Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
File:                     z28S295L6RNFgVj1x3hccSkIVVw.mft (raw, json)
Hash identifier:          2kPerXpQn5LjzeMaVXOO56TTSCsGyNe/TVBp0J72rjg=
Subject key identifier:   F9:54:8B:DE:DC:06:78:20:55:AD:CE:F7:F0:4E:5E:63:A3:8B:BB:A6
Authority key identifier: CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C
Certificate issuer:       /CN=A91725C8/serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
Certificate serial:       AB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
Manifest number:          AB
Signing time:             Thu 21 May 2026 07:17:23 +0000
Manifest this update:     Thu 21 May 2026 07:17:23 +0000
Manifest next update:     Thu 28 May 2026 07:17:23 +0000
Files and hashes:         1: z28S295L6RNFgVj1x3hccSkIVVw.crl (hash: X0aMZpZV8XKuRXNY/mf1OcnAIZIudAp6IBf+aUlXC/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl
                          rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 07:17:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91725C8, serialNumber=CF6F12DBDE4BE913458158F5C7785C712908555C
        Validity
            Not Before: May 21 07:17:23 2026 GMT
            Not After : May 28 07:17:23 2026 GMT
        Subject: CN=6a0eb183-6512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:75:f9:3d:08:e6:9c:9e:98:75:a3:86:d2:ac:
                    a5:7a:fd:13:57:4d:f7:81:2d:c8:40:a1:c6:9b:2c:
                    c2:be:25:4a:ca:f6:09:50:63:9f:93:c2:4f:c5:7e:
                    dc:61:59:c0:16:40:63:61:28:1b:9e:86:0d:9a:c0:
                    27:5e:6f:4f:fc:85:b6:4b:89:6d:fe:e6:d7:aa:88:
                    13:56:d6:8c:54:f8:60:39:15:1e:92:4d:9c:f2:e0:
                    23:75:f8:9b:ea:70:30:63:1e:44:55:58:80:e2:f5:
                    17:2d:ee:e2:63:7a:fe:03:6b:28:0f:d3:29:d3:2f:
                    6b:89:ce:ab:24:e4:26:e1:68:30:51:2b:db:2b:41:
                    40:28:8f:60:a3:df:4d:d1:aa:5f:7d:50:50:14:06:
                    b7:8a:0d:1f:40:aa:6b:6a:a3:5c:62:93:af:ba:cb:
                    c3:44:9f:e9:2d:85:58:b2:d8:0c:b6:e9:91:3f:54:
                    06:fc:b1:7c:09:2c:e2:e0:4b:34:4a:a8:fb:8d:e4:
                    e9:a1:fc:0f:70:84:9e:d4:fd:ea:c6:26:0b:6f:91:
                    21:09:df:32:c7:23:67:9d:ba:e9:d0:4e:05:fc:83:
                    05:d5:35:b8:3a:2b:85:2b:b1:fa:67:47:0d:2c:9a:
                    f8:23:ee:91:c4:dd:54:79:eb:1b:58:cc:77:ee:ad:
                    7d:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:54:8B:DE:DC:06:78:20:55:AD:CE:F7:F0:4E:5E:63:A3:8B:BB:A6
            X509v3 Authority Key Identifier:
                keyid:CF:6F:12:DB:DE:4B:E9:13:45:81:58:F5:C7:78:5C:71:29:08:55:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/z28S295L6RNFgVj1x3hccSkIVVw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91725C8/3BCD1BEA559511F0A935D22FC4F9AE02/z28S295L6RNFgVj1x3hccSkIVVw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:24:aa:dc:b0:55:6d:6e:d0:76:41:be:62:ea:fe:56:6b:01:
         3c:9e:e3:44:6e:7e:79:a9:7e:73:58:a7:5e:14:de:7b:91:0f:
         13:12:5d:a3:26:8b:0d:c2:8d:45:6e:99:f3:e4:70:bd:47:df:
         ec:66:5a:af:b5:81:48:50:ae:f1:73:59:bc:51:a2:4d:14:81:
         ec:01:06:09:56:af:98:71:8b:f7:c0:99:e7:f8:09:8e:9a:10:
         b0:73:1e:10:cf:fe:c3:a7:1a:f7:36:e0:27:ce:96:ea:f2:e1:
         0c:f4:db:0f:9b:9e:8b:04:36:e8:43:5e:f7:83:db:aa:16:d4:
         fc:43:77:47:fa:31:25:f5:49:f0:e8:82:23:37:16:51:bf:69:
         e7:44:44:dd:99:2b:ca:ef:16:d9:7b:60:5d:0c:b0:52:5a:e9:
         4e:a7:85:33:52:78:9b:9e:0a:93:7f:c3:37:51:e1:02:19:09:
         34:92:b8:52:53:41:3a:d6:ca:3e:2f:32:77:88:81:ba:b3:08:
         ce:87:43:82:eb:3a:b2:fc:58:65:f7:9f:cc:65:d8:80:c1:9e:
         b6:85:92:de:a0:d7:25:73:47:d6:b2:b1:0b:7a:6c:83:75:75:
         d9:19:a4:cf:7d:db:6b:91:1f:1c:b8:0f:84:e5:3d:94:40:ea:
         7b:60:cd:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:00 2026 by rpki-client