Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
File:                     CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft (raw, json)
Hash identifier:          m4ijjgdzaekm72ts9PYCi9eqMVAsVy4rcfesfPATIp4=
Subject key identifier:   59:4D:22:5B:B8:53:CB:7A:D3:5F:13:81:41:1E:BA:86:5B:D2:44:A2
Authority key identifier: 0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A
Certificate issuer:       /CN=A91705D7/serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
Certificate serial:       01BD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
Manifest number:          01B4
Signing time:             Wed 19 Aug 2026 04:44:16 +0000
Manifest this update:     Wed 19 Aug 2026 04:44:15 +0000
Manifest next update:     Wed 26 Aug 2026 04:44:15 +0000
Files and hashes:         1: CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl (hash: RaHxxvj9EeUQRqPhNJdyTEz+ykWFLxUu/gzJWmZqL8s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl
                          rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 04:44:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 445 (0x1bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91705D7, serialNumber=0A8BD2B02FF695171DC01E8C7E4AA2D988DA3B9A
        Validity
            Not Before: Aug 19 04:44:15 2026 GMT
            Not After : Aug 26 04:44:15 2026 GMT
        Subject: CN=6a85349f-7436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:18:76:df:78:40:48:b2:ea:3e:a6:75:1a:
                    6d:88:28:81:ee:ed:c1:65:17:44:09:6f:0f:76:3f:
                    93:3f:6a:11:69:0c:fd:fc:69:a7:4b:95:75:4e:cb:
                    a0:e9:76:5b:74:f3:b1:23:80:c8:4e:ee:47:ce:91:
                    ff:29:96:36:b7:a9:65:b8:40:01:c0:83:53:d4:eb:
                    4a:4f:92:6a:ac:c3:50:ed:b4:ec:9e:7a:21:2b:9b:
                    cc:fc:e6:19:bd:22:5e:25:d0:16:36:44:43:45:34:
                    47:ba:65:c8:14:c3:df:8d:77:3a:19:f4:12:04:d4:
                    1d:9a:3f:9f:7f:8f:57:3e:67:bd:9a:0e:5c:ed:56:
                    73:04:e3:e2:51:19:2a:08:ea:5a:ac:cd:cb:b6:bf:
                    12:0e:74:a7:12:38:4a:1f:8e:7c:b2:31:10:90:eb:
                    12:51:58:c7:e3:0b:8e:a9:62:ac:4f:d8:ae:b4:9d:
                    cd:68:33:5f:0c:f3:f1:9a:8c:20:63:dc:8d:47:b7:
                    73:3f:3b:32:d9:cd:70:ca:8e:4b:44:38:8f:19:71:
                    22:e7:49:a8:f2:b4:9e:b6:af:a5:d0:53:1f:28:08:
                    80:b1:3d:6b:09:0c:b7:ce:fd:fe:8f:9e:e4:89:cd:
                    43:8b:75:e8:dd:db:dd:a4:66:44:3a:d4:50:c3:34:
                    f3:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:4D:22:5B:B8:53:CB:7A:D3:5F:13:81:41:1E:BA:86:5B:D2:44:A2
            X509v3 Authority Key Identifier:
                keyid:0A:8B:D2:B0:2F:F6:95:17:1D:C0:1E:8C:7E:4A:A2:D9:88:DA:3B:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CovSsC_2lRcdwB6Mfkqi2YjaO5o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91705D7/A0816ED016D811EFBF901E5FC4F9AE02/CovSsC_2lRcdwB6Mfkqi2YjaO5o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a2:10:fe:6a:0c:fc:5d:99:be:0c:2d:b4:70:96:98:97:b9:f0:
         bb:c0:49:fc:66:50:ba:c8:8b:a8:9e:ca:7d:3e:e0:08:42:99:
         2d:a9:33:90:ba:32:04:68:e7:35:8a:0d:40:50:55:bd:60:b1:
         8b:fd:13:07:a7:58:d5:38:22:48:d0:5f:ba:9a:d4:99:0a:ef:
         c0:3c:b1:3b:bf:b9:b8:02:43:e6:ce:d3:ef:13:f4:57:36:4e:
         bd:3c:fa:76:63:05:7c:be:ea:4f:9a:ef:d2:7f:72:21:04:6e:
         e6:1c:14:b6:ef:1e:d0:3d:43:97:64:2f:ac:c1:e1:af:b9:0a:
         8b:db:7e:d5:48:0b:c1:16:db:f7:27:c8:0a:79:03:8a:80:49:
         a0:cc:1c:c0:86:02:3d:60:a3:1c:fc:ee:6b:f2:f7:32:c1:f0:
         5d:b7:e3:ff:53:75:96:8b:f0:69:c1:26:85:68:84:a4:08:08:
         a8:9f:38:e5:2e:56:b6:b1:4b:f2:c7:d5:f8:03:08:2d:9d:69:
         31:65:f8:1e:b5:fc:0f:6d:c9:d7:dd:da:38:0f:c6:3f:ac:8e:
         b9:d6:b7:95:5b:79:bd:3f:56:ba:49:98:f6:e3:33:e9:a5:e8:
         cd:55:cf:7e:f9:53:72:6b:8a:c4:45:35:2a:be:3d:65:87:08:
         d0:a1:00:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:46:01 2026 by rpki-client