Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
File:                     9TjVlahlU-nmlHrF6Pz8y8namyE.mft (raw, json)
Hash identifier:          6O8qD3+je9gU5xINsuBv6r6uJwWo20HyUkwY5LsOt+4=
Subject key identifier:   42:50:84:54:AB:F9:31:EC:0A:10:6E:C9:BA:C9:AE:4C:66:87:31:CD
Authority key identifier: F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21
Certificate issuer:       /CN=A91EA115/serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
Manifest number:          353B
Signing time:             Tue 12 May 2026 14:27:49 +0000
Manifest this update:     Tue 12 May 2026 14:27:48 +0000
Manifest next update:     Tue 19 May 2026 14:27:48 +0000
Files and hashes:         1: 9TjVlahlU-nmlHrF6Pz8y8namyE.crl (hash: HezwdFDkgCB5nQq/2llCJJ3yKZuK4WVEUW+4XEPZ+Lk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl
                          rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:27:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA115, serialNumber=F538D595A86553E9E6947AC5E8FCFCCBC9DA9B21
        Validity
            Not Before: May 12 14:27:48 2026 GMT
            Not After : May 19 14:27:48 2026 GMT
        Subject: CN=6a0338e5-f084
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ac:36:4a:c4:67:70:3b:a2:b1:13:ff:66:13:
                    e0:17:8c:a9:22:f3:af:8f:91:29:d9:d7:f7:90:2e:
                    c0:d1:fb:d7:cf:2c:e1:05:22:44:7d:af:d2:2f:53:
                    e1:33:f7:e0:ea:35:8f:1c:b0:fa:20:48:a6:11:c5:
                    2c:04:a7:dc:0d:f5:4b:60:af:9e:15:b0:79:59:4b:
                    6a:7b:a0:35:e6:2d:72:63:9f:ec:bb:67:1e:cc:20:
                    59:29:67:5f:d2:b1:9e:9e:a4:04:ca:0a:5c:c0:e4:
                    b9:1c:b4:af:31:72:68:fc:cf:bb:61:65:16:eb:6b:
                    55:80:6d:07:d9:e6:61:62:95:49:db:02:de:fd:ab:
                    71:9b:84:cd:d7:c1:c6:5f:7c:38:2f:4d:25:25:35:
                    45:00:2a:4e:ef:84:64:08:a1:4f:85:fe:44:57:d7:
                    bd:71:b4:7a:b6:f0:dd:3e:c5:a6:7c:da:27:44:17:
                    bc:ec:16:78:bd:75:0d:37:a2:98:a6:d0:b9:d3:e4:
                    42:be:01:6e:9d:2e:90:9b:66:4d:cd:e9:f5:9d:87:
                    71:72:31:a5:59:eb:99:af:5a:a4:88:e7:0b:cb:cf:
                    fd:0f:b0:ea:3e:b2:d4:40:7c:ef:33:78:a2:f6:50:
                    bb:64:8a:fe:57:74:f9:b9:c4:16:06:ea:62:b5:b8:
                    64:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:50:84:54:AB:F9:31:EC:0A:10:6E:C9:BA:C9:AE:4C:66:87:31:CD
            X509v3 Authority Key Identifier:
                keyid:F5:38:D5:95:A8:65:53:E9:E6:94:7A:C5:E8:FC:FC:CB:C9:DA:9B:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9TjVlahlU-nmlHrF6Pz8y8namyE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA115/9125450E1D8611E29F33E0DD08B02CD2/9TjVlahlU-nmlHrF6Pz8y8namyE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         88:61:55:0e:f7:53:01:7b:86:ac:67:41:d2:22:1a:1e:12:b5:
         ac:8d:17:8a:12:6d:b7:87:d7:e6:23:15:b6:0d:be:f8:59:d7:
         d5:80:76:af:8c:f6:2d:bb:d4:ed:0c:ee:7a:96:89:9c:a7:cc:
         13:52:48:4d:5e:f5:09:c1:36:48:5a:01:33:7c:fc:c2:2a:bc:
         2a:07:62:a2:cd:97:73:89:b6:63:3d:6c:90:69:41:02:ab:54:
         3b:b1:72:0f:7d:92:33:a6:d4:74:54:26:9f:b6:95:f8:1d:74:
         78:e6:fd:e5:e5:7b:72:23:24:09:d6:db:d0:fe:12:59:11:35:
         23:9a:4c:6d:44:01:a5:ad:01:1c:e8:57:8f:7b:ed:f3:02:fc:
         00:c8:c3:89:4a:56:6c:41:99:04:59:e2:c1:0f:08:4c:36:ee:
         ea:fe:f1:2c:0f:40:87:8a:fe:c4:7d:04:e9:00:e7:a6:f9:93:
         f0:c0:78:1e:7e:c7:d5:3d:e9:9a:75:c4:3d:9a:01:c6:a6:d4:
         68:5c:f5:d3:05:8d:4e:4d:f3:9e:61:60:08:85:8a:91:fc:ec:
         66:20:d4:93:67:a2:14:ed:5d:6e:63:dd:df:83:e8:02:04:21:
         33:10:f9:1a:30:9e:7d:41:e0:5d:8a:fe:5c:00:47:50:61:22:
         08:1a:e7:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:57 2026 by rpki-client