Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
File:                     sceOjrQ5MbA-kLu1U1edee0Z_VA.mft (raw, json)
Hash identifier:          6oMfdDXS2jdsbmycOXUKU+LA/uUGn+hmuwO9EtPY8/s=
Subject key identifier:   8E:70:81:AC:87:15:42:0E:53:52:3F:87:58:F3:8F:2C:90:D1:06:86
Authority key identifier: B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50
Certificate issuer:       /CN=A9126BDE/serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
Certificate serial:       51
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
Manifest number:          51
Signing time:             Mon 11 May 2026 08:24:22 +0000
Manifest this update:     Mon 11 May 2026 08:24:21 +0000
Manifest next update:     Mon 18 May 2026 08:24:21 +0000
Files and hashes:         1: sceOjrQ5MbA-kLu1U1edee0Z_VA.crl (hash: S/uVs0XCSVBMNFEesPmXHmOnZd2+w8PxvGz4f0KDdao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl
                          rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:24:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9126BDE, serialNumber=B1C78E8EB43931B03E90BBB553579D79ED19FD50
        Validity
            Not Before: May 11 08:24:21 2026 GMT
            Not After : May 18 08:24:21 2026 GMT
        Subject: CN=6a019236-7069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:46:46:9d:db:a8:c7:36:9b:74:4c:fc:a0:68:
                    de:6b:87:05:c3:0e:87:a2:1e:65:ea:50:19:55:6e:
                    a5:34:1e:88:d6:67:43:8b:18:3b:a2:86:f3:ee:60:
                    3c:40:f1:c0:bd:47:42:ac:d8:e7:37:87:73:71:38:
                    90:15:f5:81:45:d5:6b:29:09:4f:c6:f4:31:5a:95:
                    74:ca:8d:ca:cd:f1:92:7a:23:4b:73:d0:bc:81:3a:
                    b3:47:c5:5a:fd:7c:01:1a:46:34:2a:9a:42:de:87:
                    b4:e9:2b:e6:04:1b:05:2f:4a:45:0b:bb:89:62:6e:
                    72:78:bb:a1:9d:b5:c1:4a:dc:05:cb:0e:c5:d0:47:
                    57:d0:0b:e3:a3:18:e9:a7:27:09:89:83:91:0e:a6:
                    b8:9a:ce:56:0f:bf:80:4d:5e:87:64:bd:c9:79:a3:
                    d7:ad:d6:09:e2:2d:5f:3c:c8:fb:25:78:03:06:6f:
                    2e:51:23:8e:5e:9d:cd:f8:60:3d:89:97:91:0f:36:
                    50:3c:22:4c:8e:2c:f1:0f:09:d5:63:1e:4f:c8:74:
                    82:4b:99:d0:c8:f9:49:5f:50:dd:f4:4b:ab:ec:c1:
                    c4:dc:03:33:6e:69:2c:66:6a:e0:e6:8e:26:cf:d5:
                    f0:03:cb:1c:55:04:42:f3:e2:9f:dc:4b:80:3c:62:
                    3e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:70:81:AC:87:15:42:0E:53:52:3F:87:58:F3:8F:2C:90:D1:06:86
            X509v3 Authority Key Identifier:
                keyid:B1:C7:8E:8E:B4:39:31:B0:3E:90:BB:B5:53:57:9D:79:ED:19:FD:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sceOjrQ5MbA-kLu1U1edee0Z_VA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9126BDE/435BF1ACD3FC11F0B9F96432C4F9AE02/sceOjrQ5MbA-kLu1U1edee0Z_VA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:6f:e5:47:56:ab:9a:7d:94:a7:68:7a:19:af:85:58:92:0b:
         2b:6f:a3:f0:6e:de:64:04:76:47:a1:67:55:c6:94:41:06:d6:
         e8:de:69:2b:68:e9:bf:4a:1f:15:7a:ea:75:35:5a:89:13:f9:
         e3:af:ac:78:72:b0:ad:d5:8e:93:f1:98:cf:3e:2a:fa:ac:38:
         f2:7a:1e:63:6d:59:ab:46:a0:a9:bd:55:64:42:00:d7:4a:38:
         b2:04:0a:9a:f4:9d:c6:79:d9:be:89:58:6d:46:18:db:85:ea:
         f7:d5:84:5a:3f:85:a8:d4:e4:29:2f:7c:1c:ad:d0:f6:60:ec:
         30:8d:ab:b3:77:53:f5:aa:58:21:12:7e:b3:20:75:31:e8:c3:
         d5:23:81:e0:cc:ab:35:68:95:08:ed:dd:b0:82:1d:05:04:8c:
         8b:9d:80:94:8a:36:a9:95:bb:f3:d0:13:45:b5:93:63:7d:88:
         9f:29:18:da:d2:1f:c7:82:83:87:9e:80:74:f9:e5:0b:9c:ec:
         ab:48:03:9a:1c:8a:2b:8e:3e:be:ba:7e:98:ac:2f:7e:2f:32:
         7e:22:6f:7a:bf:32:7a:1b:de:0d:7c:c9:85:a1:87:bc:03:fe:
         1a:ec:ab:c7:3a:7f:16:e4:87:37:34:45:a6:55:8d:53:26:07:
         a1:47:a0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:40:20 2026 by rpki-client