Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
File:                     ti51PWAQXS1yURcqxyKxDy-WSWc.mft (raw, json)
Hash identifier:          CDaC1U/t8vxqpDPVZnBmVqVsA3FrCA7nG7+Edeigbz0=
Subject key identifier:   93:4F:13:A3:50:01:58:5E:FE:13:A9:A6:F3:0D:F3:78:79:EF:CB:DC
Authority key identifier: B6:2E:75:3D:60:10:5D:2D:72:51:17:2A:C7:22:B1:0F:2F:96:49:67
Certificate issuer:       /CN=A91DAFA2/serialNumber=B62E753D60105D2D7251172AC722B10F2F964967
Certificate serial:       10
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
Manifest number:          10
Signing time:             Tue 02 Jun 2026 16:09:37 +0000
Manifest this update:     Tue 02 Jun 2026 16:09:37 +0000
Manifest next update:     Tue 09 Jun 2026 16:09:37 +0000
Files and hashes:         1: ti51PWAQXS1yURcqxyKxDy-WSWc.crl (hash: cFOZnflBTQcr29mJw88DZSzuUWisFcCV4N+6VdpptSw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.crl
                          rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 09 Jun 2026 15:18:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DAFA2, serialNumber=B62E753D60105D2D7251172AC722B10F2F964967
        Validity
            Not Before: Jun  2 16:09:37 2026 GMT
            Not After : Jun  9 16:09:37 2026 GMT
        Subject: CN=6a1f0041-b7d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2b:cf:bd:97:dc:a4:6e:b7:2a:11:28:77:be:
                    a7:9d:e7:2f:8d:45:c9:9e:a5:f2:af:1f:e9:70:46:
                    c3:08:08:3a:c8:ee:f2:aa:38:d5:4d:af:6f:4a:78:
                    46:72:9a:91:bd:c6:8c:68:3a:ca:35:5d:9e:ab:45:
                    bc:1f:67:10:d1:87:75:6e:6e:9f:15:48:29:19:df:
                    28:75:d3:fc:7b:ec:27:bd:4c:a5:f7:a8:b2:9a:41:
                    f6:6a:a9:ed:7d:4f:0a:f5:fd:66:ed:06:14:9d:cb:
                    0a:16:ba:63:61:63:9d:88:49:72:63:c8:90:4c:41:
                    a0:3f:0a:cd:61:9d:12:ee:ae:45:39:19:2c:4f:8a:
                    79:0d:80:11:95:18:01:e8:22:0e:33:e4:16:7d:49:
                    63:22:3d:04:30:0a:13:3e:59:bf:69:0d:78:a6:76:
                    7b:03:bc:18:ed:4f:0d:9a:b4:77:df:67:1a:48:ea:
                    8f:49:2e:ad:2d:d8:64:be:a9:15:99:c6:61:05:2b:
                    f0:c6:d8:71:58:91:22:72:32:d4:50:38:85:7e:07:
                    c9:0a:4a:f9:ff:c0:9a:5d:8b:f7:57:7f:b3:9e:48:
                    ab:29:84:14:d0:1c:43:62:d9:bb:06:02:d9:ae:44:
                    8f:55:80:58:08:0e:5f:13:24:9f:ab:29:3b:f5:a3:
                    f4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:4F:13:A3:50:01:58:5E:FE:13:A9:A6:F3:0D:F3:78:79:EF:CB:DC
            X509v3 Authority Key Identifier:
                keyid:B6:2E:75:3D:60:10:5D:2D:72:51:17:2A:C7:22:B1:0F:2F:96:49:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ti51PWAQXS1yURcqxyKxDy-WSWc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DAFA2/4D7F6EB24A7511F1A9575ABCA4833773/ti51PWAQXS1yURcqxyKxDy-WSWc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:67:ea:11:41:81:20:e6:7a:d4:6a:43:90:f3:e7:80:e5:8e:
         8b:e9:14:90:da:7d:f4:e5:20:6c:2a:4e:e0:8c:3c:10:5e:e5:
         52:0f:8d:d8:5b:48:c3:92:01:45:f7:50:08:28:77:68:e9:d1:
         fc:e1:6d:91:50:bd:e3:6a:be:3d:d6:90:6a:04:a7:9b:b7:33:
         b3:ee:73:4e:0f:e8:fe:40:9d:53:b1:c0:01:03:6b:b2:2c:fa:
         08:83:15:1e:3e:cf:7b:00:f5:b4:70:91:1d:35:44:a8:65:76:
         2a:c4:88:28:7e:91:50:8d:49:dc:f1:2a:d3:d9:c8:7e:09:1c:
         17:9d:ec:a2:64:46:9b:a3:4d:f6:e9:19:98:05:4c:ac:ae:ac:
         1c:e9:c4:83:7c:39:af:8e:6e:54:7e:f2:92:fd:59:d4:35:bf:
         c5:2e:f8:a4:37:48:cf:26:f7:9e:36:7b:f8:dd:0a:e1:f2:bc:
         ad:a6:8c:39:21:41:d2:bf:7b:d3:de:1a:39:15:10:a3:f6:b9:
         1e:f0:87:95:e0:ba:27:57:e8:3a:e0:c6:64:58:12:67:9f:47:
         14:a9:73:51:39:d1:33:fa:04:ea:0e:97:30:0d:69:98:c8:99:
         2a:17:82:97:e5:40:e8:8e:44:f1:1b:73:64:b7:b4:f1:12:ca:
         c6:3a:72:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:17:42 2026 by rpki-client