Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
File:                     rCjcKlVLTjOaOZyWQrTOAmio37A.mft (raw, json)
Hash identifier:          dVR1BOuiUM44UEnwr4FZ1DsDqXOmjG0+5zEijqNKGJc=
Subject key identifier:   67:65:5F:D0:F8:D4:18:3C:B7:0D:51:25:AD:91:DA:38:E2:9B:8C:3C
Authority key identifier: AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0
Certificate issuer:       /CN=A915EA46/serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
Certificate serial:       0121
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
Manifest number:          011D
Signing time:             Wed 13 May 2026 05:53:11 +0000
Manifest this update:     Wed 13 May 2026 05:53:11 +0000
Manifest next update:     Wed 20 May 2026 05:53:11 +0000
Files and hashes:         1: rCjcKlVLTjOaOZyWQrTOAmio37A.crl (hash: cW+/tRKxaeV1orcfEvulvbV/Chuffn7xk4GOl+jOKmQ=)
                          2: A1E99A4E9C1211EFB233147EC4F9AE02.roa (hash: Hu4k/NqzAGOhZjU80rFAqOtaPO4XcnFZGlunYG4Pvw8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl
                          rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 289 (0x121)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915EA46, serialNumber=AC28DC2A554B4E339A399C9642B4CE0268A8DFB0
        Validity
            Not Before: May 13 05:53:11 2026 GMT
            Not After : May 20 05:53:11 2026 GMT
        Subject: CN=6a0411c7-7340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:99:d7:63:0a:6e:16:7b:df:1d:db:1b:8e:a9:
                    b5:1b:29:74:0d:ca:ca:c4:23:fc:ce:22:27:4f:53:
                    e2:fc:00:a3:49:71:b8:13:ce:29:de:40:26:de:b1:
                    3f:57:21:6c:16:d5:8f:40:5d:78:0a:7f:b6:20:8d:
                    ec:4c:99:a5:91:67:db:4f:72:9f:d6:d5:d3:ba:2c:
                    f8:d9:db:5c:38:d9:cd:42:49:ae:6b:25:64:55:ce:
                    74:83:be:25:7d:e8:97:06:bc:e9:ce:69:97:52:8d:
                    38:0f:bd:d8:fd:f9:82:21:c2:ca:7f:50:36:1d:78:
                    04:fa:d6:80:60:9a:12:a3:74:59:0c:c2:10:5c:5b:
                    c3:5a:7f:1d:e8:8f:2e:43:2e:d3:f4:52:a3:40:66:
                    e0:5f:c5:22:fb:69:a3:bd:99:74:77:a0:a0:48:bd:
                    86:b1:0b:dc:52:85:2f:81:3f:7d:8a:4a:12:a2:bc:
                    13:74:3a:94:55:85:4b:dc:cd:2e:45:2d:78:50:90:
                    2a:80:4c:cf:76:80:66:64:d7:75:72:7b:c6:a0:2c:
                    9f:42:37:f2:84:05:25:91:ca:23:02:7f:31:6d:b8:
                    1d:4a:87:3f:ad:8b:a4:72:67:98:22:11:3d:5a:2a:
                    29:dd:0a:b8:c2:bb:6c:2e:4a:9b:a7:20:69:8d:d3:
                    7b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:65:5F:D0:F8:D4:18:3C:B7:0D:51:25:AD:91:DA:38:E2:9B:8C:3C
            X509v3 Authority Key Identifier:
                keyid:AC:28:DC:2A:55:4B:4E:33:9A:39:9C:96:42:B4:CE:02:68:A8:DF:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rCjcKlVLTjOaOZyWQrTOAmio37A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915EA46/DBDA2CC49C1111EF92FBA97CC4F9AE02/rCjcKlVLTjOaOZyWQrTOAmio37A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:80:d0:d7:63:0d:9b:94:05:cc:1e:b7:8c:2c:9a:ad:44:71:
         ed:0e:2c:47:08:a1:ce:06:1c:3c:8e:2c:07:55:7c:3e:66:b8:
         fe:9c:bf:45:36:8d:cc:98:00:60:30:9c:37:6e:38:21:4a:d8:
         e5:96:a0:25:6b:d5:bd:47:4c:af:d5:1f:3a:ae:37:04:5d:de:
         99:79:8c:fc:02:15:3f:03:f5:26:2e:a6:c5:ff:1c:82:3e:ac:
         17:48:8e:bc:c2:8a:c1:2a:f1:43:39:fe:94:9a:4e:2b:b6:03:
         f2:6b:b7:81:d5:06:55:df:e8:31:27:93:8f:0f:65:c3:1a:72:
         a1:40:f2:25:1f:e6:39:b9:7a:e3:51:39:e3:9a:f2:9f:de:17:
         f2:65:d0:bb:6a:c3:a9:7f:dd:08:92:0e:0d:40:56:cf:54:c1:
         6f:5f:f5:55:1d:54:be:81:68:ce:e0:3e:bd:cc:71:53:c9:56:
         25:98:8e:9a:be:49:c7:f2:09:41:34:81:61:15:81:0f:a3:18:
         0c:89:43:20:7c:62:23:89:a2:da:10:83:92:79:cf:e5:68:a1:
         9d:54:a0:dc:4d:8c:26:fb:b2:34:4a:44:f1:67:01:70:d9:ab:
         bd:bf:0c:57:d0:0a:37:93:71:50:93:23:61:f0:66:f8:4d:cc:
         9c:7d:93:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:03:43 2026 by rpki-client