Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
File:                     T4ElgrV_TBLHNl5qp_D_yncQlJE.mft (raw, json)
Hash identifier:          esNvgBEjUWZTXpahBQzLB3Abyp1f5IPXwgpf0uX6F/M=
Subject key identifier:   A6:CD:42:88:69:E4:B3:E4:39:65:94:A2:A7:13:5E:2C:A9:07:CC:48
Authority key identifier: 4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91
Certificate issuer:       /CN=A91B2D29/serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
Certificate serial:       1968
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
Manifest number:          48A6
Signing time:             Wed 20 May 2026 15:46:37 +0000
Manifest this update:     Wed 20 May 2026 15:46:36 +0000
Manifest next update:     Wed 27 May 2026 15:46:36 +0000
Files and hashes:         1: T4ElgrV_TBLHNl5qp_D_yncQlJE.crl (hash: BIq+PXOa2/Pmx2m+g44B9gGXGPvsznA0lWMHLJfR5ow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl
                          rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 15:46:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6504 (0x1968)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B2D29, serialNumber=4F812582B57F4C12C7365E6AA7F0FFCA77109491
        Validity
            Not Before: May 20 15:46:36 2026 GMT
            Not After : May 27 15:46:36 2026 GMT
        Subject: CN=6a0dd75d-425e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ca:73:ac:f9:07:29:3d:84:43:07:85:d2:8c:
                    76:9b:d2:36:e9:38:4a:76:2b:19:de:2e:4e:35:dd:
                    3e:78:12:22:e6:06:7d:af:e0:7f:8c:54:dc:78:24:
                    34:40:0e:2a:4c:96:ee:de:65:a4:d8:50:4b:fe:71:
                    8f:28:7e:88:24:c7:40:8c:f2:df:e8:22:bf:27:79:
                    28:a3:f4:11:9f:2a:02:32:22:21:52:5a:ed:0c:e3:
                    86:cf:b1:d4:eb:bd:bb:18:d4:bf:9c:dc:03:53:43:
                    73:7e:f3:2b:1e:43:b6:ff:e7:d7:fe:92:2e:29:b7:
                    ad:6d:46:df:da:80:bc:3d:c5:09:fb:ea:df:13:46:
                    fa:71:df:74:43:cf:68:25:22:19:78:06:db:95:04:
                    00:94:92:3b:17:6b:ae:54:b0:ca:28:ed:4f:5b:4f:
                    49:c2:c2:4b:9c:d6:50:9a:36:84:62:e8:ac:0e:5e:
                    0d:b9:75:9f:3a:a6:71:f5:cd:eb:57:a9:db:f1:26:
                    01:81:d5:d7:78:13:7c:cc:bb:94:82:b1:90:62:a0:
                    64:db:b1:6d:15:1b:13:1b:f5:8a:17:0a:b3:de:89:
                    a6:33:06:96:a9:c2:a3:f6:27:16:4e:d1:8b:a2:ed:
                    12:35:8b:92:23:f9:a9:fc:ed:9c:29:47:54:90:ab:
                    b0:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:CD:42:88:69:E4:B3:E4:39:65:94:A2:A7:13:5E:2C:A9:07:CC:48
            X509v3 Authority Key Identifier:
                keyid:4F:81:25:82:B5:7F:4C:12:C7:36:5E:6A:A7:F0:FF:CA:77:10:94:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/T4ElgrV_TBLHNl5qp_D_yncQlJE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B2D29/F71E7166552111E5ADB2092AC4F9AE02/T4ElgrV_TBLHNl5qp_D_yncQlJE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:32:84:9d:6f:ae:14:13:13:31:1b:60:ed:bc:a3:de:0d:17:
         47:de:85:25:bf:06:d1:3a:18:f5:2c:f1:b5:e9:e1:aa:b9:54:
         f0:ca:3c:20:79:27:8c:e1:d8:f9:bc:ac:b5:0e:af:f4:78:f3:
         ab:d8:61:71:16:88:10:40:37:02:d3:bd:8c:a1:f3:55:07:12:
         51:09:55:a8:4f:10:7f:58:0d:0a:5d:74:15:b2:0d:48:c4:96:
         4b:2b:4e:ad:5f:94:8f:c3:05:6a:3c:36:93:d3:a0:32:48:ac:
         86:55:f0:5a:86:f8:b4:d9:1e:d7:d5:c9:f3:5e:bc:80:9c:c2:
         51:80:f1:8a:01:f2:5d:4e:55:ba:6f:d4:14:0e:df:64:e8:d0:
         6d:78:73:a0:6e:f2:c8:03:4a:95:5e:1f:4e:3d:7b:d9:08:31:
         a1:72:3a:48:ef:93:96:07:11:0f:a5:61:2b:a6:e3:a1:c8:b3:
         7b:2e:59:10:32:4d:c1:cb:72:97:41:86:85:e5:e3:20:57:b2:
         2e:0b:a4:b5:7f:0a:e7:66:e5:cf:30:b7:af:09:6f:fa:0d:88:
         bb:e2:c1:f9:61:4c:26:15:86:5b:8e:7e:db:fb:91:bb:dd:50:
         8f:75:e3:25:ac:51:49:6e:33:3c:7b:78:5c:cd:4f:69:fa:46:
         a1:09:51:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:41 2026 by rpki-client