Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
File:                     rBnGa8SzHOuTC6auDW63R7EKtgY.mft (raw, json)
Hash identifier:          Ud4jfbbPiKcF6BF62JilBckPOSlVM4lMrDqFh3p50Rg=
Subject key identifier:   F6:F3:7E:02:A7:4C:DF:33:30:DF:D5:E3:49:A5:8B:C0:7E:81:95:73
Authority key identifier: AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06
Certificate issuer:       /CN=A9141E28/serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
Certificate serial:       3545
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
Manifest number:          3545
Signing time:             Wed 20 May 2026 14:41:18 +0000
Manifest this update:     Wed 20 May 2026 14:41:17 +0000
Manifest next update:     Wed 27 May 2026 14:41:17 +0000
Files and hashes:         1: rBnGa8SzHOuTC6auDW63R7EKtgY.crl (hash: UCzyLhGmp6c9grN0oMonItI63ObgixQJa0uSXMlka9k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl
                          rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:41:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13637 (0x3545)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141E28, serialNumber=AC19C66BC4B31CEB930BA6AE0D6EB747B10AB606
        Validity
            Not Before: May 20 14:41:17 2026 GMT
            Not After : May 27 14:41:17 2026 GMT
        Subject: CN=6a0dc80d-a140
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:4a:0b:12:cc:68:74:92:34:56:45:87:93:67:
                    b7:74:95:1e:ce:61:d9:66:71:1a:b8:00:05:3b:b1:
                    90:35:b1:79:a5:f8:18:b2:ee:15:ec:24:90:a1:32:
                    01:c8:b6:92:ca:7c:8e:80:93:ca:4e:cd:46:87:5e:
                    bd:98:fb:b7:31:1b:a1:59:90:d3:55:8f:cd:52:d7:
                    c8:1b:37:c1:cd:78:6b:62:c2:d9:e3:0d:8c:00:72:
                    4b:54:b1:8f:1c:f1:55:f9:70:2b:46:84:76:8e:f1:
                    d8:da:33:5e:b8:a4:14:39:62:e1:25:e3:6c:08:85:
                    70:74:06:fd:a0:d9:d2:2c:d7:51:b7:01:25:2e:84:
                    54:36:5e:98:81:62:db:b5:67:73:0b:06:71:63:ca:
                    32:30:d7:cd:d2:c1:2c:3c:55:b1:32:a8:fe:ce:39:
                    10:4f:d5:65:f7:da:ce:79:4f:9b:bb:69:93:9f:38:
                    03:b0:ce:45:e5:8f:c3:5c:ae:c0:59:aa:24:69:24:
                    7a:79:97:e7:9a:ab:e8:fd:88:45:58:c3:c5:28:b2:
                    c5:64:57:48:4a:a7:41:d4:0e:80:df:77:b3:04:a7:
                    2b:05:cf:99:8a:33:c3:e3:52:32:99:92:45:44:4e:
                    8d:04:f2:b3:e5:d9:17:39:ab:70:bd:7c:1b:19:60:
                    24:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:F3:7E:02:A7:4C:DF:33:30:DF:D5:E3:49:A5:8B:C0:7E:81:95:73
            X509v3 Authority Key Identifier:
                keyid:AC:19:C6:6B:C4:B3:1C:EB:93:0B:A6:AE:0D:6E:B7:47:B1:0A:B6:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rBnGa8SzHOuTC6auDW63R7EKtgY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141E28/8458B9101D8F11E2AB03A2EE08B02CD2/rBnGa8SzHOuTC6auDW63R7EKtgY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         41:1e:bf:8a:e1:9e:45:e5:ed:48:43:62:2a:fa:09:bf:9a:52:
         cc:9a:5a:df:77:26:48:a9:35:f9:45:2d:f4:7f:8a:5c:63:71:
         73:58:37:cd:93:94:39:df:f2:9c:7b:25:b8:a8:0b:e6:34:c2:
         f5:91:0f:22:00:70:61:75:ba:be:21:42:dd:ae:46:14:47:df:
         9a:aa:05:3b:66:32:96:d3:56:64:7c:a9:f3:3d:c7:01:97:2d:
         b2:b0:6c:7d:10:ed:b4:77:ff:c5:e6:0c:a9:a2:f2:72:d1:3d:
         c2:26:4d:01:59:11:33:51:eb:2e:a5:fe:76:96:0c:dc:39:b6:
         22:a8:d9:b4:15:49:c9:ea:42:ab:96:b5:0c:8b:5e:ad:fa:cc:
         04:86:da:74:34:ae:43:04:3d:3b:90:89:d7:61:a4:e4:51:67:
         6f:08:ae:ba:14:04:d7:0a:b8:3a:fe:f2:95:ce:e9:a2:25:31:
         92:69:08:ec:e3:fc:a5:3f:89:f1:2e:c6:42:e3:7e:da:45:b0:
         46:af:45:ad:82:f9:69:3c:84:6b:ba:f7:91:5f:b6:9c:ab:d1:
         03:e4:fd:30:02:2d:7c:7a:dd:56:3b:96:df:5f:1c:08:47:db:
         03:69:68:fb:c6:7a:34:f5:46:d5:7a:8f:20:22:df:6b:fb:2c:
         e4:ac:20:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:12 2026 by rpki-client