Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
File:                     5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft (raw, json)
Hash identifier:          kxknaL1U/OVij5rgqmFlIjtfrJE2+ANMpBzxfv210AQ=
Subject key identifier:   B8:28:1F:FD:AB:3E:E1:89:23:7B:74:38:34:F1:10:5C:80:57:1B:FC
Authority key identifier: E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF
Certificate issuer:       /CN=A91D60CF/serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
Certificate serial:       0164
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
Manifest number:          0164
Signing time:             Wed 13 May 2026 04:52:24 +0000
Manifest this update:     Wed 13 May 2026 04:52:24 +0000
Manifest next update:     Wed 20 May 2026 04:52:24 +0000
Files and hashes:         1: 5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl (hash: CFxlWwHpi8DREfRwcJzkk4NpH6wEoXesZUcHk40qnPU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl
                          rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:52:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 356 (0x164)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D60CF, serialNumber=E64E02177435AEF1CBFD624E2667E6969AAFAAFF
        Validity
            Not Before: May 13 04:52:24 2026 GMT
            Not After : May 20 04:52:24 2026 GMT
        Subject: CN=6a040388-4aef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b0:24:fe:72:bc:c6:22:8e:46:70:a7:10:5b:
                    a2:8e:6b:f8:a2:b2:25:a8:c4:66:f5:a6:f5:b7:7e:
                    00:ed:a6:72:28:d1:08:4e:3a:0c:6b:fb:c9:1e:da:
                    f3:7d:d5:39:96:f9:c5:30:2f:40:ad:96:4a:d0:3d:
                    24:24:65:ac:dd:0b:48:77:1b:f6:b3:36:c1:98:42:
                    eb:b6:dd:99:d0:0d:7d:58:44:7e:b3:fe:22:e6:6a:
                    68:6a:9e:b4:c6:4b:54:a8:56:52:f1:0e:6c:2d:f1:
                    8b:62:fe:a5:23:24:07:72:b0:ce:6e:01:98:a7:60:
                    39:14:2d:d3:e1:88:34:0f:fc:b9:b6:ea:5e:f7:de:
                    1b:cf:e3:f9:18:5d:1c:35:ba:36:e0:69:fa:25:38:
                    f9:fa:c7:7a:ff:e9:24:02:bd:26:25:aa:43:c6:1b:
                    8f:50:2b:bf:de:c3:8a:50:b3:42:db:ff:3f:c9:ce:
                    a5:3a:8f:90:41:57:23:ec:2f:fa:d5:9b:1d:42:15:
                    ef:94:94:1e:0a:83:28:bb:32:9f:c5:25:d5:81:6b:
                    28:ae:d3:dd:9f:07:3e:e4:e8:59:f5:af:72:d9:26:
                    26:a5:06:f1:fd:df:10:23:cf:c3:27:99:de:01:67:
                    20:2b:17:d9:f0:18:44:a1:5d:04:d7:88:17:4e:a4:
                    41:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:28:1F:FD:AB:3E:E1:89:23:7B:74:38:34:F1:10:5C:80:57:1B:FC
            X509v3 Authority Key Identifier:
                keyid:E6:4E:02:17:74:35:AE:F1:CB:FD:62:4E:26:67:E6:96:9A:AF:AA:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D60CF/EF8137E42AFC11EFA0243C4AC4F9AE02/5k4CF3Q1rvHL_WJOJmfmlpqvqv8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4c:bf:d6:86:ce:8c:cc:dc:9f:b5:c4:4b:31:e1:ba:fe:88:80:
         64:53:d7:d1:4d:41:a6:05:46:01:c7:e8:7a:ed:1b:5e:b8:2a:
         0b:0a:ea:18:b1:44:22:56:05:f4:22:88:40:8d:e2:d3:83:12:
         32:c7:f4:72:f6:35:3c:bb:66:f6:a4:be:be:13:8a:9f:02:4f:
         f5:fb:05:18:e5:7e:95:2e:2f:fb:48:f6:ab:3b:d8:7d:17:a9:
         c3:f3:9a:a3:f0:51:cc:40:99:8c:df:bb:a8:b9:de:ae:46:82:
         7d:1a:23:73:24:b0:f4:db:ee:b7:22:49:bf:af:0c:f6:a4:1e:
         cb:9d:d7:e8:09:d9:db:f5:1e:51:0e:7e:a2:d8:62:b0:25:d3:
         48:98:5e:62:98:61:b9:4e:ce:50:eb:f5:51:f6:58:3e:5d:da:
         e1:98:99:df:f8:98:f6:00:c3:ed:49:68:aa:a4:59:f4:02:5b:
         a1:97:c4:c9:e6:84:2b:93:6e:c1:c7:36:b5:8e:08:7b:a5:82:
         97:21:ad:47:93:9e:b1:48:5d:e4:e3:ca:0e:8c:a8:56:58:16:
         2d:9a:59:32:6c:0c:94:e7:80:58:69:8d:1d:e5:d0:d6:16:a5:
         95:26:86:35:5c:7e:46:c6:b4:37:17:6d:6a:0d:9a:28:10:ad:
         28:c8:97:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:21:32 2026 by rpki-client