Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft
File:                     mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft (raw, json)
Hash identifier:          ND8lQJG7GX/ltct8Z7x3Z8Vy6wpEuf5miaikMSRlO2E=
Subject key identifier:   31:21:F9:0C:60:D2:BB:CA:48:25:74:78:8B:AF:68:16:28:C5:8F:04
Authority key identifier: 99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B
Certificate issuer:       /CN=A9192122/serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B
Certificate serial:       44
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft
Manifest number:          44
Signing time:             Tue 19 May 2026 08:19:53 +0000
Manifest this update:     Tue 19 May 2026 08:19:52 +0000
Manifest next update:     Tue 26 May 2026 08:19:52 +0000
Files and hashes:         1: mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl (hash: 4V1YEH0OJBP7OjiVDOyMxJ+pGhgSjtFUYF4CoiCyeik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl
                          rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:19:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192122, serialNumber=994B19ECD3A3D53A67954639698F5CDF898F952B
        Validity
            Not Before: May 19 08:19:52 2026 GMT
            Not After : May 26 08:19:52 2026 GMT
        Subject: CN=6a0c1d29-8f1b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1f:99:84:5e:8b:d8:d9:26:a0:dd:7c:3e:2a:
                    76:80:c0:cb:2e:ac:47:a1:aa:14:71:f6:82:a6:c8:
                    da:68:79:f3:6c:19:4e:84:3f:38:66:e1:9c:f7:55:
                    4c:c4:85:7b:18:2d:e2:b6:57:45:a1:27:00:38:41:
                    16:a2:68:e4:ef:04:18:c1:d4:84:f5:e2:5c:86:43:
                    44:8b:42:5a:02:f8:de:2c:82:a5:c3:73:7b:47:96:
                    51:ac:56:65:91:f0:2e:c0:37:00:96:71:f9:23:fd:
                    0a:a0:1e:32:97:fb:e5:10:88:43:1f:dc:96:ef:57:
                    d1:62:d7:aa:51:38:83:6d:36:9c:22:01:0f:8e:5a:
                    81:c3:f5:84:82:03:9d:ec:a2:d0:d6:df:66:9b:86:
                    f5:99:14:3c:f8:82:97:d5:5c:0e:6b:b8:cf:5a:45:
                    f3:e5:dd:75:5c:ec:af:2b:44:89:cc:a8:3f:c2:05:
                    72:e2:fe:8a:84:d7:0e:96:0a:57:9f:5f:3c:17:ee:
                    16:57:18:44:6f:81:73:a9:de:ee:28:c4:17:d4:74:
                    95:33:38:56:13:b1:98:48:8e:18:6e:25:f0:ff:08:
                    bb:4a:94:f4:69:73:9c:b3:d2:99:04:ef:07:9b:d9:
                    8e:4e:ad:97:39:c2:d1:0b:3c:b0:e5:32:75:0e:b1:
                    d3:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:21:F9:0C:60:D2:BB:CA:48:25:74:78:8B:AF:68:16:28:C5:8F:04
            X509v3 Authority Key Identifier:
                keyid:99:4B:19:EC:D3:A3:D5:3A:67:95:46:39:69:8F:5C:DF:89:8F:95:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mUsZ7NOj1TpnlUY5aY9c34mPlSs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192122/6FD5EC3EF3AE11F0B6DD6D9C3A6F56BC/mUsZ7NOj1TpnlUY5aY9c34mPlSs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:80:b1:b7:80:01:ec:c8:3c:e5:fe:ef:d8:09:00:a6:50:
         e5:cc:dd:f7:1d:d9:36:3b:84:27:34:9b:0f:e7:a5:52:06:f3:
         22:11:ca:9b:a4:80:4e:cb:67:da:82:c9:a1:a0:b8:ef:7c:ba:
         19:46:9a:b5:98:6c:ac:1d:90:d8:e4:3c:14:4e:06:83:a2:e0:
         c9:f5:da:9b:8d:28:42:3b:a4:65:38:87:c0:8e:19:04:ef:64:
         db:99:41:15:3e:5d:0b:1a:76:4f:49:e6:9f:c7:36:89:f0:5e:
         30:a0:5a:92:59:2e:e7:12:85:51:cd:4f:b4:cd:13:04:99:63:
         17:84:77:81:82:ed:9b:6f:fd:12:a9:5b:84:cb:71:86:60:27:
         a9:44:03:6e:95:12:f8:36:0b:37:b5:69:bd:9e:f4:4c:71:a8:
         44:43:e0:97:9b:bd:69:bb:39:ec:33:c7:b8:2d:38:62:15:83:
         97:7c:c3:78:77:1d:a1:cc:3a:6a:2d:58:4a:ac:33:1d:03:c3:
         c2:09:7e:1b:0b:b8:1a:e0:ae:ec:fb:57:bc:c8:67:4d:70:9c:
         2f:70:fb:cb:26:f5:af:82:a2:08:bd:d9:a9:6d:e9:dc:60:f7:
         d7:13:68:2d:08:1c:38:42:15:46:29:5b:5e:37:bf:54:d9:4f:
         b3:6c:0d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:46 2026 by rpki-client