Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          RExDJSy4qsddsQL9lBqGKdbzsuKRfW6z/N+4nEsfUmw=
Subject key identifier:   6F:55:C7:7D:39:92:A0:70:6D:FB:E4:56:77:85:42:5D:34:F3:26:4F
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       2496
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          625A
Signing time:             Wed 20 May 2026 14:15:27 +0000
Manifest this update:     Wed 20 May 2026 14:15:27 +0000
Manifest next update:     Wed 27 May 2026 14:15:27 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: C1Xs8qGLf6A/og25t0/0Pya3HNPCUN0Lbl6nZ5kr5EY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9366 (0x2496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: May 20 14:15:27 2026 GMT
            Not After : May 27 14:15:27 2026 GMT
        Subject: CN=6a0dc1ff-9b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:cd:52:35:e8:05:9a:c3:9e:95:3d:1c:ef:51:
                    ed:d5:cc:2b:e5:fa:af:ca:91:8f:43:1c:81:7b:79:
                    b0:1a:3b:11:98:e1:3f:fc:5b:22:39:e4:21:14:42:
                    ba:b9:be:b5:87:5a:a4:01:73:13:f8:b4:80:30:01:
                    b7:d4:a5:5f:08:fc:c4:fe:2e:7a:97:8d:65:f4:b5:
                    e2:bb:df:07:49:32:5f:db:a9:09:3d:08:64:81:c2:
                    86:92:3c:fd:30:c6:2c:da:ce:54:83:d8:ed:25:d3:
                    67:cb:b6:92:80:fe:bd:16:38:c5:33:b6:b3:bd:af:
                    58:0f:81:5f:07:8a:7f:6c:95:22:e4:1c:65:67:ac:
                    00:fc:d3:54:9c:c6:49:5f:d3:2f:e2:c3:86:90:a2:
                    7d:63:51:db:7d:48:f6:cb:60:48:df:41:2b:b8:03:
                    e6:56:6e:3b:d7:1e:87:6b:81:a4:d6:3f:cd:ba:f1:
                    70:a2:87:7c:65:25:38:b1:f7:18:68:dc:95:ee:d8:
                    3a:4f:7c:74:01:d4:eb:bd:07:0a:aa:bb:f0:10:f8:
                    f9:36:c0:4f:49:3e:8d:20:47:d0:e0:5e:b8:c2:ea:
                    15:50:8e:8a:a0:3c:25:35:8b:50:35:86:09:b5:b0:
                    56:30:c1:7f:72:aa:dc:97:d1:79:a7:e0:c9:78:b0:
                    15:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:55:C7:7D:39:92:A0:70:6D:FB:E4:56:77:85:42:5D:34:F3:26:4F
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:1a:f5:e2:ef:9f:52:5b:0b:0f:4f:ad:fd:b9:2f:30:59:2c:
         70:17:4d:90:08:dd:84:6a:26:f3:26:83:ca:e9:d1:6d:a3:67:
         a0:a6:9e:09:6c:7f:35:7c:00:de:b7:90:b9:e3:d1:a9:08:a1:
         c0:3e:52:87:34:be:5c:00:23:b0:f1:d8:9b:15:d6:12:5c:4b:
         d9:52:a7:50:99:71:db:76:98:aa:6c:f4:fe:cb:1a:d7:34:a5:
         22:ec:40:d8:03:96:86:29:3b:7c:41:1e:02:18:73:3d:ee:fd:
         0a:e3:32:50:71:92:94:99:4f:1d:9b:a4:21:a1:09:e8:df:93:
         1b:e5:20:5f:26:59:76:6a:f9:b7:b0:ef:83:1e:39:ac:db:93:
         c8:48:3f:74:44:38:b6:f8:d8:fc:ce:6b:b3:dc:12:57:ed:f8:
         6e:d8:47:48:3a:b4:f3:5a:79:02:7e:58:93:fe:d5:1c:ed:1e:
         19:6e:87:15:db:e4:0a:b7:6e:0a:8b:f8:4d:09:e0:6b:97:ef:
         61:d3:ec:59:08:bb:a7:f6:9d:55:42:45:2a:5b:7d:69:79:e3:
         20:c0:f2:bd:d5:38:37:a4:3e:d5:4e:18:35:1e:63:52:54:1f:
         5f:9d:ed:16:e3:7e:0a:fa:2b:e1:1b:9e:f4:a7:f7:a5:05:75:
         42:59:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:27:40 2026 by rpki-client