Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
File:                     cM0ClgpxFOH9f9syrJqj6NKuv0E.mft (raw, json)
Hash identifier:          3TqRefkB43tFS/qw9nxIvxeI6PxZ6sDPhO5l0LiWdVI=
Subject key identifier:   FC:34:CF:3D:AD:4D:4B:74:55:B4:64:66:4F:B6:E6:A7:B9:50:75:E7
Authority key identifier: 70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41
Certificate issuer:       /CN=A916EF5E/serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
Certificate serial:       170A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
Manifest number:          279B
Signing time:             Wed 22 Jul 2026 16:43:26 +0000
Manifest this update:     Wed 22 Jul 2026 16:43:26 +0000
Manifest next update:     Wed 29 Jul 2026 16:43:26 +0000
Files and hashes:         1: cM0ClgpxFOH9f9syrJqj6NKuv0E.crl (hash: eD/g2TI9hzNM/RdVRPt06YNNctNvYScar7NUXWh1SGI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl
                          rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 29 Jul 2026 16:43:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5898 (0x170a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EF5E, serialNumber=70CD02960A7114E1FD7FDB32AC9AA3E8D2AEBF41
        Validity
            Not Before: Jul 22 16:43:26 2026 GMT
            Not After : Jul 29 16:43:26 2026 GMT
        Subject: CN=6a60f32e-4387
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:25:d2:dc:6f:d3:51:fc:56:c0:ed:71:de:6f:
                    48:d3:c8:f3:c3:1e:d0:6a:25:75:8a:ba:fd:51:3f:
                    28:89:ca:38:1c:4f:cf:41:8f:ca:b4:8e:a0:0d:72:
                    d0:1c:3f:d6:28:ab:c0:6b:b4:15:9e:3f:d0:06:9c:
                    9a:7b:63:d9:4b:c7:97:46:6d:30:c5:38:b9:80:85:
                    67:e0:ab:77:ed:9d:68:bc:b4:88:90:d1:98:37:71:
                    3b:e9:f1:d1:8a:5a:e7:d7:73:2f:44:51:cf:c5:f7:
                    a5:49:35:c1:bd:6b:10:41:3b:29:09:27:e7:0b:9b:
                    d4:40:e6:21:9f:f2:d3:b2:c6:bd:f3:17:a2:85:b6:
                    64:61:de:c1:d6:f3:26:84:b7:da:85:83:6e:96:60:
                    44:74:b6:4d:3e:0e:82:9d:ae:65:81:2c:1e:72:d3:
                    41:d0:a6:e7:ea:ee:81:98:ee:ce:7d:71:41:95:e9:
                    b4:10:8e:7e:e9:4b:48:33:4b:3c:51:39:ce:bd:ab:
                    4f:ec:66:f6:be:3b:48:8d:e0:98:bd:ad:de:e2:65:
                    bd:2b:0e:cc:2b:d9:44:35:59:e2:34:a4:be:1b:0c:
                    7f:38:c1:8a:91:3c:5f:8a:82:f6:b7:89:ff:3a:20:
                    d4:69:72:31:f2:d2:66:fe:24:9c:2d:97:3a:72:34:
                    6e:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:34:CF:3D:AD:4D:4B:74:55:B4:64:66:4F:B6:E6:A7:B9:50:75:E7
            X509v3 Authority Key Identifier:
                keyid:70:CD:02:96:0A:71:14:E1:FD:7F:DB:32:AC:9A:A3:E8:D2:AE:BF:41

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cM0ClgpxFOH9f9syrJqj6NKuv0E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EF5E/F38DCF8A106B11E8B8CA020BC4F9AE02/cM0ClgpxFOH9f9syrJqj6NKuv0E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6b:71:e3:46:4d:ca:5e:fe:12:c1:96:59:b9:a8:d5:1e:a5:44:
         84:ab:5a:ad:49:95:85:08:73:c7:82:6a:e6:46:b0:98:cd:34:
         52:33:1a:83:b6:c4:c2:4e:66:d9:e6:4c:dc:0b:9c:ad:b6:87:
         b8:ed:37:ec:13:13:30:98:cb:db:b4:fb:1e:b7:f9:f4:42:fa:
         2e:47:20:6c:ed:80:a5:07:b6:67:08:1c:1c:82:f7:e3:77:49:
         c5:5b:aa:f7:df:43:49:f8:95:29:e2:0e:59:45:24:6f:01:fa:
         72:78:b3:b5:fe:73:2c:68:c2:d8:a6:7e:2a:40:72:b1:7c:16:
         48:81:c0:ce:8c:75:28:21:ef:2c:28:97:f6:3f:b6:44:39:35:
         0b:b4:5c:9f:2b:49:54:47:ec:9a:bd:71:d5:09:06:96:dd:a3:
         2d:28:6b:6d:8a:90:a8:64:77:51:1f:37:f8:d2:f4:4f:17:9c:
         1a:6c:0e:ee:ae:16:af:5c:80:73:90:51:b7:8a:63:07:75:b7:
         19:1a:05:04:d3:e0:07:cc:c0:00:02:4f:45:01:60:68:d0:54:
         b1:79:07:aa:0e:a4:84:73:c2:3a:37:94:27:e7:bf:95:07:b8:
         d8:b5:ae:97:96:7b:30:61:b6:86:05:b9:0c:78:1b:91:4f:4c:
         88:c5:9c:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICFwowDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NkVGNUUxMTAvBgNVBAUTKDcwQ0QwMjk2MEE3MTE0RTFGRDdGREIzMkFDOUFBM0U4
RDJBRUJGNDEwHhcNMjYwNzIyMTY0MzI2WhcNMjYwNzI5MTY0MzI2WjAYMRYwFAYD
VQQDEw02YTYwZjMyZS00Mzg3MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuyXS3G/TUfxWwO1x3m9I08jzwx7QaiV1irr9UT8oico4HE/PQY/KtI6gDXLQ
HD/WKKvAa7QVnj/QBpyae2PZS8eXRm0wxTi5gIVn4Kt37Z1ovLSIkNGYN3E76fHR
ilrn13MvRFHPxfelSTXBvWsQQTspCSfnC5vUQOYhn/LTssa98xeihbZkYd7B1vMm
hLfahYNulmBEdLZNPg6Cna5lgSwectNB0Kbn6u6BmO7OfXFBlem0EI5+6UtIM0s8
UTnOvatP7Gb2vjtIjeCYva3e4mW9Kw7MK9lENVniNKS+Gwx/OMGKkTxfioL2t4n/
OiDUaXIx8tJm/iScLZc6cjRubwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPw0zz2t
TUt0VbRkZk+25qe5UHXnMB8GA1UdIwQYMBaAFHDNApYKcRTh/X/bMqyao+jSrr9B
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2RUY1RS9GMzhEQ0Y4QTEw
NkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZPSDlmOXN5ckpxajZOS3V2
MEUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2NNMENsZ3B4Rk9IOWY5c3lySnFqNk5LdXYwRS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2
RUY1RS9GMzhEQ0Y4QTEwNkIxMUU4QjhDQTAyMEJDNEY5QUUwMi9jTTBDbGdweEZP
SDlmOXN5ckpxajZOS3V2MEUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAa3HjRk3KXv4SwZZZuajVHqVEhKtarUmVhQhzx4Jq5kawmM00UjMag7bEwk5m
2eZM3AucrbaHuO037BMTMJjL27T7Hrf59EL6LkcgbO2ApQe2ZwgcHIL343dJxVuq
999DSfiVKeIOWUUkbwH6cniztf5zLGjC2KZ+KkBysXwWSIHAzox1KCHvLCiX9j+2
RDk1C7RcnytJVEfsmr1x1QkGlt2jLShrbYqQqGR3UR83+NL0TxecGmwO7q4Wr1yA
c5BRt4pjB3W3GRoFBNPgB8zAAAJPRQFgaNBUsXkHqg6khHPCOjeUJ+e/lQe42LWu
l5Z7MGG2hgW5DHgbkU9MiMWcwg==
-----END CERTIFICATE-----
Generated at Thu Jul 23 22:03:41 2026 by rpki-client