Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
File:                     gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft (raw, json)
Hash identifier:          Dn0BxJsgYySLzUeWa15h6UKmtMJBUwAz+45hHyk9cQc=
Subject key identifier:   27:B4:E6:9F:88:AC:99:53:77:ED:B5:F7:AD:8B:EA:8A:7D:E1:0A:CF
Authority key identifier: 82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD
Certificate issuer:       /CN=A91C1C49/serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
Certificate serial:       353E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
Manifest number:          4201
Signing time:             Tue 12 May 2026 15:03:04 +0000
Manifest this update:     Tue 12 May 2026 15:03:03 +0000
Manifest next update:     Tue 19 May 2026 15:03:03 +0000
Files and hashes:         1: gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl (hash: MEigr5kVTRFJwKQ1BYqV8S9taGiubLyJpFylR/hCLcQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl
                          rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:03:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13630 (0x353e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1C49, serialNumber=821F4DB22EE59AFD593A7E689EDA9FC94BE585DD
        Validity
            Not Before: May 12 15:03:03 2026 GMT
            Not After : May 19 15:03:03 2026 GMT
        Subject: CN=6a034127-57ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:8f:c8:83:ac:76:09:4d:6e:20:2f:28:6f:70:
                    e0:d7:37:91:bc:50:ac:59:53:9d:f8:f9:e2:64:52:
                    74:7c:04:80:f9:57:2e:41:c3:75:96:d3:8a:05:77:
                    c2:0a:a5:a0:e8:61:65:f2:37:1a:dc:52:c7:68:5a:
                    6d:76:07:8a:95:78:a8:7c:72:7e:85:f8:82:a5:0e:
                    39:bd:5f:b2:53:ee:64:1f:63:ea:ba:52:57:e8:80:
                    95:38:10:6a:c7:a8:21:bf:22:f0:d3:b6:c9:1d:85:
                    2a:84:b4:45:53:03:df:1f:e8:a5:11:15:b7:e3:51:
                    7b:5b:f1:2c:30:53:f2:1c:b4:99:05:31:ce:97:45:
                    53:74:7a:03:96:c2:4e:fb:ea:d0:2c:bd:e1:9a:30:
                    d0:6f:a6:1a:70:36:cb:c6:ad:b9:76:d9:ac:4a:3c:
                    8c:7d:f7:4d:c2:2c:6b:2b:86:79:74:d8:83:9f:7a:
                    0b:e9:88:52:0c:6f:40:09:80:d5:b9:cb:27:22:61:
                    dd:d2:5e:01:18:b3:9c:76:a0:15:6f:c3:20:88:92:
                    1b:e6:ae:94:99:36:6d:39:31:6c:af:fe:84:09:d4:
                    a8:fe:d7:71:a7:ec:f3:25:1c:bc:38:fa:e7:35:c2:
                    6d:00:a7:67:c0:94:6e:7f:fd:d4:6d:17:ef:f5:cc:
                    ab:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B4:E6:9F:88:AC:99:53:77:ED:B5:F7:AD:8B:EA:8A:7D:E1:0A:CF
            X509v3 Authority Key Identifier:
                keyid:82:1F:4D:B2:2E:E5:9A:FD:59:3A:7E:68:9E:DA:9F:C9:4B:E5:85:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1C49/C49F75F81D9F11E29EFBA29008B02CD2/gh9Nsi7lmv1ZOn5ontqfyUvlhd0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:ca:24:13:49:7d:b1:dd:9b:20:ec:f1:19:20:f3:27:ec:b4:
         58:d3:ac:de:d4:25:49:c4:62:1d:ab:84:34:5f:e7:81:79:a1:
         8e:73:3a:b5:74:d9:94:06:71:2b:3d:69:8e:ae:6d:81:57:55:
         10:0c:74:f7:b8:08:be:9d:54:39:0d:1a:3b:14:6c:f4:6d:8c:
         83:7d:e9:d4:13:6d:25:1b:69:86:35:22:cc:c3:29:24:f6:da:
         42:95:14:d0:32:0d:26:5c:95:64:f4:ae:f5:2a:eb:65:2d:0a:
         d3:a8:fd:72:81:e8:e1:32:ba:22:94:3f:eb:9a:e3:8f:c0:a3:
         e5:ea:76:73:38:3f:44:23:c5:45:e6:15:e4:0b:78:ad:ec:3a:
         08:79:f3:8d:70:c1:5b:2e:33:d3:47:8b:9d:30:4d:52:2d:74:
         63:46:40:67:69:aa:e6:ec:17:c1:95:db:42:61:05:c4:dc:fe:
         e0:92:01:87:fd:65:39:a9:36:f9:87:93:38:c5:e1:a3:35:97:
         93:49:7d:4d:2c:a8:0f:a3:c8:14:44:46:ac:c3:56:64:2a:14:
         98:04:dd:ca:5a:60:f8:02:ac:76:a7:a8:5e:ec:44:62:8d:39:
         b4:97:44:e4:4b:96:fc:cc:16:3d:f5:61:de:10:dd:22:b8:bb:
         0b:8d:89:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:27:50 2026 by rpki-client