Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
File:                     utY-wFoDGPl_MVby4gWcYZPOOAo.mft (raw, json)
Hash identifier:          5s63rRU9HXk6vXPLPlUmsUVf3DUUPEjlQn+DkObgzF4=
Subject key identifier:   46:94:12:CE:77:69:C5:B3:A4:DC:E6:27:EF:C3:5A:30:1D:D4:87:BB
Authority key identifier: BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A
Certificate issuer:       /CN=A91D5A49/serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
Manifest number:          0293
Signing time:             Mon 11 May 2026 01:40:51 +0000
Manifest this update:     Mon 11 May 2026 01:40:51 +0000
Manifest next update:     Mon 18 May 2026 01:40:51 +0000
Files and hashes:         1: utY-wFoDGPl_MVby4gWcYZPOOAo.crl (hash: PbHM7qAlOVotVbW4hnAXVTaxGdxw79TQZLTLoWSEUdI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl
                          rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:40:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5A49, serialNumber=BAD63EC05A0318F97F3156F2E2059C6193CE380A
        Validity
            Not Before: May 11 01:40:51 2026 GMT
            Not After : May 18 01:40:51 2026 GMT
        Subject: CN=6a0133a3-d5a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:83:f1:84:d0:ae:36:43:88:a5:e5:d7:f2:
                    26:b7:e8:1e:fb:14:23:b1:f1:d3:10:30:19:3f:af:
                    a3:ed:a8:67:e3:1e:1b:42:1c:72:f7:0f:19:86:82:
                    0f:ed:98:db:91:d7:db:76:e8:2f:5d:e1:c6:52:dc:
                    f7:88:7c:29:25:12:69:ce:66:5a:31:72:7e:24:e8:
                    2a:b2:4c:5a:55:49:13:c2:56:e7:d8:45:c6:6f:64:
                    f1:cf:eb:52:c8:04:94:5e:5a:b2:8b:76:14:cf:60:
                    54:35:f1:a5:e3:d4:75:9f:f6:c6:65:8c:6e:ff:62:
                    96:af:bd:af:c3:e5:77:8e:0c:6d:55:7c:95:ff:e2:
                    a0:51:28:b5:84:76:e3:c0:27:cb:64:da:7f:58:84:
                    ca:9d:c8:38:da:86:a9:06:53:87:34:7f:95:3b:70:
                    fe:d6:f1:2e:75:3c:ea:18:eb:65:ae:ff:b4:90:40:
                    38:73:c3:e8:4e:f9:87:76:4d:51:e0:18:9e:b2:e8:
                    ec:24:7b:e1:38:d6:ed:58:ba:39:8a:c4:bb:d9:f3:
                    f3:45:46:8c:98:16:87:a5:c6:89:31:4d:53:30:d3:
                    71:d4:e2:9a:65:2c:83:95:41:e2:fe:34:3b:56:b8:
                    c3:44:7e:74:50:9a:9d:75:b5:fe:50:3b:0e:75:b5:
                    a7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:94:12:CE:77:69:C5:B3:A4:DC:E6:27:EF:C3:5A:30:1D:D4:87:BB
            X509v3 Authority Key Identifier:
                keyid:BA:D6:3E:C0:5A:03:18:F9:7F:31:56:F2:E2:05:9C:61:93:CE:38:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/utY-wFoDGPl_MVby4gWcYZPOOAo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5A49/F9131DA658A611EDA2BB2060C4F9AE02/utY-wFoDGPl_MVby4gWcYZPOOAo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:1f:cb:87:b6:cc:31:a8:47:1a:50:23:79:11:e0:14:56:84:
         df:8c:f1:39:e0:5a:f1:28:aa:0f:3a:00:0a:4c:50:28:fb:f5:
         d4:1d:ba:e2:db:a0:58:5d:2c:03:b1:cd:fe:af:28:66:ee:99:
         e3:ab:32:2c:a4:22:09:6f:9d:7f:eb:08:fd:ed:61:74:95:21:
         ea:b6:c6:89:a7:15:1d:67:6f:fd:ed:af:0a:52:30:ec:4e:68:
         28:0d:cd:08:16:b1:25:05:29:b0:76:08:70:a5:d4:cb:93:06:
         e1:d2:06:17:f2:30:7e:b7:4b:13:9b:0d:15:e2:84:5c:bc:89:
         a2:df:8e:30:63:d4:f3:1f:79:c6:7e:28:d9:55:eb:b5:94:27:
         a5:0b:56:59:45:53:fc:a0:73:03:62:5d:97:5c:4d:88:f0:23:
         6f:bd:56:8a:24:5d:b9:75:47:1d:7e:93:74:29:28:b5:c1:0c:
         30:21:f5:47:94:e5:c0:7f:0e:3d:19:b5:1b:72:94:26:03:b7:
         52:e6:93:53:a3:a0:a0:f2:8e:59:3f:c5:36:61:36:49:74:3e:
         4b:a5:20:f9:96:05:60:71:aa:a1:b1:c9:1d:5c:96:02:9e:d9:
         fb:1e:ec:37:67:ac:70:18:56:97:84:d1:c3:0b:ea:c9:54:eb:
         59:77:f5:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:33:54 2026 by rpki-client