Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
File:                     se6IcQY6AQgzW9-qPjoT-cnHkN4.mft (raw, json)
Hash identifier:          HrGssKnDHqe6L5gq4MSN84YoM3vn3tuwCoc+Ns/lZFc=
Subject key identifier:   21:FF:C7:5B:11:60:F1:5A:BC:B8:85:4D:9A:2A:60:D5:43:99:E6:34
Authority key identifier: B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE
Certificate issuer:       /CN=A919EC2D/serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
Manifest number:          051A
Signing time:             Sun 05 Apr 2026 02:00:18 +0000
Manifest this update:     Sun 05 Apr 2026 02:00:18 +0000
Manifest next update:     Sun 12 Apr 2026 02:00:18 +0000
Files and hashes:         1: se6IcQY6AQgzW9-qPjoT-cnHkN4.crl (hash: f5vMg/vgrKepE9dJOArNX5VV/Pf7IxtTzfIlRx345Bo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl
                          rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 02:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919EC2D, serialNumber=B1EE8871063A0108335BDFAA3E3A13F9C9C790DE
        Validity
            Not Before: Apr  5 02:00:18 2026 GMT
            Not After : Apr 12 02:00:18 2026 GMT
        Subject: CN=69d1c232-a7c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:51:11:c2:c2:d4:7f:66:c4:ee:cb:e5:54:81:
                    92:55:13:59:0d:50:f5:f6:b8:b3:b4:18:f3:b5:90:
                    a7:62:9b:c3:57:32:ba:5f:71:30:60:f5:2e:c3:8c:
                    c0:ad:8a:bb:d2:cc:7c:7b:30:d6:01:8b:84:3f:39:
                    44:87:d5:7f:5c:99:b1:23:42:22:69:ae:65:b9:21:
                    be:88:94:8c:f2:24:be:b1:33:92:d6:74:1c:01:31:
                    ab:5c:9e:c9:5a:b7:3d:3d:71:ec:75:1c:a3:35:13:
                    90:fe:fa:de:ab:04:2d:1d:d0:64:56:95:df:2b:53:
                    77:4e:58:a5:7a:9c:07:f7:7e:e7:11:81:f5:66:e5:
                    38:30:5b:86:99:77:23:c8:65:55:fd:f4:71:50:82:
                    3f:c8:c5:05:74:b1:72:73:72:43:e4:bd:d8:00:7c:
                    ee:63:d3:37:d1:1a:c9:3d:8b:e3:c0:b2:47:b0:eb:
                    21:c6:9a:9f:a7:a3:0c:54:56:73:be:8f:22:a7:ac:
                    08:57:b0:25:30:2f:59:c0:7b:0c:6c:b7:19:86:89:
                    f7:b1:18:1d:e7:ef:6a:d1:c0:c7:4c:df:76:02:5d:
                    fb:a0:72:a1:1b:f6:38:ba:a4:e2:0d:ef:91:9c:2b:
                    80:f4:89:d4:cb:2d:82:71:64:c7:5e:07:fe:12:a0:
                    2d:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:FF:C7:5B:11:60:F1:5A:BC:B8:85:4D:9A:2A:60:D5:43:99:E6:34
            X509v3 Authority Key Identifier:
                keyid:B1:EE:88:71:06:3A:01:08:33:5B:DF:AA:3E:3A:13:F9:C9:C7:90:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/se6IcQY6AQgzW9-qPjoT-cnHkN4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919EC2D/82B725E8BCE311ED849F9331C4F9AE02/se6IcQY6AQgzW9-qPjoT-cnHkN4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fa:df:ee:00:6c:9a:cd:04:97:fe:d9:70:55:aa:70:cb:ae:
         b2:04:18:c6:a9:c1:f9:82:7b:43:21:19:cc:ed:a4:21:98:9e:
         04:00:ee:43:d8:8c:1e:bb:67:2b:5d:d4:ca:f9:62:58:8e:90:
         23:1f:a4:e9:f2:dc:ff:5f:44:77:fd:37:48:41:4b:e7:d3:e7:
         58:12:a8:87:5b:d4:a5:f2:7a:72:5b:b6:ef:78:91:b1:d8:fb:
         95:6b:72:fd:bd:02:7d:0f:67:5f:de:5a:b8:1b:f5:40:0f:b2:
         a8:ac:dc:06:03:e4:c3:62:a6:d7:2c:3e:63:48:dc:15:ad:7d:
         5e:26:a8:03:d4:23:79:c3:2e:6e:6c:4f:d2:7a:01:10:6c:0e:
         6b:ce:ae:eb:68:85:dd:24:ec:a9:1c:2c:40:71:7b:c9:19:89:
         9f:d3:f1:d0:ea:56:da:e9:f0:83:b4:6c:08:6f:76:c4:70:15:
         b0:0a:80:90:d3:7c:35:1b:74:c2:c5:73:92:04:d6:b9:66:9c:
         03:21:a9:f9:45:4f:8b:fd:b4:56:da:e0:09:e3:ed:bb:43:ee:
         bb:e0:fe:f6:35:68:29:d8:6d:63:92:47:80:8c:75:6e:8c:37:
         c7:3f:9b:c5:f0:13:8c:29:b4:1d:e3:88:7b:90:e9:2f:ca:13:
         cb:50:1d:c0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAkkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUVDMkQxMTAvBgNVBAUTKEIxRUU4ODcxMDYzQTAxMDgzMzVCREZBQTNFM0ExM0Y5
QzlDNzkwREUwHhcNMjYwNDA1MDIwMDE4WhcNMjYwNDEyMDIwMDE4WjAYMRYwFAYD
VQQDEw02OWQxYzIzMi1hN2MzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA8lERwsLUf2bE7svlVIGSVRNZDVD19riztBjztZCnYpvDVzK6X3EwYPUuw4zA
rYq70sx8ezDWAYuEPzlEh9V/XJmxI0Iiaa5luSG+iJSM8iS+sTOS1nQcATGrXJ7J
Wrc9PXHsdRyjNROQ/vreqwQtHdBkVpXfK1N3TlilepwH937nEYH1ZuU4MFuGmXcj
yGVV/fRxUII/yMUFdLFyc3JD5L3YAHzuY9M30RrJPYvjwLJHsOshxpqfp6MMVFZz
vo8ip6wIV7AlMC9ZwHsMbLcZhon3sRgd5+9q0cDHTN92Al37oHKhG/Y4uqTiDe+R
nCuA9InUyy2CcWTHXgf+EqAt/wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCH/x1sR
YPFavLiFTZoqYNVDmeY0MB8GA1UdIwQYMBaAFLHuiHEGOgEIM1vfqj46E/nJx5De
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RUMyRC84MkI3MjVFOEJD
RTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFRZ3pXOS1xUGpvVC1jbkhr
TjQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3NlNkljUVk2QVFnelc5LXFQam9ULWNuSGtONC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RUMyRC84MkI3MjVFOEJDRTMxMUVEODQ5RjkzMzFDNEY5QUUwMi9zZTZJY1FZNkFR
Z3pXOS1xUGpvVC1jbkhrTjQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAavrf7gBsms0El/7ZcFWqcMuusgQYxqnB+YJ7QyEZzO2kIZieBADuQ9iMHrtn
K13UyvliWI6QIx+k6fLc/19Ed/03SEFL59PnWBKoh1vUpfJ6clu273iRsdj7lWty
/b0CfQ9nX95auBv1QA+yqKzcBgPkw2Km1yw+Y0jcFa19XiaoA9QjecMubmxP0noB
EGwOa86u62iF3STsqRwsQHF7yRmJn9Px0OpW2unwg7RsCG92xHAVsAqAkNN8NRt0
wsVzkgTWuWacAyGp+UVPi/20VtrgCePtu0Puu+D+9jVoKdhtY5JHgIx1bow3xz+b
xfATjCm0HeOIe5DpL8oTy1AdwA==
-----END CERTIFICATE-----
Generated at Mon Apr 6 08:30:39 2026 by rpki-client