Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
File:                     bsX6TBatart948lke3pqfNfmUOw.mft (raw, json)
Hash identifier:          KfZIrqqojMk/gGcxxLr+BfAAQQno2cEWdG45LFzpTV4=
Subject key identifier:   A3:8D:BF:E0:07:DB:9D:19:F3:77:C0:C0:BF:58:22:E6:CD:1F:22:CC
Authority key identifier: 6E:C5:FA:4C:16:AD:6A:BB:7D:E3:C9:64:7B:7A:6A:7C:D7:E6:50:EC
Certificate issuer:       /CN=A914D12C/serialNumber=6EC5FA4C16AD6ABB7DE3C9647B7A6A7CD7E650EC
Certificate serial:       5B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsX6TBatart948lke3pqfNfmUOw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
Manifest number:          5B
Signing time:             Thu 21 May 2026 08:15:07 +0000
Manifest this update:     Thu 21 May 2026 08:15:06 +0000
Manifest next update:     Thu 28 May 2026 08:15:06 +0000
Files and hashes:         1: bsX6TBatart948lke3pqfNfmUOw.crl (hash: V67G2HvwNUMm7ieGHT8uU1kHTdqgzEzhk/DX6pY7xys=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.crl
                          rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsX6TBatart948lke3pqfNfmUOw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 08:15:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914D12C, serialNumber=6EC5FA4C16AD6ABB7DE3C9647B7A6A7CD7E650EC
        Validity
            Not Before: May 21 08:15:06 2026 GMT
            Not After : May 28 08:15:06 2026 GMT
        Subject: CN=6a0ebf0a-f333
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c6:fa:0a:f6:b6:cf:dc:0d:cf:dd:e3:95:e5:
                    ac:2c:08:7d:0c:32:72:52:c5:44:e1:e2:f2:1e:20:
                    d1:ae:f6:af:6a:4c:b7:08:c7:38:20:7e:65:99:36:
                    08:56:5d:bb:2d:5f:e9:f9:f4:48:6d:69:3f:a6:4e:
                    58:ff:81:05:a4:86:b2:bb:90:c3:ed:ef:48:15:77:
                    29:f2:e9:7b:85:b1:d5:00:53:24:fa:03:87:7e:f2:
                    d3:af:c0:6e:d1:5c:e9:c4:86:25:14:77:d7:ad:d3:
                    e5:44:89:e7:74:af:9b:3b:0b:69:6f:35:32:ec:22:
                    7c:7e:6e:4c:71:9a:2a:00:34:95:56:7a:7a:65:66:
                    9f:53:ed:cb:a7:d2:2f:04:46:99:37:10:24:4c:e4:
                    6c:b8:b8:74:72:48:50:a7:46:30:16:4c:0c:ac:e2:
                    c2:0a:83:e7:dc:8c:db:65:b2:7d:3e:fd:66:61:24:
                    b8:95:29:88:a5:88:cd:ea:5c:59:a2:e7:fe:19:95:
                    eb:ea:ab:a8:6c:ae:21:91:4a:29:ea:78:b3:17:d0:
                    d8:b2:c1:57:68:6f:32:9e:81:21:e3:c3:f2:12:6e:
                    57:d1:2f:dc:b3:4b:7a:31:bc:14:98:7f:fe:e2:71:
                    25:02:7e:90:ed:d8:31:23:61:b7:d5:f1:e5:f1:01:
                    82:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8D:BF:E0:07:DB:9D:19:F3:77:C0:C0:BF:58:22:E6:CD:1F:22:CC
            X509v3 Authority Key Identifier:
                keyid:6E:C5:FA:4C:16:AD:6A:BB:7D:E3:C9:64:7B:7A:6A:7C:D7:E6:50:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bsX6TBatart948lke3pqfNfmUOw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914D12C/C8F1AEEACE6D11F0B7A3A22CC4F9AE02/bsX6TBatart948lke3pqfNfmUOw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:e6:f7:11:0f:53:49:da:32:c9:41:44:86:9e:22:2a:ad:8e:
         19:b1:63:bc:ff:4b:1e:ad:48:bd:d7:53:00:5d:90:3b:d9:7e:
         9f:4b:e1:b8:4e:c7:c3:4d:56:4e:ef:53:e7:cb:e7:db:b0:77:
         a9:0c:ac:8e:e4:f2:b5:00:d4:1e:29:30:89:6c:69:e8:8f:2e:
         29:95:91:55:f2:18:4b:c0:b9:30:6d:c7:2b:47:09:70:2a:9f:
         68:f5:2c:98:d2:96:56:b6:06:a9:6c:3f:67:72:ea:47:09:5c:
         09:f3:e2:9c:5a:ff:04:97:77:ad:e1:2b:c5:37:52:24:c4:22:
         cd:2a:33:24:f5:83:31:fc:27:21:0b:44:81:bb:21:5a:41:d7:
         ac:de:8a:8f:b8:64:46:bc:80:51:7f:10:4a:b9:dd:40:92:6a:
         74:16:8f:be:e9:23:4a:48:fd:32:62:5c:28:03:01:fe:c7:29:
         fb:b3:88:75:70:ff:c9:27:e5:68:22:24:c0:9c:71:b6:b2:d9:
         93:a5:ab:bb:a4:d6:d6:c2:75:00:d7:df:d1:b6:a3:ea:7a:cb:
         5f:5c:82:e6:98:64:09:ad:84:31:be:44:09:94:e7:e8:28:da:
         32:99:ca:20:e6:20:90:a3:9f:d6:bb:1d:9a:fd:57:c2:fc:39:
         8d:be:da:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:15:39 2026 by rpki-client