Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
File:                     F7t0v8FLOUo_7aIb2MhcQePFu_E.mft (raw, json)
Hash identifier:          6faJh9hDXBcb4PiSYWNuREPbMhQ9wrBrmqJ5V8Y+Mgc=
Subject key identifier:   21:3D:C7:71:07:F9:CC:F1:40:43:08:FF:4F:CC:3F:44:BC:1A:67:B8
Authority key identifier: 17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1
Certificate issuer:       /CN=A912BFC5/serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
Certificate serial:       353E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
Manifest number:          353E
Signing time:             Tue 12 May 2026 14:16:35 +0000
Manifest this update:     Tue 12 May 2026 14:16:34 +0000
Manifest next update:     Tue 19 May 2026 14:16:34 +0000
Files and hashes:         1: F7t0v8FLOUo_7aIb2MhcQePFu_E.crl (hash: w0qXFIiMOiUCi9o1XqTU+O9YpjPtvhLV4Sk6pl+Rn1M=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl
                          rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:16:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13630 (0x353e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912BFC5, serialNumber=17BB74BFC14B394A3FEDA21BD8C85C41E3C5BBF1
        Validity
            Not Before: May 12 14:16:34 2026 GMT
            Not After : May 19 14:16:34 2026 GMT
        Subject: CN=6a033643-1963
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c2:ae:5e:8a:ec:fa:3d:b2:39:68:34:26:02:
                    c2:9b:f0:71:0c:fa:52:0e:59:80:9b:35:5b:8f:3e:
                    fa:65:16:f5:d6:50:93:79:0c:e1:26:61:50:92:b1:
                    1c:34:2e:82:17:e8:29:84:47:c1:ec:33:a7:c6:61:
                    87:3a:00:0b:50:97:1e:14:de:f2:f9:ea:c5:fd:c6:
                    b0:1a:6f:60:7d:35:41:66:4e:93:c0:d7:85:ea:ef:
                    20:83:c0:35:19:00:db:ef:60:ee:9d:8b:01:76:35:
                    14:1d:fd:dd:56:ee:14:c9:ff:6a:94:37:51:46:24:
                    34:91:8a:f7:8a:e9:21:eb:58:d3:06:6b:f3:aa:cb:
                    b4:49:d1:8a:f7:9d:67:43:66:b2:1a:fa:87:90:9f:
                    32:76:30:e1:f8:dc:2c:85:46:2c:a9:2c:a8:b4:60:
                    75:83:3a:bf:25:41:db:97:5e:eb:be:6c:9a:ff:56:
                    1d:27:7a:67:c8:15:c2:af:8f:67:02:42:a0:e0:bd:
                    44:ec:78:b8:7f:88:8d:5c:c2:fb:b5:06:b4:37:b2:
                    f9:a6:62:c8:b8:3b:21:c1:e9:ad:5e:1e:52:3a:42:
                    10:8a:d4:d7:20:50:72:f3:21:f6:c7:fa:01:6b:d2:
                    c7:b5:ce:17:b9:77:5c:13:b6:c9:cf:65:1c:7c:6f:
                    fb:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:3D:C7:71:07:F9:CC:F1:40:43:08:FF:4F:CC:3F:44:BC:1A:67:B8
            X509v3 Authority Key Identifier:
                keyid:17:BB:74:BF:C1:4B:39:4A:3F:ED:A2:1B:D8:C8:5C:41:E3:C5:BB:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F7t0v8FLOUo_7aIb2MhcQePFu_E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912BFC5/0D5C79481D6A11E2BB21B2A708B02CD2/F7t0v8FLOUo_7aIb2MhcQePFu_E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:b4:27:ce:87:14:ba:2d:23:4a:f1:b6:c9:00:89:35:01:fe:
         f9:63:b4:94:ce:c7:7f:12:34:0c:6e:f6:b0:15:6a:40:1c:e0:
         92:2e:8d:5e:d1:9d:ad:2e:de:69:7f:37:7d:3b:ff:69:ec:c5:
         fa:71:9e:b6:cb:ea:52:23:0a:b4:b0:52:ce:88:c4:cd:c9:0c:
         ce:45:f8:02:7a:66:fd:50:88:b7:63:56:5b:d1:df:ef:89:d1:
         d7:32:2a:d6:32:6d:8a:0a:e5:da:e9:84:cd:8d:38:db:e7:f2:
         0c:13:e4:2e:e9:c5:81:91:63:fc:ad:5e:6b:e8:9b:70:46:05:
         61:49:ae:04:c9:46:bf:97:0a:90:aa:7e:f6:99:74:e5:17:be:
         20:33:a1:5f:e6:e8:ae:2f:cb:22:96:1c:77:5c:93:b4:bd:45:
         2d:91:69:f9:39:7f:a9:bc:a5:74:ce:9f:de:97:a7:60:97:95:
         56:14:a9:7c:17:5f:2e:65:10:74:13:56:02:b2:a6:f7:1e:66:
         1c:e7:d7:29:2b:d9:64:ef:4c:e0:a7:e5:9e:94:ca:98:55:a9:
         0c:64:f5:1f:86:cb:a8:b4:3f:10:67:f8:7f:fc:e0:78:c2:92:
         e4:67:98:ae:5e:d2:fb:1a:9a:e3:f4:32:cf:9e:59:08:a4:1f:
         0a:c5:d3:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:14:22 2026 by rpki-client