Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
File:                     nDt48kQmDsRjG6DfYZRgi3Gof0g.mft (raw, json)
Hash identifier:          PkWD/hv0PQtml3rdEmJW5Ymw0eZCK1LFho1K+amnFh8=
Subject key identifier:   93:2C:E5:34:74:43:60:2D:C9:79:01:E4:C0:55:A4:18:2C:BB:9E:D8
Authority key identifier: 9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48
Certificate issuer:       /CN=A91BA0F9/serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
Certificate serial:       3536
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
Manifest number:          5243
Signing time:             Tue 12 May 2026 15:14:50 +0000
Manifest this update:     Tue 12 May 2026 15:14:49 +0000
Manifest next update:     Tue 19 May 2026 15:14:49 +0000
Files and hashes:         1: nDt48kQmDsRjG6DfYZRgi3Gof0g.crl (hash: zLq1aJ0DrvGnZ4turtd6mZV5q3wox9oXx0FfSUBJ0m4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl
                          rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:14:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13622 (0x3536)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA0F9, serialNumber=9C3B78F244260EC4631BA0DF6194608B71A87F48
        Validity
            Not Before: May 12 15:14:49 2026 GMT
            Not After : May 19 15:14:49 2026 GMT
        Subject: CN=6a0343e9-63ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:ef:b8:66:35:44:5c:38:2c:f9:de:51:9e:99:
                    9f:e7:d6:4f:34:6d:2f:90:9e:ec:47:58:73:75:92:
                    f5:02:68:54:ca:f6:5c:62:2c:3f:a6:b7:2e:d3:d7:
                    27:1a:d4:40:82:37:f1:26:9b:e2:96:ce:f7:3c:2a:
                    10:25:b8:51:59:f8:54:28:92:cc:20:d1:5c:71:42:
                    46:54:18:67:de:af:3b:52:ed:6b:ac:40:07:8d:50:
                    4e:9d:7d:75:e5:6b:9a:57:d3:a6:9b:1d:45:ec:bd:
                    dd:8f:b0:af:8d:ea:cb:00:96:2a:80:e3:d1:38:de:
                    94:2b:6a:31:19:60:b4:6c:b2:b9:c9:56:d9:fd:48:
                    31:3c:18:01:0c:95:e6:75:32:b7:25:17:25:c4:47:
                    1d:b5:f2:79:70:5b:b2:8c:6d:66:ea:71:99:44:92:
                    a2:81:41:ca:30:68:45:2d:d5:69:00:93:37:b4:d8:
                    91:8c:c2:14:64:90:3d:a4:9c:0d:ea:9f:fb:14:7f:
                    80:12:cd:4c:5f:91:c7:15:d3:d3:9f:df:cf:72:15:
                    72:86:0d:84:71:be:84:88:81:9d:87:a7:50:45:62:
                    3e:c5:b6:e7:30:02:8d:35:21:22:95:dc:a6:68:02:
                    f5:58:25:07:2c:c7:ea:d3:b9:5e:37:0e:a4:4c:ea:
                    c5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:2C:E5:34:74:43:60:2D:C9:79:01:E4:C0:55:A4:18:2C:BB:9E:D8
            X509v3 Authority Key Identifier:
                keyid:9C:3B:78:F2:44:26:0E:C4:63:1B:A0:DF:61:94:60:8B:71:A8:7F:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nDt48kQmDsRjG6DfYZRgi3Gof0g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA0F9/FCAA2C001DA811E2B0E2CAA308B02CD2/nDt48kQmDsRjG6DfYZRgi3Gof0g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         50:00:df:df:f6:26:c1:fa:33:aa:f8:fd:43:73:38:fe:ed:fb:
         f6:d8:6c:65:b1:5e:f9:f4:bb:4d:fc:bc:c1:3e:72:57:52:36:
         66:7e:56:7e:73:cf:41:73:e4:49:ea:6c:77:a9:59:39:b5:a3:
         ba:b9:d5:7c:80:2a:7b:91:8d:6f:52:5d:6a:05:b6:31:07:08:
         12:6f:47:7f:dc:ae:e6:08:41:ab:a5:5b:2f:35:cf:b1:12:8e:
         27:2e:13:1e:7b:e4:93:f9:a7:d7:9c:84:be:8f:69:51:21:61:
         ca:2f:f8:df:81:92:8b:1e:49:aa:db:b5:91:e2:92:f8:85:d6:
         ac:f1:19:ea:d8:a3:e3:96:91:91:07:78:d9:fd:66:df:45:63:
         d3:8e:4e:24:7b:93:15:cc:f6:d8:81:67:93:26:fe:0f:f2:af:
         62:e8:87:fa:89:20:18:d9:cf:40:17:7c:cd:e7:bb:26:26:3c:
         08:6b:4e:d2:a4:5f:da:42:81:4a:99:3e:8c:5e:d6:56:9e:2a:
         14:3a:6b:da:09:2b:30:99:67:a9:eb:16:3e:89:35:01:3b:f8:
         da:6a:cb:f1:34:23:70:eb:86:c1:3d:7d:ce:8d:85:fa:ad:f9:
         98:44:a3:57:13:fb:6e:05:91:76:05:f0:8b:2b:70:a9:96:9a:
         5a:98:86:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:11:44 2026 by rpki-client