Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
File:                     -BaXnSqJmynqWV8rVO6jmQokNvk.mft (raw, json)
Hash identifier:          VU9bK4NUBBPEq+1WjeSbDbE+J6j2kxxeg65EL8uTtvY=
Subject key identifier:   7C:A1:42:7E:2A:36:69:32:75:24:84:14:5C:F8:51:D6:EF:99:84:67
Authority key identifier: F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9
Certificate issuer:       /CN=A91D5DB6/serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
Certificate serial:       16AE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
Manifest number:          16AE
Signing time:             Wed 20 May 2026 16:40:36 +0000
Manifest this update:     Wed 20 May 2026 16:40:35 +0000
Manifest next update:     Wed 27 May 2026 16:40:35 +0000
Files and hashes:         1: -BaXnSqJmynqWV8rVO6jmQokNvk.crl (hash: zS7SdyTKUOLB3JGU80t2pqS2hyODkxho17xe5Goc6Ak=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl
                          rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:40:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5806 (0x16ae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5DB6, serialNumber=F816979D2A899B29EA595F2B54EEA3990A2436F9
        Validity
            Not Before: May 20 16:40:35 2026 GMT
            Not After : May 27 16:40:35 2026 GMT
        Subject: CN=6a0de404-3aaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:31:2f:55:7e:82:55:4c:4c:06:f3:42:6c:23:
                    f0:fd:84:50:38:ce:86:be:08:ea:0c:d1:9c:ab:37:
                    cc:83:64:d4:70:d9:a7:c3:54:92:9a:97:69:53:06:
                    ad:90:e3:44:12:c0:22:26:1b:85:bc:2a:19:05:23:
                    ab:48:d7:27:7e:a2:8b:ef:24:db:20:f2:70:b4:80:
                    cb:7e:65:f3:d0:2f:72:52:53:fe:24:ec:98:c0:15:
                    10:e4:6b:56:9e:7b:a9:0f:2f:b9:b8:2a:bc:f3:f8:
                    98:8b:af:27:a3:ef:4f:aa:00:a1:49:2d:c4:99:cd:
                    40:f6:6f:a9:28:41:98:a3:62:3e:2c:7c:e8:9a:ed:
                    d8:91:80:b2:e5:ea:d8:0b:15:ab:c8:b7:1e:3f:f6:
                    62:fe:14:4b:11:13:8b:6c:51:73:cc:c3:da:bf:46:
                    26:c5:28:57:eb:a4:e2:4b:1e:85:4f:1f:4e:60:32:
                    37:0a:d9:31:46:17:4f:c3:04:0f:18:54:7f:8d:7b:
                    f9:a9:75:53:a4:01:72:92:06:22:d3:bf:0e:ca:dd:
                    f5:7f:2e:c0:bd:36:ac:56:bb:78:3e:94:df:5f:7b:
                    38:a4:79:29:af:0e:64:44:83:76:30:a2:52:80:d0:
                    8a:de:ea:78:e9:08:ae:d1:cf:8b:ef:55:d0:4b:72:
                    fa:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A1:42:7E:2A:36:69:32:75:24:84:14:5C:F8:51:D6:EF:99:84:67
            X509v3 Authority Key Identifier:
                keyid:F8:16:97:9D:2A:89:9B:29:EA:59:5F:2B:54:EE:A3:99:0A:24:36:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-BaXnSqJmynqWV8rVO6jmQokNvk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5DB6/13F96B82186211E8B1E31729C4F9AE02/-BaXnSqJmynqWV8rVO6jmQokNvk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:02:03:f9:ba:85:f9:81:7e:52:83:10:cf:cb:4c:3c:96:c0:
         91:b8:cc:b9:de:50:ee:8a:a6:8d:4d:94:81:c5:b2:42:e7:41:
         63:d0:97:ce:da:44:63:1e:2d:9a:58:93:c5:0c:a4:1f:52:1f:
         f8:1e:24:e1:d4:3a:b5:89:f1:4a:c0:3e:78:30:f4:81:3a:c5:
         47:b3:ee:4b:71:39:db:71:04:55:91:f2:aa:a3:c6:c8:17:42:
         ab:98:ad:6d:3b:0a:bd:1e:be:2d:2d:34:c6:b8:d0:0f:d2:4d:
         ba:44:f3:4f:4a:24:23:7e:3a:99:f2:78:92:c0:61:2f:3c:ce:
         be:95:bf:f1:ea:b2:17:a7:4f:cd:72:5f:de:5d:39:ef:7a:ce:
         12:b1:48:c1:67:e9:b6:b6:97:44:15:26:79:7f:cf:42:e4:be:
         2d:94:23:7f:db:39:b4:bd:25:b9:a7:e2:d5:b2:16:34:63:c5:
         94:28:d4:58:6a:87:25:f0:2a:1a:1e:8e:e5:ed:2a:72:d9:c0:
         c4:6f:cc:ef:37:ef:07:24:43:89:2f:7e:4f:43:5e:53:39:b1:
         bf:1f:42:ea:80:34:30:40:1c:20:f0:c3:23:2c:27:6e:5d:a7:
         d6:01:88:d5:1d:8a:68:7d:aa:4a:ec:69:63:61:a7:14:d3:e5:
         a1:70:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:59:15 2026 by rpki-client