Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
File:                     znNgvRqU6JF702ckM_gh7HgKjSg.mft (raw, json)
Hash identifier:          54TJ6M3/9KrdNGcBB5rbBpPFolUCgZ1w9sNCMsCym58=
Subject key identifier:   A7:99:1E:4C:5D:CA:FF:9A:CB:5A:43:B3:8E:41:DA:36:BA:76:AE:65
Authority key identifier: CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28
Certificate issuer:       /CN=A915E1F9/serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
Certificate serial:       85
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
Manifest number:          85
Signing time:             Thu 21 May 2026 07:42:18 +0000
Manifest this update:     Thu 21 May 2026 07:42:17 +0000
Manifest next update:     Thu 28 May 2026 07:42:17 +0000
Files and hashes:         1: znNgvRqU6JF702ckM_gh7HgKjSg.crl (hash: 9QP20kVCsnwLcDRX0yPhEcQ5spGrgJGbolgXnYVWNpY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl
                          rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:42:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 133 (0x85)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E1F9, serialNumber=CE7360BD1A94E8917BD3672433F821EC780A8D28
        Validity
            Not Before: May 21 07:42:17 2026 GMT
            Not After : May 28 07:42:17 2026 GMT
        Subject: CN=6a0eb75a-7a9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fd:1b:df:fa:d5:91:28:5b:a7:fc:ca:98:27:
                    09:15:f5:29:30:9f:d4:d1:86:3b:aa:60:e8:36:fb:
                    d1:2b:9c:b7:2d:89:df:e1:3d:7e:f1:c2:63:3e:23:
                    13:58:ce:1d:7b:1c:57:b9:76:62:3e:1c:57:ef:8a:
                    d6:54:81:25:2f:3b:6d:4e:a8:85:1e:11:62:6e:3f:
                    25:28:ef:a8:ae:a2:7a:54:be:b5:47:bf:e5:9d:b4:
                    43:32:17:23:59:37:10:82:d7:38:8e:4f:be:b7:f6:
                    fd:1c:13:c4:94:e8:57:86:af:85:f2:ae:b4:89:8a:
                    15:c0:d4:5b:f4:67:5a:b7:0b:85:99:6f:1f:a0:f0:
                    e6:a1:56:70:26:5b:54:f9:3f:9f:dc:e6:65:b1:c1:
                    11:83:d1:53:a0:71:b6:fe:46:89:24:ff:9d:80:d9:
                    eb:4e:94:fc:01:4b:4a:4d:d1:dc:21:33:67:95:be:
                    48:eb:a5:9f:3c:72:3f:56:b4:98:21:58:0a:e7:49:
                    c3:f6:bf:8d:2c:4b:98:6b:77:bb:40:3b:a0:4b:39:
                    94:99:b3:06:42:06:f9:ab:4d:94:b1:41:51:19:55:
                    95:57:ad:a5:59:8d:0f:91:89:ae:7c:a4:ff:6d:01:
                    45:62:9e:29:2a:e7:1a:ec:48:d2:ff:2e:df:d9:af:
                    1f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:99:1E:4C:5D:CA:FF:9A:CB:5A:43:B3:8E:41:DA:36:BA:76:AE:65
            X509v3 Authority Key Identifier:
                keyid:CE:73:60:BD:1A:94:E8:91:7B:D3:67:24:33:F8:21:EC:78:0A:8D:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/znNgvRqU6JF702ckM_gh7HgKjSg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E1F9/AFE4A90A8DE211F0A308AC7CC4F9AE02/znNgvRqU6JF702ckM_gh7HgKjSg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:54:d3:a8:32:cf:98:0c:ab:2f:c4:fa:e6:1c:06:a8:8b:ae:
         fc:6b:7f:23:58:53:d7:15:61:b6:8d:c6:9f:e6:f5:a0:4e:48:
         95:5b:38:11:bc:65:69:f2:fc:97:cd:ad:9d:c2:8e:1f:51:ad:
         dc:dd:fd:6e:19:32:6f:76:c3:38:cd:74:d1:84:a9:7a:77:9b:
         c3:a1:c2:4a:bb:d1:3a:20:71:f4:2e:f6:56:aa:7c:04:49:6c:
         ea:b3:61:1b:ac:e1:d3:f9:5b:d0:89:cd:04:08:b0:3d:e6:61:
         b8:cc:09:98:6c:7d:d2:db:98:8b:bc:08:8f:7d:a0:4f:ad:2e:
         94:6e:39:72:c5:e8:11:f4:fa:f5:fb:7d:94:7c:d4:d7:c5:56:
         7d:8e:dd:a4:03:25:e0:af:d1:b6:8f:4c:ee:b3:53:c8:f4:ee:
         26:ba:f5:4d:bd:45:a3:63:ba:4f:3c:01:d7:14:13:a5:3b:70:
         49:67:a4:70:c3:de:d2:c3:2d:8c:98:91:c6:f8:15:b9:d8:e4:
         56:86:56:b7:58:a1:ee:26:f6:d0:a7:78:8a:69:e3:78:d6:fb:
         ac:9a:95:34:32:f3:1b:d2:c9:a4:26:c8:20:05:09:3d:07:f2:
         8b:61:e4:d5:3b:bb:de:a3:1c:75:27:9d:3e:f0:d4:a3:df:28:
         06:94:91:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:04:49 2026 by rpki-client