Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
File:                     5c15IB7rS9nw73ZW5zJfVxZffqA.mft (raw, json)
Hash identifier:          QwepVlc/vRf3uXQdPIcOdzkkpQBD7NdDPqU6lQ+I8Dc=
Subject key identifier:   6F:D5:4C:94:FB:D1:47:DA:55:76:FB:C4:83:CD:4A:64:A4:5B:D0:92
Authority key identifier: E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0
Certificate issuer:       /CN=A911218D/serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
Certificate serial:       08A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
Manifest number:          0892
Signing time:             Wed 22 Jul 2026 21:10:14 +0000
Manifest this update:     Wed 22 Jul 2026 21:10:14 +0000
Manifest next update:     Wed 29 Jul 2026 21:10:14 +0000
Files and hashes:         1: 5c15IB7rS9nw73ZW5zJfVxZffqA.crl (hash: sDalnuM13mwWlZvu1WKFUD0SsshKPKUzBv8x7oBLkdU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl
                          rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 21:10:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2209 (0x8a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911218D, serialNumber=E5CD79201EEB4BD9F0EF7656E7325F57165F7EA0
        Validity
            Not Before: Jul 22 21:10:14 2026 GMT
            Not After : Jul 29 21:10:14 2026 GMT
        Subject: CN=6a6131b6-5213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:46:a6:24:3d:dc:10:66:d7:3f:6a:e6:f9:5e:
                    22:8d:e6:53:43:ba:dd:f2:c9:c3:6a:ec:63:8c:d0:
                    9a:74:bb:bd:8d:5c:2a:0b:4f:8c:4d:3c:6e:2d:2c:
                    47:c7:e9:63:cb:99:ee:1e:64:2f:97:6b:55:ed:35:
                    63:90:c3:e4:c6:49:e8:5c:16:89:4b:52:93:5d:21:
                    bc:2e:3d:95:53:c9:d4:20:05:bd:98:44:96:bd:6e:
                    56:02:18:a5:74:51:98:67:33:c0:07:e6:26:42:de:
                    dc:92:97:c2:1e:ce:30:56:c0:be:4a:d5:a9:25:30:
                    1f:36:16:20:0c:bb:27:7e:2f:e1:a1:f3:ff:e0:81:
                    7d:98:b6:25:40:a1:3c:e5:5e:2a:38:6d:70:09:1d:
                    41:34:b0:e2:67:af:a2:a2:26:e8:8c:e8:30:8a:c7:
                    f8:1f:ed:0f:27:8b:35:75:a9:8f:36:f7:f1:8e:0a:
                    9a:50:3b:28:05:54:bf:09:6b:1b:6d:d5:1e:3b:83:
                    1f:d3:e0:6c:7f:6e:68:a2:25:21:ac:9b:85:5b:57:
                    11:21:3c:07:c5:19:82:6a:ef:95:37:cb:66:9a:fa:
                    d9:ef:24:68:bd:3d:7f:51:89:71:b9:fa:23:7b:08:
                    d8:ff:1d:a2:59:98:9c:c9:07:71:6e:b6:3a:27:e2:
                    2d:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D5:4C:94:FB:D1:47:DA:55:76:FB:C4:83:CD:4A:64:A4:5B:D0:92
            X509v3 Authority Key Identifier:
                keyid:E5:CD:79:20:1E:EB:4B:D9:F0:EF:76:56:E7:32:5F:57:16:5F:7E:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5c15IB7rS9nw73ZW5zJfVxZffqA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911218D/0EB6748AFFC811EA84A3667CC4F9AE02/5c15IB7rS9nw73ZW5zJfVxZffqA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:74:78:74:6c:88:71:37:cd:4c:bc:a1:60:aa:6b:c9:3a:4b:
         3f:d5:8b:17:08:b7:3c:7d:13:92:70:92:18:9a:4d:04:67:0f:
         25:52:52:57:04:60:b0:9d:51:5d:c9:2d:ac:63:26:a5:58:00:
         99:2e:b9:72:4b:c9:ad:2d:44:b7:7a:71:89:5c:7e:72:8b:26:
         2d:1c:07:f8:b0:93:96:ec:2c:ec:4c:52:99:03:7f:57:f7:de:
         6b:17:62:2b:31:cf:9d:5a:07:28:69:ac:f8:02:65:03:b2:f7:
         52:e5:c5:25:4b:84:8c:4e:3f:e0:02:75:55:42:96:fb:a8:e9:
         85:d8:d1:d5:5f:7c:6f:ee:5f:a0:63:53:8a:61:16:87:95:d2:
         c0:6c:e0:a9:a7:c6:ce:84:52:f5:19:cf:03:c1:8f:d5:d6:9a:
         a1:d7:78:60:1f:3f:66:59:25:b1:3d:cf:bc:1c:cb:27:4b:28:
         f4:19:bb:9a:76:e2:1f:ee:9d:28:83:d0:06:c0:5c:d5:61:b7:
         7f:41:e2:d5:3f:8d:67:7c:b0:ee:ac:b3:1c:6b:d9:e3:93:92:
         da:02:8b:77:01:24:98:b8:36:0a:c4:94:12:5a:b2:db:ae:2a:
         ff:a3:a2:d8:62:eb:b8:be:f8:cb:be:7f:07:cd:98:6c:f3:26:
         82:67:98:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:18:57 2026 by rpki-client