Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
File:                     M5IbTpqJQaWGu92a-LGIWo8iX6I.mft (raw, json)
Hash identifier:          89DisdWbqMow5i7xfeZFRLVocZqnilWhup4x8sbQFck=
Subject key identifier:   53:20:96:B5:4C:FC:7B:5C:F6:5E:6D:8A:44:AC:04:71:27:71:EF:01
Authority key identifier: 33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2
Certificate issuer:       /CN=A9195A3A/serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
Certificate serial:       356D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
Manifest number:          356D
Signing time:             Tue 18 Aug 2026 15:03:29 +0000
Manifest this update:     Tue 18 Aug 2026 15:03:29 +0000
Manifest next update:     Tue 25 Aug 2026 15:03:29 +0000
Files and hashes:         1: M5IbTpqJQaWGu92a-LGIWo8iX6I.crl (hash: PvtWHGpHqocqGmErVcUE91pqvLSaPG8dZICUlzoRNhI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl
                          rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 15:03:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13677 (0x356d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9195A3A, serialNumber=33921B4E9A8941A586BBDD9AF8B1885A8F225FA2
        Validity
            Not Before: Aug 18 15:03:29 2026 GMT
            Not After : Aug 25 15:03:29 2026 GMT
        Subject: CN=6a847441-93a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:aa:63:af:e7:7d:d2:f9:5d:ac:4a:49:ef:0e:
                    aa:4d:44:00:aa:b4:62:6a:71:df:7d:d3:38:74:be:
                    4b:1c:34:c3:0f:2e:d6:a3:a4:a4:02:9c:d2:c3:b2:
                    63:9b:15:66:b3:71:83:01:7d:c9:b7:83:3d:3c:98:
                    c9:de:ff:0b:29:64:08:90:01:c8:e3:af:99:92:07:
                    73:35:6a:b1:c4:04:d9:b9:d1:9d:5b:11:ea:95:02:
                    e2:6d:db:ea:7b:c0:f0:3e:92:b6:e9:86:1f:ea:19:
                    1f:01:90:09:74:c4:5e:47:f1:fb:71:bc:ff:d7:34:
                    fe:ff:61:41:ad:d8:26:b2:91:30:69:14:84:84:b4:
                    34:1b:12:9a:ff:91:e0:84:bb:a0:f0:77:f1:98:75:
                    1b:cf:79:d4:4e:8f:36:8b:d4:33:a5:8e:a8:51:1f:
                    5d:e3:92:77:fa:0d:22:e0:90:5d:9b:0e:8c:fa:b3:
                    18:6c:94:a8:a4:f0:57:54:de:0c:9a:e2:51:77:41:
                    bf:fb:89:1e:7f:c3:44:ad:2c:5b:03:ae:98:16:b8:
                    e7:71:cf:92:fb:9a:d4:ae:ce:13:0e:8c:41:28:67:
                    02:07:34:00:77:17:c4:25:48:d1:5d:f8:4d:4b:60:
                    e0:f8:19:e9:d7:d0:d4:e9:90:51:6e:68:00:67:6e:
                    6e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:20:96:B5:4C:FC:7B:5C:F6:5E:6D:8A:44:AC:04:71:27:71:EF:01
            X509v3 Authority Key Identifier:
                keyid:33:92:1B:4E:9A:89:41:A5:86:BB:DD:9A:F8:B1:88:5A:8F:22:5F:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/M5IbTpqJQaWGu92a-LGIWo8iX6I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9195A3A/298D25881D9F11E29691908F08B02CD2/M5IbTpqJQaWGu92a-LGIWo8iX6I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:ac:71:5e:8c:c1:89:77:c4:16:b9:1b:c2:03:64:cc:85:69:
         97:5f:dd:4d:86:08:a0:db:aa:b8:6d:19:de:81:fb:c9:a4:95:
         06:58:c4:05:ac:d6:ec:83:74:38:d4:13:44:1f:fb:5f:3f:a2:
         6f:c4:3c:19:ac:66:e3:21:46:e0:12:c3:09:59:c7:5c:12:22:
         47:da:16:d5:6c:e8:b0:02:a3:94:28:14:c1:ca:3f:d6:36:81:
         6d:51:4c:fc:88:29:69:73:34:63:30:46:91:e5:39:de:0e:6d:
         ef:8b:90:0f:8f:64:69:a9:5b:29:4e:13:f8:34:3a:64:43:50:
         62:6b:9f:d4:7b:23:73:d9:3b:d4:b1:7e:59:3d:7d:ba:a6:bb:
         40:03:9c:30:0d:0d:20:3e:5a:6d:91:f9:34:ba:f0:1e:ad:f1:
         5e:d7:e4:d9:3e:cc:63:78:33:c4:f9:5f:37:ab:15:c9:e2:3d:
         2a:64:bc:02:55:b4:fe:3f:c9:93:85:73:07:fe:2b:70:5b:94:
         ac:32:86:8e:38:c7:f4:b4:d4:f6:3a:12:18:b7:96:ad:e6:c7:
         f5:5b:11:ac:07:33:f5:01:24:f8:07:58:19:8e:3b:91:14:41:
         e1:1d:de:67:d8:44:98:ef:60:77:3e:6a:b3:98:a3:3f:88:ab:
         a7:e1:ce:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:40:42 2026 by rpki-client