Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
File:                     8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft (raw, json)
Hash identifier:          D31JBtzW3PeDk9H59yhSv1x/crjwWikaAdhdYRovbQg=
Subject key identifier:   00:47:A7:04:4A:97:6C:51:8B:1B:C1:8B:6F:AA:CF:A2:08:02:5B:83
Authority key identifier: F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07
Certificate issuer:       /CN=A91C9916/serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07
Certificate serial:       028E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
Manifest number:          028E
Signing time:             Wed 13 May 2026 01:45:18 +0000
Manifest this update:     Wed 13 May 2026 01:45:18 +0000
Manifest next update:     Wed 20 May 2026 01:45:18 +0000
Files and hashes:         1: 8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl (hash: UjcVRAEAUOBkHM+8rSguFqmGvIYj05jg/NMcTNZBLyU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl
                          rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:45:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 654 (0x28e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C9916, serialNumber=F2E4657FB0B1514273C50EEBF90F4416FDA54B07
        Validity
            Not Before: May 13 01:45:18 2026 GMT
            Not After : May 20 01:45:18 2026 GMT
        Subject: CN=6a03d7ae-f8b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:46:71:f5:a7:e8:9f:18:e2:e0:7b:72:a0:39:
                    d7:86:96:73:40:61:16:17:4e:b9:5a:32:6b:c6:5a:
                    60:1e:f2:f1:a2:be:77:9f:ab:46:4b:3b:18:e3:98:
                    40:c9:cd:09:c3:58:e0:e0:21:0f:3b:6f:51:33:f4:
                    cb:f1:dd:7b:0b:c1:95:b8:19:89:79:54:3f:63:0f:
                    05:bd:92:00:b9:8c:96:ff:8d:d7:19:87:21:53:60:
                    dc:57:4f:af:d1:2d:8b:ef:91:97:3d:f8:aa:ce:f6:
                    af:61:0a:20:d8:9b:29:f5:60:c9:86:4e:de:2a:f8:
                    fd:bb:36:fb:34:64:c1:14:94:cd:56:ce:28:6f:5d:
                    c0:aa:a1:47:00:58:91:8b:7b:cd:3d:eb:19:c0:53:
                    af:29:a6:c1:d5:57:5f:20:b5:f9:23:9d:78:85:fa:
                    f1:af:a7:c2:49:d0:08:11:02:66:0b:fe:03:47:c8:
                    8a:00:00:fd:9f:93:ef:f2:42:4d:6b:f9:43:d4:70:
                    3c:63:2f:f8:68:32:16:b1:a5:34:18:4e:95:82:1c:
                    a4:0c:38:66:6b:9f:8c:16:af:f0:6e:b9:fa:72:8a:
                    19:96:c5:f1:c3:22:00:8a:54:b4:e2:18:c1:95:80:
                    54:32:76:48:30:e9:df:63:e2:e4:4f:8b:71:09:93:
                    48:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:47:A7:04:4A:97:6C:51:8B:1B:C1:8B:6F:AA:CF:A2:08:02:5B:83
            X509v3 Authority Key Identifier:
                keyid:F2:E4:65:7F:B0:B1:51:42:73:C5:0E:EB:F9:0F:44:16:FD:A5:4B:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C9916/239DC426618B11ED88ABBC22C4F9AE02/8uRlf7CxUUJzxQ7r-Q9EFv2lSwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:8d:dd:10:05:90:dc:ea:96:89:80:ed:b8:5b:fb:9b:ff:99:
         64:3b:76:46:d1:bc:fc:bb:5a:8a:5b:14:74:6a:4e:22:b3:57:
         b6:ef:ea:0d:bd:f5:b9:1f:1c:9b:99:7e:c5:cf:4a:45:ca:c3:
         b8:48:a9:1f:ea:f1:59:08:2b:30:98:e1:92:f3:9d:2b:63:ab:
         1d:5c:83:a1:d3:df:38:0e:7f:cc:f3:86:0a:ad:59:93:e9:f1:
         a0:9b:44:d9:3e:f6:50:e1:fc:a6:90:b3:fa:b0:98:b8:8b:ae:
         03:1e:57:9f:af:c7:a1:c1:96:ae:4a:eb:be:71:57:c0:a0:69:
         28:03:22:2a:20:6f:2a:44:4e:bb:8e:56:41:9e:b3:3d:7a:48:
         59:4e:19:e4:f6:f5:99:91:ac:8c:19:ef:ed:68:fa:41:dc:77:
         7b:ac:f0:d8:d7:8a:06:ab:09:a1:18:98:91:2a:f8:1d:8f:88:
         ea:e1:a5:d9:73:3f:e7:82:e8:c1:53:c9:14:f7:4b:6e:20:7d:
         f7:89:aa:83:76:f3:ce:1f:88:54:f3:af:ee:91:ae:52:01:55:
         ae:6b:38:8f:c2:6b:d3:6d:85:c5:7c:9a:26:9b:d7:ee:d0:11:
         84:5a:2e:d8:c4:11:16:4d:e7:01:0e:45:9c:0a:c4:94:26:4a:
         93:b1:03:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:27:18 2026 by rpki-client