Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File:                     rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier:          /VCxK+MqDYDXPqYp0RgaNc/2LvJEKpjTYFJB6VuEcRA=
Subject key identifier:   08:D7:0C:18:11:ED:92:BD:D0:71:60:AB:D9:77:4B:98:6B:77:12:14
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer:       /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial:       0125
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number:          0121
Signing time:             Thu 21 May 2026 05:49:03 +0000
Manifest this update:     Thu 21 May 2026 05:49:03 +0000
Manifest next update:     Thu 28 May 2026 05:49:03 +0000
Files and hashes:         1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: 9uzzM4RaUTcGGa1L3540GIKP9qVKv7IVM6dFsq+3YZI=)
                          2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:49:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 293 (0x125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
        Validity
            Not Before: May 21 05:49:03 2026 GMT
            Not After : May 28 05:49:03 2026 GMT
        Subject: CN=6a0e9ccf-488f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:c2:de:59:0f:38:b2:a9:1e:7c:95:d2:74:00:
                    f3:7d:7f:13:04:64:a3:92:c8:d5:81:fe:fd:a7:5f:
                    44:06:94:ce:6f:ba:70:86:d2:d9:38:e7:53:f2:96:
                    fd:7b:cb:7d:e0:b5:c3:9d:c4:0c:2a:9d:f8:5e:32:
                    e7:77:b4:a1:d1:56:f2:e9:bc:3a:42:c7:fb:48:a9:
                    a5:86:2a:f5:a5:7f:9b:f0:a5:4f:89:85:bc:a8:59:
                    90:07:28:a5:35:95:7c:f6:13:b0:48:f7:34:31:b9:
                    8e:e7:5a:a9:fd:97:b3:13:2b:ed:f0:1f:82:ac:c0:
                    69:bb:63:24:54:f1:92:ae:b3:cd:99:0c:5b:e5:2a:
                    56:c0:fd:a6:b3:2f:69:ec:ab:73:29:1f:cf:86:6a:
                    ee:bc:f2:4b:a1:6a:8b:83:0b:5e:0b:1b:6a:22:6b:
                    89:50:83:0b:7e:ef:93:bb:c5:a6:4a:cc:d6:24:b2:
                    01:b1:90:fc:c2:15:ef:ec:a8:58:d2:81:87:50:76:
                    33:bb:ad:05:a8:46:26:d6:34:18:ed:6a:ea:2b:e4:
                    07:4c:ce:58:b1:49:21:cf:0e:7d:d9:60:3a:61:29:
                    15:ef:4f:f1:24:2d:a6:8b:80:2b:f1:ea:02:8f:bc:
                    fc:5c:b9:32:eb:2a:56:a5:2c:9b:b5:5f:62:b1:50:
                    0f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:D7:0C:18:11:ED:92:BD:D0:71:60:AB:D9:77:4B:98:6B:77:12:14
            X509v3 Authority Key Identifier:
                keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:33:0d:e6:75:4f:a3:8b:6d:50:75:0a:66:c0:91:63:de:8c:
         bb:ef:b6:e9:08:a8:24:a9:7f:b8:0a:55:04:53:5e:7f:c9:c0:
         c0:c2:91:9a:04:35:39:0e:4f:d1:2a:21:a7:21:8c:e9:0c:6b:
         71:c5:89:7e:cd:dd:cf:96:be:e5:10:b5:b6:8f:f0:ac:37:93:
         51:be:fd:ea:80:d7:50:bd:97:53:a7:ae:2c:0a:69:85:cc:2c:
         8f:70:6a:b4:aa:a1:ac:fb:38:4f:20:a6:a6:d5:47:40:a9:01:
         18:1e:bf:46:a8:71:cc:5c:c3:a2:9a:c1:46:5a:07:3e:88:12:
         cb:aa:7a:7f:75:19:8a:41:b6:b7:45:cf:0b:01:38:7b:6b:65:
         79:2e:79:df:7d:48:ab:3f:49:67:28:d2:38:cb:a8:ef:4e:f2:
         ec:d5:a3:00:45:eb:ca:44:0c:69:f6:13:97:3c:d6:91:98:4b:
         17:b9:83:17:32:c0:9e:f5:f7:f6:b9:76:8b:d3:43:22:04:9f:
         29:54:ee:aa:c4:8b:d2:6f:c1:f0:12:27:a8:7a:c8:af:cb:07:
         e8:7b:3b:00:73:23:a2:78:35:4b:e6:d3:df:cf:b5:05:d9:33:
         8a:cb:fe:dc:38:de:23:7b:e0:db:84:e5:15:24:d8:d4:70:27:
         d4:1e:c0:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:22:57 2026 by rpki-client