Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
File:                     Ixupmdjogk9iIrhWhdB91HpwRts.mft (raw, json)
Hash identifier:          zGHk+PP7Hg450LuGP3hG2OScdEzflMN8JsVhMZyyYXc=
Subject key identifier:   67:F4:87:9A:83:A7:DB:EA:D3:85:2A:DD:23:2C:8F:38:B5:78:00:C5
Authority key identifier: 23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB
Certificate issuer:       /CN=A916B95A/serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
Certificate serial:       0161
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
Manifest number:          0161
Signing time:             Thu 21 May 2026 04:57:30 +0000
Manifest this update:     Thu 21 May 2026 04:57:30 +0000
Manifest next update:     Thu 28 May 2026 04:57:30 +0000
Files and hashes:         1: Ixupmdjogk9iIrhWhdB91HpwRts.crl (hash: DNJTSrsOEvPvXTSCRcpmOFbP5m30JYtJ8D/1v3yvTJQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl
                          rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:57:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 353 (0x161)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916B95A, serialNumber=231BA999D8E8824F6222B85685D07DD47A7046DB
        Validity
            Not Before: May 21 04:57:30 2026 GMT
            Not After : May 28 04:57:30 2026 GMT
        Subject: CN=6a0e90ba-3eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:83:7a:e5:1b:14:32:71:89:93:d9:5c:4c:92:
                    1a:3a:22:4e:95:c5:3f:aa:31:a9:12:bd:c2:80:fd:
                    23:0f:6c:f6:7d:c0:28:55:86:23:b5:af:0e:fb:56:
                    59:b2:c2:43:ef:8a:f1:90:2c:81:07:f5:7d:8a:21:
                    ae:77:d6:9c:bf:fe:57:57:50:a7:8e:61:78:61:12:
                    00:a1:a2:dd:0b:0f:7b:85:77:17:d2:8d:10:2c:9f:
                    4f:4f:61:c6:3c:25:ac:68:86:c3:d0:34:97:2c:64:
                    25:e0:73:8f:52:a8:d0:c9:c9:7a:42:9b:fe:b2:10:
                    3f:a1:15:aa:31:b9:12:52:d3:92:e5:70:e5:98:dd:
                    24:ec:ac:25:eb:fc:d9:b9:fd:d4:76:91:99:03:48:
                    bf:c6:d5:d3:36:1c:38:da:9d:52:84:5e:ad:a8:07:
                    cf:fa:1f:21:94:1b:f5:df:4c:1a:f5:7e:93:a9:b7:
                    90:52:5d:25:a1:3d:ec:3c:88:82:4d:bb:06:9a:16:
                    66:b4:47:45:21:3c:91:85:05:75:17:28:dc:88:3c:
                    03:a2:a9:01:3f:1a:83:df:62:0a:b0:b2:61:1f:1d:
                    95:df:b7:fc:68:45:53:6c:f9:92:9a:d9:1e:4a:23:
                    d8:93:22:67:19:53:0c:04:d8:0c:fb:35:e7:04:1c:
                    73:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F4:87:9A:83:A7:DB:EA:D3:85:2A:DD:23:2C:8F:38:B5:78:00:C5
            X509v3 Authority Key Identifier:
                keyid:23:1B:A9:99:D8:E8:82:4F:62:22:B8:56:85:D0:7D:D4:7A:70:46:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ixupmdjogk9iIrhWhdB91HpwRts.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916B95A/5A19BDCA37AE11EF8A458E37C4F9AE02/Ixupmdjogk9iIrhWhdB91HpwRts.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:f4:bf:ba:80:d9:4f:14:eb:e8:0a:53:f3:d2:51:9f:65:5a:
         a2:47:93:b8:f4:04:98:ec:9b:50:dd:54:a3:a4:9a:fb:60:1c:
         28:4b:df:a7:dd:1b:d3:81:8c:44:00:e4:f2:b7:7d:67:80:41:
         59:4c:5b:48:99:29:db:54:07:4f:cc:96:13:fb:bb:5a:a7:0c:
         53:3c:65:c3:a8:30:ee:23:a0:f5:e4:e1:b5:7f:1a:4f:a2:b6:
         95:86:6c:91:55:fb:a0:cf:50:39:94:43:1b:04:78:fc:d2:7c:
         2f:0e:68:9b:bc:1c:aa:6b:5f:6c:3d:88:3a:1c:b7:c7:90:47:
         a8:0c:e8:ec:ba:76:e4:fc:9e:4b:f4:ac:28:f8:71:ca:37:3d:
         a2:6a:a1:00:71:b4:cb:a5:cd:a0:f1:cd:de:79:a2:5c:43:73:
         a5:f4:5a:8e:05:8c:7a:bb:47:ca:cc:d9:76:22:c4:06:40:98:
         a5:ee:89:fe:d6:98:5c:87:f7:b7:eb:2a:02:56:9e:d6:af:f2:
         ea:a2:bb:9f:af:c5:ed:10:99:6c:89:66:73:f4:a1:0e:bd:ce:
         58:ab:7f:ea:1f:8a:ee:69:27:8d:68:d7:5f:93:2d:24:bc:f2:
         0f:c9:34:eb:96:82:4a:a7:9f:91:1d:86:25:ef:58:b6:e2:c6:
         70:21:82:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:39:24 2026 by rpki-client