Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
File:                     pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft (raw, json)
Hash identifier:          DXmeUKT2aNcQZF1I/+w6ZhYzRhr1DHLHXnVBxkOe7n8=
Subject key identifier:   C4:56:A3:F2:1C:C3:5D:93:02:CD:A4:17:7B:07:A8:71:B8:A3:A7:03
Authority key identifier: A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D
Certificate issuer:       /CN=A91D1E4C/serialNumber=A59D836E1C31623CC586448AA752B746853B841D
Certificate serial:       08C7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
Manifest number:          0C61
Signing time:             Tue 12 May 2026 20:27:53 +0000
Manifest this update:     Tue 12 May 2026 20:27:52 +0000
Manifest next update:     Tue 19 May 2026 20:27:52 +0000
Files and hashes:         1: pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl (hash: L0dC4m4Gmkqk3nKcMsz4AdhCqTD60cM+E3mMxq6Dj9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl
                          rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:27:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2247 (0x8c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D1E4C, serialNumber=A59D836E1C31623CC586448AA752B746853B841D
        Validity
            Not Before: May 12 20:27:52 2026 GMT
            Not After : May 19 20:27:52 2026 GMT
        Subject: CN=6a038d49-19bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:0a:50:d9:fa:73:4b:b1:63:e6:a2:6f:85:ce:
                    7c:d8:0c:b5:0d:09:f7:2b:ee:00:5c:87:e5:56:2e:
                    05:dd:60:84:20:0a:76:1e:06:68:fb:9d:3d:c9:10:
                    30:22:30:59:40:32:d5:67:ed:32:3e:a8:d0:52:4d:
                    76:05:4b:84:ba:a0:1a:f7:ba:66:ae:d5:04:41:f8:
                    f5:f0:fc:d3:89:78:ca:43:15:50:a3:d7:77:99:64:
                    59:81:f9:65:41:54:8d:04:ee:97:94:94:a9:49:f9:
                    b2:87:5f:8c:5b:88:f6:02:bb:f4:86:73:b3:3d:c7:
                    cd:59:50:3a:a1:dd:d8:e6:81:60:8c:0d:11:60:d4:
                    89:60:03:2e:ba:03:8f:b4:30:1d:ed:63:99:59:ea:
                    83:84:f0:b8:39:4e:cb:be:3a:68:28:4f:6e:ed:5a:
                    9f:4b:59:cd:b3:8b:f3:a2:d1:dd:df:f9:1d:b3:01:
                    61:54:21:6b:81:76:3c:43:23:80:58:85:f3:89:1a:
                    df:73:08:13:f6:24:d5:fe:8c:7d:3b:fb:06:32:03:
                    d4:7f:fe:5c:65:ba:c3:de:6e:c6:53:48:79:20:cc:
                    a7:6c:cf:41:9c:46:a5:7b:ee:32:15:05:2d:5f:08:
                    2b:24:76:46:ab:41:84:02:f5:73:ea:23:9d:fe:a5:
                    55:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:56:A3:F2:1C:C3:5D:93:02:CD:A4:17:7B:07:A8:71:B8:A3:A7:03
            X509v3 Authority Key Identifier:
                keyid:A5:9D:83:6E:1C:31:62:3C:C5:86:44:8A:A7:52:B7:46:85:3B:84:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D1E4C/7DADA56CD94D11EAA604AC53C4F9AE02/pZ2DbhwxYjzFhkSKp1K3RoU7hB0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1d:43:a2:2f:4d:05:2c:c8:6b:cf:fd:54:fe:ed:26:a3:9a:8f:
         57:0d:85:f5:7d:e6:c5:c3:2f:e1:91:2c:6b:f5:a8:ff:8b:43:
         26:3d:e9:ff:7c:ee:ff:33:a1:1e:52:35:9e:32:30:3e:66:89:
         c0:62:ce:7b:8d:70:82:2c:17:10:18:6a:71:ae:21:7c:a5:ce:
         56:2b:aa:2f:55:3d:4a:7d:f3:bd:2b:2e:18:ae:02:9e:0e:25:
         53:a1:6f:d4:19:9a:d1:53:64:6c:a6:38:5d:77:98:9c:0b:df:
         2f:49:0f:b0:11:4a:cb:d7:30:26:7c:57:33:8c:c4:a9:1d:11:
         39:f5:63:c6:c9:8f:3b:9b:93:bc:68:09:dd:86:be:d5:78:03:
         d6:35:33:da:82:ca:0a:c5:18:ae:a5:cf:aa:c5:a8:64:d9:ae:
         01:b6:3d:f6:d1:56:a3:b8:88:a8:f2:16:8e:91:f0:b4:c3:89:
         ae:27:d9:c5:b7:4d:fc:68:c7:8b:03:72:49:ef:d2:d3:cb:04:
         c7:98:12:8d:a6:88:c7:7b:cf:2a:0b:dc:1b:ef:8c:f8:e5:4d:
         03:92:ba:11:ab:ea:ba:f0:77:94:ef:22:28:3c:89:b2:19:1e:
         c9:ac:e2:4a:fa:9a:1f:3e:a9:89:3c:02:a4:f4:b0:91:cd:4a:
         0e:c2:95:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:15:46 2026 by rpki-client