Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
File:                     cQnPztTUjL9WSOoHl6fHNH1o_xI.mft (raw, json)
Hash identifier:          lbzI+htzxCNUxdZegG0n/+2of7crGU1wwpJaOLFxPIk=
Subject key identifier:   7F:5C:C4:D9:33:C4:1E:60:37:14:BA:CD:09:F6:AF:13:C3:FA:8B:13
Authority key identifier: 71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12
Certificate issuer:       /CN=A913132A/serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
Manifest number:          353C
Signing time:             Wed 20 May 2026 15:13:13 +0000
Manifest this update:     Wed 20 May 2026 15:13:13 +0000
Manifest next update:     Wed 27 May 2026 15:13:13 +0000
Files and hashes:         1: cQnPztTUjL9WSOoHl6fHNH1o_xI.crl (hash: BvJsxwfNKD46l3aPoKiUaTxsRJRiarAwyt9m+oyY7OU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl
                          rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913132A, serialNumber=7109CFCED4D48CBF5648EA0797A7C7347D68FF12
        Validity
            Not Before: May 20 15:13:13 2026 GMT
            Not After : May 27 15:13:13 2026 GMT
        Subject: CN=6a0dcf89-5a6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:12:47:86:c0:56:5d:ad:33:3d:f1:3f:b1:03:
                    48:9a:69:ca:77:d2:59:8f:61:75:f6:0e:58:5c:69:
                    0e:e5:34:bc:f2:3d:28:9e:c0:45:76:2f:5f:26:1c:
                    2e:5a:3a:48:c8:a2:4a:d4:80:bf:fa:ca:44:c1:65:
                    c9:f6:6e:80:d4:b8:ba:b4:ce:a0:43:43:cf:16:e0:
                    40:ac:87:20:31:94:71:5b:fb:f9:b9:e1:cf:89:31:
                    3a:ff:53:91:8f:c9:81:31:e5:6a:4d:24:28:72:39:
                    e7:ca:71:39:9e:65:38:e2:ab:82:58:e7:46:a7:80:
                    7d:38:9c:98:c4:e1:dc:21:57:ed:eb:3c:98:02:38:
                    7e:0e:d8:fc:6a:12:23:49:4e:77:8f:c2:4c:c8:00:
                    6e:4f:16:a0:99:e6:88:5d:a0:54:21:1b:60:d3:1a:
                    4b:7c:a3:42:0b:ed:16:5c:15:57:d0:6a:ea:ab:73:
                    5b:dc:e5:3c:44:ea:ec:4a:5b:08:ea:fc:0a:8a:61:
                    4e:69:5d:4e:94:23:ac:23:3e:bd:de:6a:51:10:bd:
                    f3:7b:d6:cb:ec:8a:17:14:5c:da:95:e6:68:d0:9f:
                    07:13:a1:52:6d:57:b3:5c:79:c3:77:d8:ea:70:e2:
                    12:b2:3c:ae:bc:70:cb:8f:27:89:c8:85:33:43:4e:
                    95:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:5C:C4:D9:33:C4:1E:60:37:14:BA:CD:09:F6:AF:13:C3:FA:8B:13
            X509v3 Authority Key Identifier:
                keyid:71:09:CF:CE:D4:D4:8C:BF:56:48:EA:07:97:A7:C7:34:7D:68:FF:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cQnPztTUjL9WSOoHl6fHNH1o_xI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913132A/B11648D81DA711E28B6E86A108B02CD2/cQnPztTUjL9WSOoHl6fHNH1o_xI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:15:3e:a1:cd:6a:cd:b1:d7:4f:cf:b3:87:44:6f:aa:34:e4:
         c6:ec:ee:7b:f5:b1:0a:e9:a7:ac:2c:8c:e2:44:6e:93:05:fb:
         06:ae:fd:9a:cf:31:83:3d:3b:12:aa:78:9b:26:cb:75:77:73:
         61:5d:2d:76:33:51:69:24:6a:ce:d3:41:f0:05:43:0f:00:c6:
         e8:80:ef:af:80:2a:ef:d5:4b:08:88:41:14:1c:08:62:c1:15:
         66:39:53:b1:96:b6:e1:6b:73:0a:53:52:35:44:39:12:c6:b8:
         a2:20:7d:a8:9d:b1:29:8f:6a:6c:bf:19:85:af:15:0a:92:5a:
         3d:4c:a7:61:94:d2:4c:1d:f3:75:93:32:88:02:32:ba:b8:a1:
         ec:25:af:4c:a2:40:60:a2:6a:26:d3:d7:72:65:22:1b:7a:d1:
         e5:a2:76:69:04:4b:94:eb:f5:07:23:da:a9:82:e1:a1:5f:f1:
         cd:57:aa:9c:36:0f:af:fa:e7:f5:5c:6a:12:4a:f4:de:35:b9:
         93:95:c5:a4:b1:b9:8d:6a:67:19:89:19:d9:c6:14:bc:d3:42:
         75:12:22:89:df:05:8f:ac:20:66:af:e1:46:43:eb:71:57:37:
         b8:f2:bd:da:81:7d:62:84:ec:22:cc:63:92:0c:be:68:8e:7d:
         db:b8:d4:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:49 2026 by rpki-client