Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
File:                     fR7WtlFJDavaqEvZL81C5VPubHA.mft (raw, json)
Hash identifier:          124Rc4Oih3VqL0HL5t6gU6nSWGnsmqC1/7q2MvW32SQ=
Subject key identifier:   4B:5D:A5:45:90:8B:3E:E7:61:78:26:CC:6F:58:30:DF:17:6F:F4:CC
Authority key identifier: 7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70
Certificate issuer:       /CN=A91B8C6C/serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70
Certificate serial:       3537
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
Manifest number:          3537
Signing time:             Tue 12 May 2026 15:07:57 +0000
Manifest this update:     Tue 12 May 2026 15:07:57 +0000
Manifest next update:     Tue 19 May 2026 15:07:57 +0000
Files and hashes:         1: fR7WtlFJDavaqEvZL81C5VPubHA.crl (hash: 8UrZ39n/ZzuIARhKUJxQ2tfDXKfSJa02/rZ5gsGdesU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl
                          rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:07:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13623 (0x3537)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B8C6C, serialNumber=7D1ED6B651490DABDAA84BD92FCD42E553EE6C70
        Validity
            Not Before: May 12 15:07:57 2026 GMT
            Not After : May 19 15:07:57 2026 GMT
        Subject: CN=6a03424d-f99d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fd:36:e8:72:9d:57:fe:fd:39:b1:9b:83:dc:
                    26:1b:db:8e:05:07:09:35:79:1c:9d:f1:01:19:09:
                    68:66:7a:b3:3e:2f:60:da:0c:7f:8b:4b:ec:cf:6d:
                    2a:c5:c8:5c:78:aa:04:ab:39:22:8c:0c:43:4d:10:
                    69:4b:b6:2c:49:7e:20:81:cb:9b:25:93:b3:55:1d:
                    b7:e0:2b:c5:1d:15:b3:bc:49:c3:b0:0d:29:9a:36:
                    98:15:2a:51:4b:31:f6:d9:89:8b:55:45:24:40:60:
                    fb:f0:4b:d4:da:6a:0c:27:4c:fb:f8:6a:b7:e3:da:
                    04:3a:62:02:ca:0d:a8:20:61:0f:b6:b0:53:5d:6a:
                    5f:13:76:3e:e5:9b:7a:74:63:db:72:71:b9:9f:f5:
                    58:f7:f8:80:99:da:e8:d5:f4:95:a0:64:4e:a4:c9:
                    79:08:d5:7f:06:a0:c2:41:fa:29:e6:2b:75:4c:28:
                    31:29:dc:13:d6:73:37:07:ae:9a:a4:c4:4f:43:fb:
                    3d:da:b4:16:3c:01:5a:d6:b5:93:7f:c5:48:7c:17:
                    8f:56:81:fd:2c:71:f0:b7:35:d0:9a:3a:e1:2f:45:
                    c5:bb:3a:2f:11:ef:4f:c7:f2:b4:1a:dc:92:a6:5c:
                    a4:7d:87:e0:ad:d8:e5:51:3a:4e:3b:8a:cd:2d:92:
                    85:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5D:A5:45:90:8B:3E:E7:61:78:26:CC:6F:58:30:DF:17:6F:F4:CC
            X509v3 Authority Key Identifier:
                keyid:7D:1E:D6:B6:51:49:0D:AB:DA:A8:4B:D9:2F:CD:42:E5:53:EE:6C:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fR7WtlFJDavaqEvZL81C5VPubHA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B8C6C/C148D1CA1DA311E28E1A3E9908B02CD2/fR7WtlFJDavaqEvZL81C5VPubHA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         01:dc:4a:c4:67:ea:b4:82:0c:47:d3:25:d7:0b:8c:7a:e2:dc:
         13:5d:0b:b6:25:64:d5:21:ce:fb:7b:41:9b:6e:11:a6:7b:8b:
         39:30:c4:2e:7a:bf:ec:d2:f5:de:db:ef:ed:58:6f:d4:11:e7:
         49:42:17:1a:9d:92:6e:da:a3:4a:97:a7:bd:f3:f0:86:41:53:
         7e:49:1e:96:de:f7:77:06:7b:9b:36:e2:92:52:bb:97:ca:6d:
         71:5b:61:77:cb:4b:a1:23:9d:6b:82:a3:58:14:52:70:67:d0:
         69:71:fa:3b:13:90:71:7b:2d:ef:05:06:a4:cd:7d:06:d0:37:
         9b:3d:8f:ee:7a:57:c5:3d:fb:c6:d0:ab:a9:8d:db:d5:8d:24:
         6b:0e:06:67:50:ec:d3:9b:0a:39:fe:15:61:36:80:03:ff:70:
         97:ec:9d:a2:3a:03:e4:dd:34:69:e1:cd:4f:a6:37:51:a7:4e:
         b6:78:78:c3:15:69:21:44:1d:85:b6:b5:aa:4c:2d:9f:cc:cb:
         77:4c:3e:9f:d0:3e:d2:16:4d:90:35:1b:0a:64:3b:8d:d1:e3:
         f8:07:84:7a:ac:0a:58:00:66:71:2e:83:48:17:62:08:04:60:
         20:11:1c:b9:fc:e1:49:12:15:82:50:b3:52:b9:28:68:d9:c9:
         07:72:3c:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:24:11 2026 by rpki-client