Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
File:                     AfBcfqXyou38GDiX9YNZgrLPA78.mft (raw, json)
Hash identifier:          J8M7kqcQHs7/CDY7cIqSNzUSl261On7/DjKHWwU7SWY=
Subject key identifier:   D3:15:6C:9B:A7:30:86:E9:E6:BA:EF:CE:7F:9D:A5:1E:30:62:52:88
Authority key identifier: 01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF
Certificate issuer:       /CN=A91D09BC/serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
Certificate serial:       0159
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
Manifest number:          0191
Signing time:             Wed 19 Aug 2026 05:57:14 +0000
Manifest this update:     Wed 19 Aug 2026 05:57:14 +0000
Manifest next update:     Wed 26 Aug 2026 05:57:14 +0000
Files and hashes:         1: AfBcfqXyou38GDiX9YNZgrLPA78.crl (hash: sEeY+u9gE1oDexWqDsCXBOMFUJt6ydF/xvL2dHqXzDs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 05:57:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=01F05C7EA5F2A2EDFC183897F5835982B2CF03BF
        Validity
            Not Before: Aug 19 05:57:14 2026 GMT
            Not After : Aug 26 05:57:14 2026 GMT
        Subject: CN=6a8545ba-ac0e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:5f:30:4b:45:0f:78:0f:06:03:15:13:7d:16:
                    b9:64:03:26:0f:8e:b2:77:34:51:38:15:f2:65:6c:
                    ae:9e:df:6b:7d:b1:43:38:6e:ba:8a:38:11:d7:c3:
                    83:44:a7:81:22:91:85:5e:ba:fa:05:71:72:d1:19:
                    6a:78:63:ef:5b:01:79:2c:43:20:2a:1c:13:fc:20:
                    06:83:3f:57:9e:bd:c2:5e:4e:6a:7a:c2:74:13:75:
                    3e:bf:1a:66:b7:4f:96:97:02:c4:ab:02:2c:49:cb:
                    c7:b1:d8:8b:50:0e:08:8d:6d:df:17:ea:eb:df:0a:
                    71:38:12:e7:7d:b4:d6:52:08:d5:d5:1a:2b:07:2e:
                    13:2b:a2:8d:37:82:e2:47:69:b7:46:fe:93:c8:f9:
                    b4:1c:2a:43:db:af:ee:d1:f8:06:2d:7b:b6:bd:f5:
                    c0:97:b9:7e:f3:22:9e:9e:e2:85:27:68:2e:22:19:
                    39:6e:4e:35:d2:3a:81:2a:bd:b9:80:57:63:1b:77:
                    62:ea:1a:66:33:8d:e1:c9:6a:ec:75:31:a6:3e:17:
                    0e:6f:0d:9d:97:0b:b4:fb:5e:7f:6b:7b:fc:8d:5c:
                    b7:64:a3:a5:f2:e4:bd:1e:5e:c8:b7:ea:1f:28:75:
                    d6:da:5c:0b:65:94:d6:06:55:d0:85:89:19:e0:3a:
                    66:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:15:6C:9B:A7:30:86:E9:E6:BA:EF:CE:7F:9D:A5:1E:30:62:52:88
            X509v3 Authority Key Identifier:
                keyid:01:F0:5C:7E:A5:F2:A2:ED:FC:18:38:97:F5:83:59:82:B2:CF:03:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AfBcfqXyou38GDiX9YNZgrLPA78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/D35B082EA70711EF99A57741C4F9AE02/AfBcfqXyou38GDiX9YNZgrLPA78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:1c:58:09:92:7a:30:f4:0e:2d:74:1b:c7:aa:6c:09:46:30:
         eb:5b:e1:0b:0b:25:cd:9d:7e:cc:79:64:a4:42:30:db:65:60:
         be:24:21:c5:02:d5:88:ac:8f:bb:0e:81:ed:3c:50:ee:bd:84:
         6f:be:3e:fa:2f:da:36:d4:b1:8a:d8:b8:a6:65:cc:c5:2d:8e:
         48:a0:6b:46:29:21:9d:a9:53:a1:99:78:ef:4f:1f:64:a8:3d:
         ec:2f:8d:b3:83:74:52:3e:5f:bd:fc:0d:32:7e:39:c4:d9:c8:
         12:6a:80:36:f0:40:5d:ba:48:57:d7:97:4a:db:7d:f1:c0:5d:
         5c:ea:84:f5:b2:14:ba:a9:ed:7c:35:46:77:cb:e6:cd:a6:85:
         b4:c6:f9:ca:43:8b:66:24:9c:5d:77:de:13:aa:2a:48:e7:23:
         0f:a4:a7:d0:b8:5c:5b:62:b7:f1:b8:f2:7b:15:07:23:91:ed:
         8b:71:d3:7c:43:8a:3d:cb:23:bd:2a:5f:02:e7:3a:30:e7:f8:
         51:06:b4:fb:f6:b9:e7:a5:fd:c4:00:91:c7:6c:9e:af:c8:9a:
         82:08:94:29:e7:05:5b:df:a3:34:72:dc:ae:ff:36:32:25:98:
         66:64:c8:e3:17:7a:79:87:be:bc:11:ad:8b:eb:c5:61:7e:a7:
         1e:3f:fc:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:41:43 2026 by rpki-client