Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
File:                     s8j34GTam1qm6nlgF-xg0okDeCo.mft (raw, json)
Hash identifier:          mVYOlD6TX51HhoIE+Q3Niexy27MN9mAghFGw4FZQXwU=
Subject key identifier:   00:96:0F:AF:D2:EE:66:1E:DB:06:66:A1:9E:2E:08:61:CB:C0:FC:50
Authority key identifier: B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A
Certificate issuer:       /CN=A91D671F/serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
Certificate serial:       16DB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
Manifest number:          16C6
Signing time:             Wed 20 May 2026 16:40:11 +0000
Manifest this update:     Wed 20 May 2026 16:40:10 +0000
Manifest next update:     Wed 27 May 2026 16:40:10 +0000
Files and hashes:         1: s8j34GTam1qm6nlgF-xg0okDeCo.crl (hash: TFHc4p2PKm8vLCwvZw0vZrFppvwh00MKCEVaQHwBeyE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl
                          rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:40:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5851 (0x16db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D671F, serialNumber=B3C8F7E064DA9B5AA6EA796017EC60D28903782A
        Validity
            Not Before: May 20 16:40:10 2026 GMT
            Not After : May 27 16:40:10 2026 GMT
        Subject: CN=6a0de3eb-48b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:d3:80:9e:0b:5e:53:c6:40:9b:d4:ab:25:66:
                    b3:77:91:93:f0:32:a5:bf:dd:17:dc:19:be:c0:67:
                    a9:42:50:cb:cf:fa:78:e2:1b:18:67:e1:88:13:2d:
                    36:47:68:1d:91:b7:b8:39:88:4b:81:b8:d6:0c:09:
                    9e:06:21:d0:d7:5a:7c:af:6a:fa:87:40:fb:3e:94:
                    7c:e9:0b:bd:67:b9:ed:8a:4c:46:10:d7:74:d7:ff:
                    83:71:5e:bb:fd:20:4f:ea:c7:32:be:13:51:d9:fb:
                    00:e2:fd:2b:55:6a:fe:7b:05:50:63:1f:fd:68:d3:
                    50:31:5c:af:b6:24:68:b2:f2:44:0f:ef:b5:b9:14:
                    e6:55:34:c6:70:c9:74:a7:23:50:2b:1e:1b:ba:bd:
                    d1:99:6d:c8:95:70:fb:96:37:28:b8:3b:1c:6e:90:
                    30:25:27:95:23:4e:ef:e3:04:96:b5:0c:49:d4:be:
                    dc:3f:b4:25:24:ce:57:31:e2:68:5d:cc:41:2e:ed:
                    e0:d9:47:02:eb:ee:58:4c:a5:64:a8:ed:ec:f6:f2:
                    ef:00:c7:98:f8:a1:6c:a1:cf:f6:43:65:10:ee:99:
                    c2:45:41:c1:8a:a7:cd:58:c5:1c:e5:54:03:09:28:
                    7a:f0:49:00:54:b3:fc:ae:e6:98:50:66:bb:f6:5b:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:96:0F:AF:D2:EE:66:1E:DB:06:66:A1:9E:2E:08:61:CB:C0:FC:50
            X509v3 Authority Key Identifier:
                keyid:B3:C8:F7:E0:64:DA:9B:5A:A6:EA:79:60:17:EC:60:D2:89:03:78:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/s8j34GTam1qm6nlgF-xg0okDeCo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D671F/1EDC10BC171E11E8856BC443C4F9AE02/s8j34GTam1qm6nlgF-xg0okDeCo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:6d:8d:07:7c:4f:a0:32:e6:73:6b:da:8f:59:36:0f:5a:0a:
         a4:f0:60:e1:2c:0f:f0:b9:6e:fa:a7:ff:fd:14:a0:c5:1b:1f:
         e1:a8:ad:a6:32:29:b4:99:86:ee:d7:1b:34:a6:2f:97:a2:d3:
         12:c6:29:35:cf:86:3b:75:3c:04:39:80:52:0f:55:c8:42:54:
         60:e0:de:7b:e1:99:77:63:96:63:98:0a:4e:37:e5:14:15:30:
         2b:14:65:06:8a:1e:5a:1e:38:26:e9:e1:14:02:95:5a:3a:e8:
         19:2c:64:e7:78:b2:46:4c:f5:e1:c8:9a:69:4b:48:9e:27:80:
         1f:15:17:1f:3e:e2:5b:27:63:04:4e:b6:42:bb:3e:54:7d:b1:
         69:b0:85:a2:49:0f:7a:e0:6c:86:2f:81:e8:d9:24:79:05:32:
         4f:9b:32:0d:9d:0b:7a:7d:f1:a6:1d:6b:32:5f:51:f2:2c:79:
         e1:6c:0e:d2:88:04:76:55:53:2c:c8:a6:a5:e6:14:36:ac:a5:
         e5:57:d5:d3:d7:8e:de:c7:ff:28:4e:fb:66:94:88:8f:bd:1b:
         ee:1f:52:d5:0c:52:e2:42:e7:3a:e1:29:de:31:e6:10:dd:c8:
         0d:99:9a:0c:67:42:37:30:d7:0b:f7:69:71:c0:59:17:c0:2d:
         e7:38:f8:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:24:49 2026 by rpki-client