Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
File:                     5k3PxJR4oTweMa6HKi-sEL-4lTE.mft (raw, json)
Hash identifier:          JeS7WpeJVScKMRDRYM3aTzYHldlFfJtiwmTfZq5E1EA=
Subject key identifier:   F8:02:6B:47:CB:01:43:29:59:CB:F8:8C:32:3E:EB:18:96:50:3F:5B
Authority key identifier: E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31
Certificate issuer:       /CN=A915F67F/serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531
Certificate serial:       353C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
Manifest number:          353C
Signing time:             Tue 12 May 2026 14:33:41 +0000
Manifest this update:     Tue 12 May 2026 14:33:40 +0000
Manifest next update:     Tue 19 May 2026 14:33:40 +0000
Files and hashes:         1: 5k3PxJR4oTweMa6HKi-sEL-4lTE.crl (hash: xHdx359PbV9T4dTvxzTW43BNquZs0uMXnw97jtt5/pE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl
                          rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:33:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13628 (0x353c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915F67F, serialNumber=E64DCFC49478A13C1E31AE872A2FAC10BFB89531
        Validity
            Not Before: May 12 14:33:40 2026 GMT
            Not After : May 19 14:33:40 2026 GMT
        Subject: CN=6a033a44-cfb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2a:3e:e0:f6:f4:14:99:db:2e:e3:91:ef:13:
                    28:0b:ee:d3:c3:d4:83:7b:b7:92:3d:44:9d:70:a5:
                    14:77:d8:05:29:88:ef:9f:c8:c8:1b:e7:7c:dd:ac:
                    a5:5e:8a:8e:5d:5c:b6:81:00:d8:6e:99:dc:1e:24:
                    56:85:22:e7:28:36:dc:72:c2:7f:08:bf:b4:ee:dd:
                    dd:6e:f7:20:df:4b:d7:ff:60:eb:28:c6:ee:bd:90:
                    f5:a1:d1:c9:11:1f:fc:82:58:dc:0b:b0:bf:17:b7:
                    12:c6:ed:a3:ba:e2:6f:b7:1b:31:6a:7e:82:a0:61:
                    ba:ab:dc:e4:4c:82:92:52:da:5c:fc:ed:de:88:9a:
                    91:5c:4d:93:b3:66:1a:a1:8f:c6:c8:0e:0a:20:67:
                    f7:35:58:63:ef:c5:d2:fd:ad:2f:a5:87:13:e9:e4:
                    f8:59:6a:85:d5:ed:3c:db:2c:88:f4:6e:3c:10:e2:
                    f3:33:e5:18:33:2a:ad:9e:00:a0:09:dd:a2:5c:e3:
                    37:c1:ad:88:e5:76:d5:5c:f0:80:7f:57:2c:a4:9f:
                    72:c6:14:09:ed:06:58:8d:ed:56:f3:15:92:ae:df:
                    ed:e6:d3:97:47:38:8c:fd:46:44:f6:73:e6:a6:f5:
                    26:5d:14:18:21:dd:9e:e6:53:ea:9f:be:c4:d0:ad:
                    3f:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:02:6B:47:CB:01:43:29:59:CB:F8:8C:32:3E:EB:18:96:50:3F:5B
            X509v3 Authority Key Identifier:
                keyid:E6:4D:CF:C4:94:78:A1:3C:1E:31:AE:87:2A:2F:AC:10:BF:B8:95:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5k3PxJR4oTweMa6HKi-sEL-4lTE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915F67F/91B983C81D8A11E2B0E494E408B02CD2/5k3PxJR4oTweMa6HKi-sEL-4lTE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9a:35:c3:31:a6:76:b3:87:45:e0:3d:03:6d:d8:a7:91:b2:76:
         34:bc:4c:99:a9:de:91:27:8e:fb:a4:86:66:94:91:66:6c:50:
         9b:ff:ac:f5:be:25:a2:d4:dc:97:88:ca:44:18:5b:97:ca:47:
         04:2e:7e:2c:3a:25:36:8d:1e:a7:77:a6:4b:3e:e9:31:fa:cc:
         be:07:d6:2b:37:b5:93:6e:90:f3:0e:df:2a:fa:9a:82:ac:c7:
         bc:ca:9d:3d:5e:f4:27:2b:a9:2a:fc:d2:82:26:80:ef:3b:70:
         dc:a2:4d:ff:39:9c:e9:f9:77:57:97:e9:a1:fe:b3:71:52:92:
         40:85:ff:53:6b:e5:2e:3d:f1:df:45:e3:4f:73:0f:16:a0:7b:
         5a:d8:c3:1a:f5:38:c1:a6:6e:81:04:fe:a8:2a:14:d5:64:64:
         c5:98:b1:9b:c9:6a:4b:cd:78:4e:01:7a:e0:1a:01:ae:5d:b6:
         b3:d1:f4:0b:6c:95:a5:81:ba:05:56:96:5b:0e:78:8a:2d:5a:
         d2:b6:0c:fd:75:b6:68:bb:8c:3f:28:a8:51:e0:91:43:c7:40:
         03:4b:4e:2d:9d:f7:39:ab:e4:83:87:e2:fc:ff:d4:53:ec:7b:
         d5:8a:7f:e0:92:93:b1:13:f6:d2:fa:5d:00:11:44:3c:7a:a6:
         2a:70:d0:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:19:07 2026 by rpki-client