Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
File:                     CO-lQmZek61vuSE1pf1ZJF_V-uM.mft (raw, json)
Hash identifier:          eo4t3Mbl8zVqkfJlYGCJu0qwlfXHLvJ1omfItZcocQ4=
Subject key identifier:   61:54:2B:12:12:9A:9D:60:8F:93:17:20:3C:12:74:A6:A7:4D:7C:48
Authority key identifier: 08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3
Certificate issuer:       /CN=A91C8AF2/serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
Certificate serial:       02A2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
Manifest number:          02A2
Signing time:             Wed 19 Aug 2026 02:07:22 +0000
Manifest this update:     Wed 19 Aug 2026 02:07:22 +0000
Manifest next update:     Wed 26 Aug 2026 02:07:22 +0000
Files and hashes:         1: CO-lQmZek61vuSE1pf1ZJF_V-uM.crl (hash: ocypF0C52mAsBLfUm7fLmXMRT49lNbB/UFWJ4fP6dr4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl
                          rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 02:07:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 674 (0x2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C8AF2, serialNumber=08EFA542665E93AD6FB92135A5FD59245FD5FAE3
        Validity
            Not Before: Aug 19 02:07:22 2026 GMT
            Not After : Aug 26 02:07:22 2026 GMT
        Subject: CN=6a850fda-3ea1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:cc:28:9d:df:20:b6:82:9f:66:fc:67:02:5b:
                    95:93:4f:cf:9d:3b:1c:c0:4e:6b:d3:98:19:10:f8:
                    3c:98:8d:e8:e0:77:35:39:ab:22:1f:23:a1:9e:ae:
                    76:6d:7d:27:41:42:dc:29:c0:0c:b1:a4:7d:13:1a:
                    a0:91:e9:19:53:1e:5f:e0:72:89:41:a3:7e:4e:b6:
                    01:bf:90:a1:77:14:79:36:69:90:41:10:5b:ee:45:
                    e0:07:9c:2b:56:34:3d:bd:d2:9e:aa:ae:53:c2:b3:
                    fb:63:ef:2e:52:0f:f8:95:f5:58:69:9a:ce:96:df:
                    1b:f0:66:b6:11:20:c7:16:9b:05:3a:29:8c:89:06:
                    61:94:36:6e:48:cf:fd:c9:cf:e5:c5:f6:7f:cf:76:
                    cb:d5:68:ef:fa:db:59:ce:fd:d7:3d:ac:9c:0d:74:
                    af:84:15:56:97:aa:5e:8d:9a:49:c4:fa:cf:67:2c:
                    12:e6:3d:c5:3f:fd:94:59:90:97:69:f5:26:82:33:
                    53:a3:9f:6b:60:75:76:b3:1d:0e:0b:e0:d1:f3:e4:
                    c6:2f:35:9f:d9:c4:78:42:8e:c9:96:62:83:2f:b2:
                    20:6c:fa:b8:1c:04:be:bf:06:b6:75:0e:59:f9:2e:
                    82:ee:37:62:da:02:0d:12:9e:96:69:3d:02:64:b0:
                    61:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:54:2B:12:12:9A:9D:60:8F:93:17:20:3C:12:74:A6:A7:4D:7C:48
            X509v3 Authority Key Identifier:
                keyid:08:EF:A5:42:66:5E:93:AD:6F:B9:21:35:A5:FD:59:24:5F:D5:FA:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CO-lQmZek61vuSE1pf1ZJF_V-uM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C8AF2/C7E9F43A912611ED9AE65277C4F9AE02/CO-lQmZek61vuSE1pf1ZJF_V-uM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:86:d5:ae:97:8f:78:29:98:4c:a3:84:82:e7:e9:35:bb:e2:
         77:bd:b7:c5:d3:b6:e3:54:3c:24:00:37:b1:f9:aa:c2:b0:92:
         c3:70:d5:85:37:d0:95:5c:83:04:0e:e4:70:ea:cd:92:ef:f8:
         17:aa:94:47:ae:81:69:46:83:99:d7:58:90:4e:38:4d:28:2d:
         7b:2d:e8:4e:99:49:bb:04:49:f2:81:41:ea:1c:24:c7:c9:57:
         6b:21:27:49:c5:7b:94:17:23:3c:3b:1d:48:d5:41:0b:fa:19:
         30:88:4d:22:ce:3b:ca:0f:1c:80:92:e6:8d:49:6a:5f:e0:4c:
         b4:e0:41:0b:d3:25:77:7c:73:14:bf:97:fd:78:3d:5d:2f:d6:
         8d:92:7b:31:39:5c:a7:27:4e:12:fe:cb:03:e4:0c:59:de:d3:
         a8:12:5e:80:c7:c1:fa:db:80:b4:f8:0c:5f:e1:14:2c:98:1a:
         76:21:11:81:d4:37:9b:c7:b0:f1:47:c0:d2:2b:64:32:e5:6d:
         32:5a:0e:14:50:57:be:61:cf:03:03:90:c7:bb:15:9b:02:c5:
         97:31:d4:14:5c:d3:a2:28:6f:51:0c:85:c5:c5:c6:06:fd:07:
         48:7c:81:9d:aa:10:78:f9:c3:c3:fc:0d:4d:29:f0:ff:fc:cb:
         11:06:f3:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 11:45:58 2026 by rpki-client