Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
File:                     5LOuPtIxeiPhm9egMr766tU3J9M.mft (raw, json)
Hash identifier:          hqdafun+drEJXF6qQjmnUqBskFHerr98XLvNHDQh3H4=
Subject key identifier:   12:84:40:FF:D5:ED:33:DE:A7:06:2E:DF:7F:63:84:7D:5D:7B:2D:13
Authority key identifier: E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3
Certificate issuer:       /CN=A91298E0/serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
Certificate serial:       356D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
Manifest number:          356D
Signing time:             Tue 18 Aug 2026 14:43:50 +0000
Manifest this update:     Tue 18 Aug 2026 14:43:50 +0000
Manifest next update:     Tue 25 Aug 2026 14:43:50 +0000
Files and hashes:         1: 5LOuPtIxeiPhm9egMr766tU3J9M.crl (hash: 2hPt4DQ9HeD2v+CpuxyyVG+Ap09s69WjxaYRHNib39w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl
                          rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 14:43:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13677 (0x356d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91298E0, serialNumber=E4B3AE3ED2317A23E19BD7A032BEFAEAD53727D3
        Validity
            Not Before: Aug 18 14:43:50 2026 GMT
            Not After : Aug 25 14:43:50 2026 GMT
        Subject: CN=6a846fa6-62e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:18:1f:2b:e8:69:64:7d:31:7c:f3:4c:43:93:
                    c1:f8:b6:5e:1c:52:c8:f3:7f:d2:91:66:7a:33:93:
                    d5:5e:5d:e3:ce:6b:3e:e9:2f:07:eb:03:69:30:9f:
                    4e:9f:fb:56:da:47:b2:cc:43:46:10:0a:d5:5f:bf:
                    e2:e9:74:53:c9:81:a1:a8:9c:06:e5:40:7b:db:38:
                    46:f9:0e:63:85:70:9b:e6:29:fc:20:ff:c1:17:f2:
                    ea:e3:8f:d2:39:0c:ef:cb:52:ba:98:1c:ee:43:53:
                    71:f3:5c:19:51:49:5d:d8:a5:eb:c3:ba:22:b1:ef:
                    45:65:eb:9d:cc:ae:fa:71:33:44:23:c8:7f:85:0a:
                    b1:c3:5e:7f:43:33:8e:88:0f:ec:b4:37:8e:3c:d3:
                    07:f4:71:d3:a3:c2:74:65:9a:1e:08:6b:3a:08:70:
                    af:b3:9e:3b:76:e9:3e:e5:48:24:ac:30:2b:4e:69:
                    4f:6d:a1:42:b2:3e:75:15:9a:e3:e0:33:df:73:59:
                    a8:b2:9c:d0:e6:f6:ca:32:b8:6e:83:1a:d8:f8:11:
                    a0:25:f6:f1:57:af:45:74:74:44:f0:34:a2:b7:db:
                    f6:64:c2:e9:ca:9d:05:58:58:6d:e8:1b:b6:6b:31:
                    7b:7a:72:16:d5:3a:c7:36:d6:ee:2b:ca:53:1a:e4:
                    ed:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:84:40:FF:D5:ED:33:DE:A7:06:2E:DF:7F:63:84:7D:5D:7B:2D:13
            X509v3 Authority Key Identifier:
                keyid:E4:B3:AE:3E:D2:31:7A:23:E1:9B:D7:A0:32:BE:FA:EA:D5:37:27:D3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5LOuPtIxeiPhm9egMr766tU3J9M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91298E0/DC1EFB4A1D9011E2B57AE7F008B02CD2/5LOuPtIxeiPhm9egMr766tU3J9M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         17:77:34:16:a4:db:db:c9:04:11:11:58:24:4e:9d:93:4c:97:
         6b:01:58:56:0c:1e:b1:7f:00:83:8b:a7:53:93:45:29:10:fd:
         ee:53:44:a4:a6:2b:d1:7f:3f:4d:1e:98:cd:e1:b1:71:44:39:
         c5:67:d7:44:c2:21:7a:3e:59:b9:25:ea:33:6b:7e:89:14:00:
         f5:23:19:5d:e0:dd:5f:a6:be:c3:0c:ef:49:c6:af:bb:3f:08:
         d7:8c:74:c3:83:ef:53:be:50:ee:17:a3:31:fe:c8:53:0b:fb:
         3b:8b:28:17:57:98:ee:38:7b:d1:36:fb:bd:d5:fb:96:de:ab:
         57:86:d0:6c:77:00:a0:08:dd:e3:ea:b7:f4:26:8f:9f:d0:d4:
         be:13:ca:3c:6d:b6:6b:f2:32:c7:eb:10:8c:67:f3:9c:57:b6:
         97:49:f7:60:67:91:fd:da:0f:90:79:27:e6:2a:3a:5b:e4:cc:
         92:b6:5e:58:f2:05:8d:46:17:37:a4:71:34:77:5f:43:38:89:
         14:e8:27:ee:ec:68:8b:ba:35:05:97:b7:ce:b7:8d:c7:11:8e:
         79:1b:ce:d7:b9:ae:ee:aa:7e:81:d0:bb:87:f2:49:2d:16:23:
         2b:3b:c7:e0:4d:6f:ee:55:e6:80:60:03:36:90:8c:7f:c3:3a:
         a5:a8:27:58
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNW0wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
Mjk4RTAxMTAvBgNVBAUTKEU0QjNBRTNFRDIzMTdBMjNFMTlCRDdBMDMyQkVGQUVB
RDUzNzI3RDMwHhcNMjYwODE4MTQ0MzUwWhcNMjYwODI1MTQ0MzUwWjAYMRYwFAYD
VQQDEw02YTg0NmZhNi02MmUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAnxgfK+hpZH0xfPNMQ5PB+LZeHFLI83/SkWZ6M5PVXl3jzms+6S8H6wNpMJ9O
n/tW2keyzENGEArVX7/i6XRTyYGhqJwG5UB72zhG+Q5jhXCb5in8IP/BF/Lq44/S
OQzvy1K6mBzuQ1Nx81wZUUld2KXrw7oise9FZeudzK76cTNEI8h/hQqxw15/QzOO
iA/stDeOPNMH9HHTo8J0ZZoeCGs6CHCvs547duk+5UgkrDArTmlPbaFCsj51FZrj
4DPfc1mospzQ5vbKMrhugxrY+BGgJfbxV69FdHRE8DSit9v2ZMLpyp0FWFht6Bu2
azF7enIW1TrHNtbuK8pTGuTtYwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFBKEQP/V
7TPepwYu339jhH1dey0TMB8GA1UdIwQYMBaAFOSzrj7SMXoj4ZvXoDK++urVNyfT
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyOThFMC9EQzFFRkI0QTFE
OTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVpUGhtOWVnTXI3NjZ0VTNK
OU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVMT3VQdEl4ZWlQaG05ZWdNcjc2NnRVM0o5TS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
OThFMC9EQzFFRkI0QTFEOTAxMUUyQjU3QUU3RjAwOEIwMkNEMi81TE91UHRJeGVp
UGhtOWVnTXI3NjZ0VTNKOU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAF3c0FqTb28kEERFYJE6dk0yXawFYVgwesX8Ag4unU5NFKRD97lNEpKYr0X8/
TR6YzeGxcUQ5xWfXRMIhej5ZuSXqM2t+iRQA9SMZXeDdX6a+wwzvScavuz8I14x0
w4PvU75Q7hejMf7IUwv7O4soF1eY7jh70Tb7vdX7lt6rV4bQbHcAoAjd4+q39CaP
n9DUvhPKPG22a/Iyx+sQjGfznFe2l0n3YGeR/doPkHkn5io6W+TMkrZeWPIFjUYX
N6RxNHdfQziJFOgn7uxoi7o1BZe3zreNxxGOeRvO17mu7qp+gdC7h/JJLRYjKzvH
4E1v7lXmgGADNpCMf8M6pagnWA==
-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:54 2026 by rpki-client