Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
File:                     mdb3fuCkNuVIfpjO5VK2S17GWxM.mft (raw, json)
Hash identifier:          PO9EaWuAyxf/pKKEkg0G6ZD3MQfn9gUoHKOEf+H0rMk=
Subject key identifier:   EF:49:40:50:20:44:9B:49:33:25:4A:7D:AE:63:55:EA:EE:1A:D8:4F
Authority key identifier: 99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13
Certificate issuer:       /CN=A912A799/serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
Manifest number:          353B
Signing time:             Wed 20 May 2026 15:10:55 +0000
Manifest this update:     Wed 20 May 2026 15:10:54 +0000
Manifest next update:     Wed 27 May 2026 15:10:54 +0000
Files and hashes:         1: mdb3fuCkNuVIfpjO5VK2S17GWxM.crl (hash: oSEKC4/YIJftsPgMNbzPsrunkKfx4hrCHH0izQzacbc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl
                          rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:10:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A799, serialNumber=99D6F77EE0A436E5487E98CEE552B64B5EC65B13
        Validity
            Not Before: May 20 15:10:54 2026 GMT
            Not After : May 27 15:10:54 2026 GMT
        Subject: CN=6a0dceff-0a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:86:02:e1:7c:3a:0e:5b:80:34:f6:ca:1f:62:
                    37:4e:01:8c:ec:cf:11:ea:f8:28:05:39:87:cf:6b:
                    5a:51:ff:af:70:75:d1:72:46:ae:d8:21:41:61:5e:
                    df:b0:34:76:f1:af:0e:6f:85:df:bd:74:78:00:67:
                    a5:ff:a0:16:0a:25:ec:fb:76:cf:a9:2d:9b:31:44:
                    8f:0a:53:73:3d:bb:40:88:cd:4a:7e:ca:09:01:29:
                    18:0d:2d:30:4b:a1:46:2e:d3:59:ff:02:a8:22:47:
                    04:43:50:24:9a:a8:f7:88:53:0c:e0:6c:53:72:b0:
                    42:e4:a4:f2:f8:37:e5:0f:bb:0d:7e:80:0f:e1:5f:
                    3c:37:a6:12:8e:85:7e:b2:77:3d:f0:aa:7b:60:fa:
                    5a:e2:30:51:6b:af:8d:62:92:d8:94:93:8a:81:5a:
                    43:89:d8:4e:ef:ac:65:ea:ee:c5:77:e3:7e:c6:dd:
                    de:61:30:68:c3:ff:9b:15:be:62:96:a4:19:69:91:
                    a9:e7:c0:22:89:b7:be:7d:6c:87:64:88:26:d8:85:
                    45:bf:18:7a:6c:86:f4:1b:31:a8:bf:43:f9:3e:81:
                    d6:99:86:d5:ce:d5:75:c2:c9:88:40:f4:d2:ff:ae:
                    06:2c:21:3e:ea:c9:91:2c:3b:62:11:04:32:4d:49:
                    2b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:49:40:50:20:44:9B:49:33:25:4A:7D:AE:63:55:EA:EE:1A:D8:4F
            X509v3 Authority Key Identifier:
                keyid:99:D6:F7:7E:E0:A4:36:E5:48:7E:98:CE:E5:52:B6:4B:5E:C6:5B:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mdb3fuCkNuVIfpjO5VK2S17GWxM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A799/0DA9F02E1DA611E2B82B239D08B02CD2/mdb3fuCkNuVIfpjO5VK2S17GWxM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         46:b3:de:aa:8f:96:29:0c:f8:85:95:52:b7:bc:28:10:25:43:
         a2:55:99:7b:b0:a7:bf:9d:2c:f5:3e:e7:4a:b8:16:20:1d:2c:
         34:bd:30:c6:2d:d0:17:9d:5c:2e:c5:bd:3f:15:5e:08:37:40:
         11:01:d7:b1:0c:94:44:8e:61:f8:1c:0e:1b:ba:a6:bb:5d:84:
         75:64:b5:88:33:cc:8a:b4:57:97:3f:04:88:1d:fe:dd:d0:53:
         a5:2e:97:33:d2:df:98:4e:1f:8d:4d:17:4e:d4:be:59:b7:6f:
         81:6d:c4:58:43:ea:59:22:69:30:fb:80:18:21:1c:df:cd:cc:
         45:cd:78:71:2f:5f:13:39:6e:0b:c1:fb:06:36:a8:c5:7b:6a:
         16:4c:c1:57:f3:94:6b:75:bc:b2:9f:b2:ff:92:f7:9c:3a:cf:
         82:c1:84:79:83:d9:77:51:62:ae:36:08:ba:61:8e:6c:20:52:
         a3:86:80:fe:8a:20:8d:5b:6d:6c:cb:f1:c8:b5:a0:92:5a:00:
         d4:32:49:dc:c5:e8:95:61:e5:ba:e9:73:ce:86:5f:b9:f3:61:
         f7:2a:f7:24:79:b5:04:1b:b9:6d:e8:ba:18:49:7e:c4:89:5a:
         7e:c0:0e:fe:e6:39:d4:14:97:64:45:01:1f:12:35:ce:b1:6b:
         18:ba:90:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:39 2026 by rpki-client