1:C5:AF:0B:31:53:6C:14:7A:71

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/d-lG0L0pqiF78bHFrwsxU2wUenE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B352F/F6FFE29E1DA911E2A8EF6EA508B02CD2/d-lG0L0pqiF78bHFrwsxU2wUenE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:76:00:05:ec:5a:9b:3f:b9:14:82:16:c8:ed:91:3b:2f:8e:
         fd:ef:b1:70:ad:36:2c:9a:7b:14:96:60:c4:53:b5:14:96:da:
         be:ee:93:95:0c:0e:e5:5c:be:24:0c:21:68:61:63:a0:95:bb:
         8f:82:82:d9:06:62:36:3a:53:f1:0a:01:51:49:73:1c:98:65:
         9e:90:71:2d:c7:c9:c3:f6:47:c3:75:78:cf:b3:ff:f5:b7:28:
         65:6b:6c:b7:8c:0c:65:35:ce:da:f4:30:fd:fd:a1:84:48:8d:
         26:01:c7:bd:0b:f8:5a:8d:4d:d6:d3:32:9d:ee:a7:bd:b6:c1:
         aa:d5:b6:24:e4:67:a3:e7:53:32:c0:7b:62:56:19:a1:e6:66:
         bd:b9:8e:8b:82:a1:1a:0b:57:38:92:b1:90:9f:06:70:40:4e:
         bf:a4:df:fb:6a:c7:1b:ae:10:b2:78:23:49:a1:e3:69:e9:87:
         33:ad:b9:82:fd:07:31:14:ef:84:74:e9:d9:36:88:4f:7e:37:
         6d:ed:f1:f9:f8:4b:56:1e:7d:70:94:2c:0b:85:fd:be:6c:f2:
         e6:d4:45:5e:c5:df:b0:0f:88:6c:67:76:17:a1:43:0b:93:4c:
         60:94:61:d1:4d:24:10:a8:29:6f:72:29:4e:37:9d:be:50:15:
         58:3f:96:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:07:34 2026 by rpki-client