Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
File:                     tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft (raw, json)
Hash identifier:          zyTSb1HGKd0ZNDkh+VoOvE8RLx8fTHpKbPLqvdYw96k=
Subject key identifier:   A9:EF:EF:A1:DD:62:2E:B2:C7:4F:A8:C4:CD:C6:04:F6:CD:DE:EB:18
Authority key identifier: B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76
Certificate issuer:       /CN=A9154FFD/serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
Certificate serial:       68
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
Manifest number:          68
Signing time:             Mon 11 May 2026 08:06:07 +0000
Manifest this update:     Mon 11 May 2026 08:06:06 +0000
Manifest next update:     Mon 18 May 2026 08:06:06 +0000
Files and hashes:         1: tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl (hash: +2/KdbQ+v2AE2+/u9hnWkVE0Zrgf++7pXtdmzng8vR8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl
                          rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:06:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9154FFD, serialNumber=B67CD4F30ADC1950B92DC3498F9B53526605BF76
        Validity
            Not Before: May 11 08:06:06 2026 GMT
            Not After : May 18 08:06:06 2026 GMT
        Subject: CN=6a018def-cf96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:7b:c4:a6:b3:03:f5:ce:a1:14:23:31:0d:08:
                    d7:96:1b:a5:da:97:9a:86:88:f8:9f:32:16:4b:50:
                    05:56:31:a6:ad:d9:dd:92:a7:59:57:eb:1e:22:f0:
                    e7:5c:e2:8c:b9:b0:e3:d7:80:1f:8f:40:38:4b:3e:
                    a4:21:58:ca:b9:ce:b5:51:06:60:7c:d0:c6:aa:3a:
                    48:9d:16:2f:1d:2d:3c:17:a2:d7:e2:27:42:f9:b3:
                    12:39:ff:29:38:95:72:fe:59:bb:ff:a0:d6:9f:8f:
                    dd:fa:af:5f:19:bc:c6:90:bc:7f:02:99:6b:4c:e8:
                    51:d5:55:14:09:45:94:b0:09:d7:1a:54:97:6b:8f:
                    d3:56:f3:c6:4d:94:e3:fc:a9:39:18:e7:5a:00:9c:
                    cf:92:8e:94:c7:76:ba:ac:42:87:54:72:dc:50:f6:
                    c7:f0:31:a4:f9:4f:53:76:d3:1f:cc:db:87:a1:6a:
                    e6:0b:96:40:e2:c3:66:b8:f4:68:6f:6c:b3:8b:31:
                    bf:1a:3f:b6:23:e5:d4:f5:82:a3:12:7c:d0:9d:48:
                    f8:50:78:41:6d:ed:61:8f:68:32:ae:6b:a7:4c:8d:
                    4a:f5:87:58:d5:6c:0e:d3:ca:46:8f:b2:a8:87:fc:
                    c0:19:47:30:47:d4:4d:75:87:a2:8a:4a:48:bd:7d:
                    97:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:EF:EF:A1:DD:62:2E:B2:C7:4F:A8:C4:CD:C6:04:F6:CD:DE:EB:18
            X509v3 Authority Key Identifier:
                keyid:B6:7C:D4:F3:0A:DC:19:50:B9:2D:C3:49:8F:9B:53:52:66:05:BF:76

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9154FFD/EEE68C64B48811F0A742F57EC4F9AE02/tnzU8wrcGVC5LcNJj5tTUmYFv3Y.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a7:40:c0:f4:f1:3b:ce:b2:6a:a6:c7:41:56:4d:51:81:03:4e:
         8f:f5:8f:a0:73:02:57:bc:66:86:07:1f:73:3e:3a:b3:96:ea:
         c3:cb:ef:a2:93:61:96:34:fd:91:15:0a:01:c1:f3:58:60:36:
         d1:a2:f4:8a:e6:c6:44:a4:8f:ca:2c:25:86:13:81:4f:62:b7:
         f0:c3:2f:b2:83:85:52:a0:6c:e1:86:e6:13:70:74:44:8f:db:
         c7:d1:2e:ba:d9:e3:29:30:9b:3e:7b:e0:d7:3d:9d:0e:e3:48:
         13:fa:50:18:f2:b4:c2:31:bc:1b:78:c5:a2:72:6d:9d:02:dc:
         5a:18:5e:a6:94:89:d6:32:1b:6a:bf:1d:2b:3d:77:e1:85:dc:
         85:05:4a:c1:90:d2:54:c1:da:47:da:a3:a6:3f:5e:73:e8:81:
         e7:d2:6a:fb:a8:61:1c:fa:73:4e:21:bf:44:5d:97:1f:7e:58:
         6d:f7:68:8a:b8:c6:f6:45:c6:2e:34:73:9b:43:10:7b:9c:be:
         a3:63:b2:ce:2d:8e:bc:e4:09:02:9b:df:33:8e:eb:49:93:e6:
         f6:c5:9d:82:4a:89:2a:a0:7f:68:c2:68:57:06:8b:15:27:46:
         90:05:ed:29:cc:d1:f9:ac:f8:d0:29:ca:4a:20:6c:36:16:f5:
         7b:17:e2:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:58:24 2026 by rpki-client