Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
File:                     -94EjDgE9v13dFfXTlx8bq-XMcc.mft (raw, json)
Hash identifier:          2E5Pq5ki/bFEo3CY4hrY0JVf5buXJInhgErTpAXyq+I=
Subject key identifier:   F5:13:09:AC:8E:75:E8:20:FA:A6:C9:53:D3:22:EF:65:92:2C:31:1F
Authority key identifier: FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7
Certificate issuer:       /CN=A91F7113/serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
Manifest number:          21
Signing time:             Wed 19 Aug 2026 09:37:36 +0000
Manifest this update:     Wed 19 Aug 2026 09:37:35 +0000
Manifest next update:     Wed 26 Aug 2026 09:37:35 +0000
Files and hashes:         1: -94EjDgE9v13dFfXTlx8bq-XMcc.crl (hash: ywD1nJEbXruLcdpsYkSQHF/BoPrx4fOxFh/kfNuEWjk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl
                          rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:37:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7113, serialNumber=FBDE048C3804F6FD777457D74E5C7C6EAF9731C7
        Validity
            Not Before: Aug 19 09:37:35 2026 GMT
            Not After : Aug 26 09:37:35 2026 GMT
        Subject: CN=6a857960-6db2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d5:6b:47:4b:da:e4:e2:f6:f6:92:b0:4d:ab:
                    ec:bd:3a:91:47:e5:1c:c3:70:c8:72:1f:70:39:ac:
                    d0:bd:99:8d:6d:9c:c6:af:1f:90:91:3d:87:93:6a:
                    0f:ba:50:89:7d:70:9c:93:33:cf:63:23:f8:bc:52:
                    97:01:cc:9e:66:49:4c:b5:74:4c:ab:af:39:46:12:
                    8e:c9:89:3b:42:2f:03:8b:48:70:83:4b:06:ce:1d:
                    36:44:b7:1a:10:aa:44:1c:e6:25:d9:c3:97:c3:b4:
                    b8:7b:02:ff:91:22:90:cd:39:50:54:a0:9f:a1:34:
                    9e:e0:35:8b:21:11:88:cb:e1:35:fd:f4:b5:ef:8d:
                    ed:ef:a5:c6:86:fb:c2:a7:27:f6:8a:ee:b5:8d:c1:
                    4f:03:c7:2e:72:2e:c1:99:d3:ee:76:16:5b:3f:d9:
                    8c:29:7f:6e:29:0c:e5:18:89:17:f8:9d:bd:76:83:
                    4a:d3:7b:ce:5e:3e:b0:25:20:f5:36:93:60:06:99:
                    f4:ec:a5:3a:68:80:5a:11:5c:0e:c5:51:10:85:07:
                    42:a8:9f:f5:e3:da:03:95:b4:15:7b:4c:4f:17:64:
                    e4:7f:0c:b6:5a:75:f6:7d:80:54:a0:31:21:cd:c4:
                    f4:fd:62:a3:95:95:9f:d9:66:74:69:b4:dc:72:67:
                    0e:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:13:09:AC:8E:75:E8:20:FA:A6:C9:53:D3:22:EF:65:92:2C:31:1F
            X509v3 Authority Key Identifier:
                keyid:FB:DE:04:8C:38:04:F6:FD:77:74:57:D7:4E:5C:7C:6E:AF:97:31:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-94EjDgE9v13dFfXTlx8bq-XMcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7113/D6729F8E6AD511F1A1558F9E6C47A888/-94EjDgE9v13dFfXTlx8bq-XMcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ba:62:86:c9:b2:14:fd:ac:59:c3:26:4b:43:1a:8d:3d:5f:e6:
         21:0e:1c:1c:7d:cd:f4:14:a8:6d:57:19:58:79:12:84:ba:21:
         ed:a5:01:f9:39:91:78:54:f2:3c:4d:93:f0:0e:e0:2e:da:3d:
         fc:c5:90:2a:89:db:54:00:92:b2:60:3d:0f:6a:3f:6d:d0:21:
         4c:a0:6b:02:76:eb:e8:b7:a4:47:b3:a2:09:63:e0:15:87:07:
         75:47:2d:9f:e0:ab:89:e4:cc:5c:b2:a8:e9:1c:9f:86:fd:fb:
         e6:91:6b:ff:fa:42:ca:7e:3c:24:06:40:7f:dc:e6:f5:ab:61:
         9a:73:6b:ea:28:f7:f7:5a:52:a4:51:ec:79:53:4c:55:32:07:
         16:6a:20:a7:57:70:a0:69:c7:c6:27:78:a2:fd:70:d7:27:14:
         ef:dc:c7:25:32:ec:5f:34:f2:32:af:1f:2e:5d:fd:33:2a:f3:
         dd:0e:42:93:a9:26:5c:5c:da:48:b8:8a:d4:8e:ff:c5:16:53:
         0a:d1:44:f6:96:36:f7:6a:4a:65:a0:6b:31:58:63:a2:9c:7f:
         08:06:93:bf:da:73:13:61:5c:f9:79:a9:6d:a5:c4:74:49:ca:
         9b:9b:98:57:76:e2:a0:3a:a5:57:82:5a:0d:f9:d0:b3:51:d2:
         23:e0:ad:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:51:03 2026 by rpki-client