Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
File:                     XEzzdpk9EYUoJw3ZUvMCztV18dw.mft (raw, json)
Hash identifier:          I08+P10CX2VckMqH+hhtWBE6WFQ3LQaQ6NJbTpa3BGc=
Subject key identifier:   50:A1:3E:90:F9:B3:3B:96:55:1C:35:22:EB:55:1F:D3:8D:48:0E:CC
Authority key identifier: 5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC
Certificate issuer:       /CN=A91FBD89/serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
Certificate serial:       05B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
Manifest number:          05B1
Signing time:             Thu 16 Apr 2026 23:03:35 +0000
Manifest this update:     Thu 16 Apr 2026 23:03:35 +0000
Manifest next update:     Thu 23 Apr 2026 23:03:35 +0000
Files and hashes:         1: XEzzdpk9EYUoJw3ZUvMCztV18dw.crl (hash: HkjF3dIhsWUDnQAuV1n55xoMJJvZVj2PK/KUoxXLdv8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl
                          rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 23:03:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1457 (0x5b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBD89, serialNumber=5C4CF376993D118528270DD952F302CED575F1DC
        Validity
            Not Before: Apr 16 23:03:35 2026 GMT
            Not After : Apr 23 23:03:35 2026 GMT
        Subject: CN=69e16ac7-08d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:cd:f0:76:1b:bf:9b:75:85:a8:d8:80:15:7a:
                    bf:c5:18:43:3a:88:84:56:f7:96:f3:be:18:65:72:
                    86:d3:e5:11:16:2b:bb:85:5b:ff:0b:77:b9:d8:91:
                    ea:eb:06:09:01:0a:3c:dc:32:64:f5:9c:83:c1:1b:
                    55:3c:44:48:b7:a5:7f:62:e2:95:12:a8:0b:28:60:
                    e2:80:3e:b8:0d:9f:6e:84:4c:60:8b:72:cc:db:cd:
                    b4:c6:1b:48:ff:34:5a:d3:df:1c:f6:bd:79:7a:2d:
                    2e:d3:43:63:12:3e:72:e5:9c:2a:1f:3a:0e:eb:e1:
                    81:31:d5:4c:44:b2:a5:36:9d:bd:c4:ad:85:36:5a:
                    c3:53:26:bb:40:76:8f:75:aa:08:2e:89:3e:5d:fc:
                    af:b6:47:55:46:23:9c:67:87:be:f7:5b:cc:13:b6:
                    36:1e:14:0e:b6:50:ff:2c:fe:24:19:23:3b:69:4a:
                    4d:8b:cb:8a:10:08:d8:04:b9:2e:08:db:eb:13:8d:
                    73:d5:d8:99:f4:a9:0c:62:aa:6b:41:68:b4:20:e8:
                    6b:90:cb:2e:86:10:44:de:84:b4:c0:03:9d:9f:60:
                    11:df:fb:5a:0f:f6:f8:5a:78:90:a2:96:58:6d:b2:
                    77:2f:72:b1:7d:89:66:88:28:0b:97:ca:c9:fb:dc:
                    d6:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:A1:3E:90:F9:B3:3B:96:55:1C:35:22:EB:55:1F:D3:8D:48:0E:CC
            X509v3 Authority Key Identifier:
                keyid:5C:4C:F3:76:99:3D:11:85:28:27:0D:D9:52:F3:02:CE:D5:75:F1:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/XEzzdpk9EYUoJw3ZUvMCztV18dw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBD89/F37C88EE0B7E11EC83129648C4F9AE02/XEzzdpk9EYUoJw3ZUvMCztV18dw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:9c:f2:24:2d:22:71:64:3f:d4:87:3f:24:0c:95:3c:42:95:
         20:07:c7:aa:ce:b3:14:56:df:ea:94:df:38:19:76:4f:38:ff:
         16:0e:29:1c:cd:9e:ed:60:ff:c1:47:90:f6:94:b5:dd:b8:96:
         f1:02:1d:5b:cc:9f:a7:b9:d1:44:c3:70:cc:6e:b5:1c:19:a0:
         8f:e1:5e:50:c6:85:24:f4:80:b9:32:49:4f:0f:d1:66:a0:f3:
         86:20:e2:e5:35:48:ad:86:9c:5c:94:95:dc:85:5f:02:15:74:
         31:29:7a:bc:22:1a:22:ac:a9:a9:bc:88:af:d3:63:2d:58:01:
         0a:f0:c0:b2:2f:1b:6c:e9:ab:0c:46:d5:cf:57:d1:7d:24:fb:
         cf:cb:90:de:1e:6c:e0:d1:f6:76:c5:4d:bb:94:f0:99:31:61:
         87:b3:af:d0:94:80:02:52:8b:96:a6:85:ca:3a:54:78:82:06:
         b3:c1:f4:62:3b:fd:11:5b:c3:62:f6:2c:23:a8:23:a6:43:57:
         9c:09:97:ba:04:43:ac:ff:1d:eb:1b:95:13:4d:df:f7:71:dd:
         86:39:32:89:2d:5d:a2:1b:34:0c:c9:a0:20:56:66:74:c6:19:
         1d:bd:e5:cc:32:07:53:18:f2:ca:46:30:44:95:ce:6b:00:73:
         2f:f3:f5:9e
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBbEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RkJEODkxMTAvBgNVBAUTKDVDNENGMzc2OTkzRDExODUyODI3MEREOTUyRjMwMkNF
RDU3NUYxREMwHhcNMjYwNDE2MjMwMzM1WhcNMjYwNDIzMjMwMzM1WjAYMRYwFAYD
VQQDEw02OWUxNmFjNy0wOGQ3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyM3wdhu/m3WFqNiAFXq/xRhDOoiEVveW874YZXKG0+URFiu7hVv/C3e52JHq
6wYJAQo83DJk9ZyDwRtVPERIt6V/YuKVEqgLKGDigD64DZ9uhExgi3LM2820xhtI
/zRa098c9r15ei0u00NjEj5y5ZwqHzoO6+GBMdVMRLKlNp29xK2FNlrDUya7QHaP
daoILok+XfyvtkdVRiOcZ4e+91vME7Y2HhQOtlD/LP4kGSM7aUpNi8uKEAjYBLku
CNvrE41z1diZ9KkMYqprQWi0IOhrkMsuhhBE3oS0wAOdn2AR3/taD/b4WniQopZY
bbJ3L3KxfYlmiCgLl8rJ+9zWBwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFChPpD5
szuWVRw1IutVH9ONSA7MMB8GA1UdIwQYMBaAFFxM83aZPRGFKCcN2VLzAs7VdfHc
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGQkQ4OS9GMzdDODhFRTBC
N0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZVW9KdzNaVXZNQ3p0VjE4
ZHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1hFenpkcGs5RVlVb0p3M1pVdk1DenRWMThkdy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
QkQ4OS9GMzdDODhFRTBCN0UxMUVDODMxMjk2NDhDNEY5QUUwMi9YRXp6ZHBrOUVZ
VW9KdzNaVXZNQ3p0VjE4ZHcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAc5zyJC0icWQ/1Ic/JAyVPEKVIAfHqs6zFFbf6pTfOBl2Tzj/Fg4pHM2e7WD/
wUeQ9pS13biW8QIdW8yfp7nRRMNwzG61HBmgj+FeUMaFJPSAuTJJTw/RZqDzhiDi
5TVIrYacXJSV3IVfAhV0MSl6vCIaIqypqbyIr9NjLVgBCvDAsi8bbOmrDEbVz1fR
fST7z8uQ3h5s4NH2dsVNu5TwmTFhh7Ov0JSAAlKLlqaFyjpUeIIGs8H0Yjv9EVvD
YvYsI6gjpkNXnAmXugRDrP8d6xuVE03f93HdhjkyiS1dohs0DMmgIFZmdMYZHb3l
zDIHUxjyykYwRJXOawBzL/P1ng==
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:41:37 2026 by rpki-client