Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
File:                     A_TeA6HJhcNNxoJy-ddzWzP6at4.mft (raw, json)
Hash identifier:          wnwiGrIw1wtJ8fpte6pFlDSnpiTe/9AEgJ6mCs1o1aA=
Subject key identifier:   90:A3:85:2A:92:E1:FB:DE:AE:75:56:BE:A7:5D:E2:03:38:9F:7C:F5
Authority key identifier: 03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE
Certificate issuer:       /CN=A911C7CD/serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
Certificate serial:       0144
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
Manifest number:          0144
Signing time:             Mon 11 May 2026 05:20:56 +0000
Manifest this update:     Mon 11 May 2026 05:20:56 +0000
Manifest next update:     Mon 18 May 2026 05:20:56 +0000
Files and hashes:         1: A_TeA6HJhcNNxoJy-ddzWzP6at4.crl (hash: +cvt1NK/11WUHlnI1iI7ZfpBN5jlXVcicu738MAorW8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl
                          rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:20:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 324 (0x144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911C7CD, serialNumber=03F4DE03A1C985C34DC68272F9D7735B33FA6ADE
        Validity
            Not Before: May 11 05:20:56 2026 GMT
            Not After : May 18 05:20:56 2026 GMT
        Subject: CN=6a016738-a253
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:99:8d:97:a4:0b:ab:eb:1f:b0:ce:7b:6e:38:
                    ba:39:a8:e6:b2:3a:70:9f:41:1f:4e:0d:af:51:58:
                    f2:62:33:64:49:cb:da:38:30:bc:1b:45:9e:e3:13:
                    fc:4c:bb:8c:a4:a6:60:61:f4:95:0a:f1:df:9f:84:
                    0a:85:5e:fa:31:b7:60:07:d0:e8:24:99:a3:1b:64:
                    3f:41:3d:a2:b8:83:b2:b2:9d:53:e5:74:52:e2:35:
                    da:07:a0:26:b1:de:b9:68:15:2a:8f:1b:6c:96:21:
                    ec:69:79:d4:6f:b2:0c:c2:82:3b:63:c1:8d:e4:6e:
                    71:03:17:63:0e:85:74:51:4c:8d:b5:c3:89:17:56:
                    85:51:9f:54:98:c8:1f:1c:23:f2:03:76:b7:b3:99:
                    f8:de:8f:57:d1:cc:05:8c:8e:bf:69:d7:42:d8:e6:
                    4c:dd:fb:e3:14:52:fd:0e:e7:34:71:5a:32:e1:3a:
                    8d:3c:74:b9:de:7e:ba:b4:25:7d:fd:7b:86:c0:37:
                    ea:03:2b:11:20:a7:d4:ad:cf:92:6d:4f:3d:3a:b4:
                    6c:17:f1:71:a6:e0:6b:21:16:7e:dc:8b:5a:d5:c5:
                    0f:cd:ed:f4:e3:81:5e:1a:8f:85:d8:27:dd:ec:53:
                    c5:ae:e2:64:fe:d3:11:c7:da:ff:d1:c7:4e:90:ad:
                    a2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:A3:85:2A:92:E1:FB:DE:AE:75:56:BE:A7:5D:E2:03:38:9F:7C:F5
            X509v3 Authority Key Identifier:
                keyid:03:F4:DE:03:A1:C9:85:C3:4D:C6:82:72:F9:D7:73:5B:33:FA:6A:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A_TeA6HJhcNNxoJy-ddzWzP6at4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911C7CD/DF0B686A5EA211EFB1677243C4F9AE02/A_TeA6HJhcNNxoJy-ddzWzP6at4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:82:94:65:ec:0c:26:40:a3:fb:38:68:36:ea:c0:f5:0e:f7:
         84:30:e0:72:fd:0d:4d:48:d2:8f:3a:c8:d8:8f:1f:67:85:a9:
         3f:7a:fb:0d:34:d6:62:3f:d3:f8:8b:ee:ce:20:62:d9:7c:4c:
         33:1c:ac:b5:78:0d:a4:07:4b:02:93:93:2c:61:d4:87:74:e4:
         91:87:90:7d:c2:4e:b8:82:55:16:ba:a3:ce:e8:91:15:78:9f:
         6b:19:d0:02:82:4a:42:43:0b:10:3c:d1:a9:e3:53:97:ff:b7:
         dc:35:8e:0f:6f:f3:f4:fe:24:37:a1:99:f5:4d:4d:af:c3:94:
         8b:be:e9:2e:a7:e3:05:7f:ba:90:5b:e5:70:bb:5e:05:b6:19:
         57:83:e0:29:e4:6f:57:61:f7:9b:5b:c0:0f:f2:57:53:51:c7:
         0b:0d:7d:44:51:09:3b:99:cf:76:b6:25:c6:8a:43:e4:96:be:
         9b:a2:e5:c2:bb:48:56:48:77:b9:04:d4:d7:fc:8b:36:bc:ec:
         8f:74:2f:a7:49:71:dd:c2:a2:ad:7c:34:ff:6d:10:d9:87:93:
         d6:fa:12:f7:6b:f4:e2:4e:31:6f:d6:9d:1a:60:69:a8:50:8b:
         a2:53:6c:36:cd:0c:74:af:72:2b:63:84:fe:36:77:c2:53:e1:
         a1:fd:31:8d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUQwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MUM3Q0QxMTAvBgNVBAUTKDAzRjRERTAzQTFDOTg1QzM0REM2ODI3MkY5RDc3MzVC
MzNGQTZBREUwHhcNMjYwNTExMDUyMDU2WhcNMjYwNTE4MDUyMDU2WjAYMRYwFAYD
VQQDEw02YTAxNjczOC1hMjUzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxJmNl6QLq+sfsM57bji6Oajmsjpwn0EfTg2vUVjyYjNkScvaODC8G0We4xP8
TLuMpKZgYfSVCvHfn4QKhV76MbdgB9DoJJmjG2Q/QT2iuIOysp1T5XRS4jXaB6Am
sd65aBUqjxtsliHsaXnUb7IMwoI7Y8GN5G5xAxdjDoV0UUyNtcOJF1aFUZ9UmMgf
HCPyA3a3s5n43o9X0cwFjI6/addC2OZM3fvjFFL9Duc0cVoy4TqNPHS53n66tCV9
/XuGwDfqAysRIKfUrc+SbU89OrRsF/FxpuBrIRZ+3Ita1cUPze3044FeGo+F2Cfd
7FPFruJk/tMRx9r/0cdOkK2i4wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJCjhSqS
4fvernVWvqdd4gM4n3z1MB8GA1UdIwQYMBaAFAP03gOhyYXDTcaCcvnXc1sz+mre
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExQzdDRC9ERjBCNjg2QTVF
QTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhjTk54b0p5LWRkeld6UDZh
dDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FfVGVBNkhKaGNOTnhvSnktZGR6V3pQNmF0NC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
QzdDRC9ERjBCNjg2QTVFQTIxMUVGQjE2NzcyNDNDNEY5QUUwMi9BX1RlQTZISmhj
Tk54b0p5LWRkeld6UDZhdDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAJoKUZewMJkCj+zhoNurA9Q73hDDgcv0NTUjSjzrI2I8fZ4WpP3r7DTTWYj/T
+IvuziBi2XxMMxystXgNpAdLApOTLGHUh3TkkYeQfcJOuIJVFrqjzuiRFXifaxnQ
AoJKQkMLEDzRqeNTl/+33DWOD2/z9P4kN6GZ9U1Nr8OUi77pLqfjBX+6kFvlcLte
BbYZV4PgKeRvV2H3m1vAD/JXU1HHCw19RFEJO5nPdrYlxopD5Ja+m6LlwrtIVkh3
uQTU1/yLNrzsj3Qvp0lx3cKirXw0/20Q2YeT1voS92v04k4xb9adGmBpqFCLolNs
Ns0MdK9yK2OE/jZ3wlPhof0xjQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:11:53 2026 by rpki-client