Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File:                     XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier:          IFrMTIrQgkyXb3nS8U5hh58yRHC4D5HHyI2xfThASZs=
Subject key identifier:   A2:34:40:EF:F2:95:51:78:16:07:1A:56:61:8B:AC:D7:3D:EB:0A:F1
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer:       /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial:       05BE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number:          05BE
Signing time:             Tue 12 May 2026 23:12:25 +0000
Manifest this update:     Tue 12 May 2026 23:12:25 +0000
Manifest next update:     Tue 19 May 2026 23:12:25 +0000
Files and hashes:         1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: l6Dm6M16AulGQS9hTisbTJF30/IPasexn+cnx3uTh80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:12:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1470 (0x5be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
        Validity
            Not Before: May 12 23:12:25 2026 GMT
            Not After : May 19 23:12:25 2026 GMT
        Subject: CN=6a03b3d9-4e9f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:90:d0:cb:1e:d5:56:6b:d7:55:07:14:01:79:
                    4d:ff:15:65:8b:b1:d4:98:cf:19:ca:4a:52:b3:66:
                    8f:f5:04:63:e5:f2:49:2f:1d:c6:dd:8e:1c:ad:cf:
                    33:6f:fb:59:79:c2:bc:95:f3:db:44:03:c2:e0:d8:
                    b0:c8:46:0d:d2:d2:39:06:9e:4c:98:07:9e:7b:73:
                    18:74:26:fb:00:c3:b0:8d:21:3d:24:56:ef:37:ff:
                    de:48:1b:ce:c0:37:f6:cb:cc:ba:73:50:15:1a:43:
                    e9:8c:f2:82:c0:0c:6c:2d:3c:7c:bb:5d:16:06:a7:
                    be:cf:3a:27:ef:be:e5:2a:26:66:b1:e8:c6:ce:9d:
                    92:6b:b5:aa:b2:39:af:65:80:63:84:c4:ae:dc:0b:
                    42:44:c6:ec:22:32:8c:5a:fb:3f:cf:7a:83:86:df:
                    96:95:0e:2e:30:93:8c:4c:d3:1f:5b:94:16:12:e5:
                    cf:18:3b:69:63:81:61:e9:17:d3:e1:b8:08:2a:df:
                    1e:ef:4b:bb:24:d0:65:d0:34:80:36:6d:5c:82:e1:
                    1d:e5:af:d8:4f:0e:ba:34:17:0b:bf:2a:06:4b:1f:
                    92:72:8d:7d:cd:43:de:8c:f3:02:2b:8a:5a:79:11:
                    08:6a:c7:76:3d:ff:57:ff:f7:21:c1:d3:f5:62:68:
                    d2:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:34:40:EF:F2:95:51:78:16:07:1A:56:61:8B:AC:D7:3D:EB:0A:F1
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         53:7e:8d:e9:0f:cd:92:98:67:e8:35:19:46:dd:d2:bc:7a:2c:
         9b:5a:17:e9:2b:1c:91:70:da:7a:56:9e:a8:7c:a3:46:b2:16:
         4e:f5:4e:44:0b:23:94:3f:16:10:b4:7b:38:a8:7a:af:0a:e0:
         8f:33:14:14:56:bc:18:6e:42:b2:76:ed:7d:49:71:f6:04:ce:
         92:5b:97:ac:5d:9d:24:3a:ea:40:e5:5c:c5:6c:09:24:0e:96:
         10:80:16:48:9b:b6:38:72:f1:a3:1f:a3:0e:b8:34:38:3f:3e:
         6a:14:d1:47:b2:35:c6:a2:46:b0:72:12:a8:8f:fd:1b:f8:74:
         ab:7a:40:cc:9b:c3:c0:4c:c8:6a:3e:5d:d0:3d:ef:7a:ec:02:
         0e:4a:88:90:a6:43:0e:5c:ff:50:4d:bb:fa:29:ce:d7:e8:b4:
         ce:68:f5:ec:5f:89:f8:e5:2b:2e:d5:ef:83:e9:e1:ef:c3:cd:
         30:47:f9:43:ea:6f:00:99:75:9a:ff:b7:84:fe:1c:6e:37:cc:
         d6:8f:5e:db:c2:e2:2a:4b:05:52:a7:a5:19:50:d8:29:e9:74:
         1e:27:5c:a0:95:8d:aa:e8:7d:81:fa:8d:b8:2e:dd:dd:ae:11:
         04:41:f7:b8:78:57:78:b9:46:30:ba:ad:04:44:35:25:1f:20:
         0f:90:7d:12
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBb4wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF
RDU3NUYxREMwHhcNMjYwNTEyMjMxMjI1WhcNMjYwNTE5MjMxMjI1WjAYMRYwFAYD
VQQDEw02YTAzYjNkOS00ZTlmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAqJDQyx7VVmvXVQcUAXlN/xVli7HUmM8ZykpSs2aP9QRj5fJJLx3G3Y4crc8z
b/tZecK8lfPbRAPC4NiwyEYN0tI5Bp5MmAeee3MYdCb7AMOwjSE9JFbvN//eSBvO
wDf2y8y6c1AVGkPpjPKCwAxsLTx8u10WBqe+zzon777lKiZmsejGzp2Sa7Wqsjmv
ZYBjhMSu3AtCRMbsIjKMWvs/z3qDht+WlQ4uMJOMTNMfW5QWEuXPGDtpY4Fh6RfT
4bgIKt8e70u7JNBl0DSANm1cguEd5a/YTw66NBcLvyoGSx+Sco19zUPejPMCK4pa
eREIasd2Pf9X//chwdP1YmjSJQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKI0QO/y
lVF4FgcaVmGLrNc96wrxMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC
N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ
VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAU36N6Q/Nkphn6DUZRt3SvHosm1oX6SsckXDaelaeqHyjRrIWTvVORAsjlD8W
ELR7OKh6rwrgjzMUFFa8GG5CsnbtfUlx9gTOkluXrF2dJDrqQOVcxWwJJA6WEIAW
SJu2OHLxox+jDrg0OD8+ahTRR7I1xqJGsHISqI/9G/h0q3pAzJvDwEzIaj5d0D3v
euwCDkqIkKZDDlz/UE27+inO1+i0zmj17F+J+OUrLtXvg+nh78PNMEf5Q+pvAJl1
mv+3hP4cbjfM1o9e28LiKksFUqelGVDYKel0HidcoJWNquh9gfqNuC7d3a4RBEH3
uHhXeLlGMLqtBEQ1JR8gD5B9Eg==
-----END CERTIFICATE-----
Generated at Wed May 13 12:36:28 2026 by rpki-client