Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
File:                     Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft (raw, json)
Hash identifier:          hTIpkcGm4a7Gk0I2xvTwTx/8gaAA4rtzhqbVavOct5I=
Subject key identifier:   02:47:20:C9:CA:5D:C7:3F:A4:5D:B2:AA:C6:18:D5:AA:71:86:6E:1B
Authority key identifier: 4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD
Certificate issuer:       /CN=A915BDD9/serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
Certificate serial:       018A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
Manifest number:          018A
Signing time:             Wed 13 May 2026 04:30:05 +0000
Manifest this update:     Wed 13 May 2026 04:30:05 +0000
Manifest next update:     Wed 20 May 2026 04:30:05 +0000
Files and hashes:         1: Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl (hash: arSdYgKt5By6OjTzIE7Qm22XhfysQUwYyaVFp0ik6nM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl
                          rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:30:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 394 (0x18a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915BDD9, serialNumber=4A16E1EB3BDF8DD46073C2557353A4FCE87087CD
        Validity
            Not Before: May 13 04:30:05 2026 GMT
            Not After : May 20 04:30:05 2026 GMT
        Subject: CN=6a03fe4d-d227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:19:21:ce:43:f9:2b:66:fa:60:ba:95:04:74:
                    c4:32:32:e3:d2:07:b7:01:ae:21:08:72:1b:f6:49:
                    db:44:7d:0e:72:84:20:81:91:e6:b9:b7:74:56:47:
                    ee:e6:c6:40:32:64:17:0b:9d:32:7a:7a:be:82:51:
                    72:ad:15:78:87:d3:b0:bf:88:18:98:63:4c:24:d1:
                    8c:51:80:2e:df:1e:a1:79:d0:c6:61:ca:fb:cc:c4:
                    c1:b6:b5:b1:12:d2:2e:3d:65:37:ee:c1:63:02:3f:
                    63:a0:01:35:d2:c7:3b:5b:41:7a:55:3c:86:4e:7e:
                    e5:46:0d:4c:7b:84:0f:1d:95:9d:92:b6:9b:9f:d9:
                    f5:a2:65:25:ae:48:97:03:c0:ff:e9:3e:ea:3a:15:
                    ad:13:fd:de:70:19:e6:16:a2:f0:60:5d:63:50:15:
                    56:ca:11:e1:29:cc:c5:87:9f:4a:05:cc:47:83:32:
                    e6:1c:d1:3f:5f:0f:ff:e5:03:59:50:a5:7a:46:2c:
                    81:55:30:a3:43:b0:0f:20:72:50:45:57:6d:30:c5:
                    8d:e2:51:3a:5a:ce:cd:ae:96:1e:16:4a:4c:c1:3e:
                    14:ba:4c:b1:9f:be:f9:a3:79:17:dd:c7:20:8a:0d:
                    a6:a4:ad:d8:4a:01:71:2d:b8:e2:7f:e7:4c:79:04:
                    53:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:47:20:C9:CA:5D:C7:3F:A4:5D:B2:AA:C6:18:D5:AA:71:86:6E:1B
            X509v3 Authority Key Identifier:
                keyid:4A:16:E1:EB:3B:DF:8D:D4:60:73:C2:55:73:53:A4:FC:E8:70:87:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915BDD9/2272C5F0F1B411EE9FDFB867C4F9AE02/Shbh6zvfjdRgc8JVc1Ok_Ohwh80.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:bd:67:ea:60:8d:79:19:9e:30:a1:7e:ca:7f:66:bc:8d:ea:
         68:07:a2:4a:3b:92:93:70:09:89:92:2f:b6:d8:88:98:57:e7:
         a7:ec:f9:7b:5b:11:da:b8:11:4c:88:6f:47:70:4d:f1:63:a3:
         31:97:78:79:2e:ff:8b:70:cd:ee:e2:f5:17:e1:d5:2e:f6:e0:
         cd:c4:47:d6:6c:a6:25:6e:32:da:a3:e7:29:7b:d8:63:b8:bd:
         c7:f2:75:4e:ea:a2:65:4c:84:24:2e:56:16:4f:f2:c0:23:7f:
         80:f7:87:ef:42:92:28:ba:63:c0:f7:df:21:6b:55:fd:2d:5c:
         ee:76:71:c9:ef:d3:83:66:a0:ac:9e:10:43:8e:cc:bc:57:2d:
         09:56:d7:99:5d:01:29:f7:b0:9f:8b:a9:f9:af:4c:18:6a:17:
         df:7e:e1:b6:a8:38:d1:b6:36:9e:ee:08:52:f0:c1:48:d4:7d:
         f6:03:c9:09:8a:79:65:4e:89:ea:40:0b:41:71:00:7b:fb:91:
         a7:48:c8:72:15:01:d4:13:62:2f:8b:8d:50:c8:49:02:3c:f9:
         41:0d:6c:ab:63:71:8b:d5:f6:d0:26:d7:a4:10:67:07:f8:66:
         d9:9a:1f:c5:d8:c0:7a:a8:ec:fe:9a:eb:a0:e3:b7:be:d6:d9:
         9f:72:dc:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:11:16 2026 by rpki-client