Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
File:                     -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json)
Hash identifier:          8DsiWRoTDmTWhcLjqV7JECYO/p652ORAEBmtx5AxsvA=
Subject key identifier:   DE:F3:9A:FB:DD:6A:19:E4:06:B5:96:3A:A6:61:81:DD:9B:F7:BD:7A
Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
Certificate issuer:       /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Certificate serial:       16DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
Manifest number:          16DD
Signing time:             Tue 18 Aug 2026 16:48:55 +0000
Manifest this update:     Tue 18 Aug 2026 16:48:54 +0000
Manifest next update:     Tue 25 Aug 2026 16:48:54 +0000
Files and hashes:         1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: dZ38oxdS5FjQylaesg6YwUxqdvHPTogEErowz2WZ8D0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
                          rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 16:48:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5853 (0x16dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
        Validity
            Not Before: Aug 18 16:48:54 2026 GMT
            Not After : Aug 25 16:48:54 2026 GMT
        Subject: CN=6a848cf7-0253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:42:85:16:d0:17:d7:a1:f9:d8:40:16:44:ef:
                    c6:3a:d9:f1:b1:f3:95:36:65:ab:c4:44:58:af:7b:
                    c9:10:cf:e4:12:15:b5:b1:50:32:3d:3a:71:5e:88:
                    10:55:bf:9d:97:dc:d1:b4:9d:d2:2f:c5:5d:90:c4:
                    06:3b:a8:a3:e5:3b:da:ab:49:30:47:79:a1:b5:c0:
                    da:46:5f:3c:d1:37:f8:27:c3:9a:3e:ab:48:e1:9e:
                    2e:a4:9a:5d:99:88:55:c5:c6:31:6a:01:b5:55:45:
                    3d:30:23:2a:fb:5e:a1:38:a1:f9:f0:dd:b8:b7:96:
                    de:ee:80:75:b5:e2:54:39:e8:f3:aa:31:99:28:30:
                    29:5b:4e:48:d1:d0:aa:07:bc:b3:7d:2c:34:94:53:
                    a1:a9:ba:50:25:5c:80:df:1d:60:ab:77:5b:d7:1f:
                    72:5d:d4:54:c9:60:ec:65:97:ad:6e:16:be:26:72:
                    ae:bb:a4:93:76:2e:3c:19:c8:eb:50:7f:e8:f4:86:
                    bc:a2:17:a0:7a:74:f3:94:5e:8a:4f:ad:5a:e6:61:
                    c4:e4:39:00:99:c1:5e:41:df:40:0c:0b:5e:7f:28:
                    2a:1d:e2:2b:1c:e4:97:3c:72:5b:f3:74:ce:c3:cd:
                    c0:a3:5a:9d:e5:34:d4:1a:b5:16:f3:d3:58:71:ec:
                    8c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:F3:9A:FB:DD:6A:19:E4:06:B5:96:3A:A6:61:81:DD:9B:F7:BD:7A
            X509v3 Authority Key Identifier:
                keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:14:47:ac:dc:09:84:12:3f:1d:52:49:11:74:f6:06:e3:61:
         a5:25:7b:a0:e3:60:89:6d:e5:d0:56:b0:27:21:99:e1:27:21:
         39:45:29:2b:8c:a7:03:e1:78:b6:b8:4c:e8:fd:05:53:df:33:
         f3:47:95:c6:25:02:12:c5:29:86:09:81:51:77:bb:1e:fa:96:
         9a:22:ac:84:5b:66:ee:e2:f3:36:67:a0:50:28:70:13:3a:6b:
         96:8b:23:5c:7b:7d:54:25:35:27:09:06:ea:9b:b4:30:47:f8:
         31:7c:2a:8e:96:ee:40:ef:3d:7c:0e:c3:51:a2:03:68:b7:34:
         94:2d:48:32:46:5a:1b:27:a9:20:fc:f5:26:5b:84:b2:74:14:
         a4:e0:86:d1:4a:77:fc:12:ae:84:ab:32:6d:3c:23:60:c3:4e:
         48:37:bc:7d:2d:4b:d5:28:b1:fd:17:88:c5:31:85:79:7f:f7:
         92:c7:94:42:c1:84:a7:46:8f:44:cf:4d:71:1f:65:be:6e:d1:
         63:e9:43:23:17:24:85:c4:e7:a8:16:da:f3:0a:e8:54:b8:a6:
         dd:8a:c9:6a:cb:02:3c:54:36:82:8b:c6:77:8c:6a:22:f4:f9:
         07:c5:56:b0:d0:1d:4a:f4:95:a5:74:7e:bd:4e:c9:1f:60:11:
         0e:19:68:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:56:44 2026 by rpki-client