Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
File:                     3OYifAVHwArsZcXmgPYXk_SdVYM.mft (raw, json)
Hash identifier:          YMWuhgb4Yec7n42KgmQsDYvLvzK8w6f9nis4uJapnoA=
Subject key identifier:   43:22:32:E1:92:10:5E:0A:16:8A:FB:A8:76:E0:1E:77:C7:84:6E:EB
Authority key identifier: DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83
Certificate issuer:       /CN=A918FCB4/serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
Certificate serial:       08BF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
Manifest number:          099C
Signing time:             Tue 12 May 2026 20:33:32 +0000
Manifest this update:     Tue 12 May 2026 20:33:32 +0000
Manifest next update:     Tue 19 May 2026 20:33:32 +0000
Files and hashes:         1: 3OYifAVHwArsZcXmgPYXk_SdVYM.crl (hash: hrX5DOfljYQ9hTVR317Baj/zxUhWYEBKkP2VOLthI3c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl
                          rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:33:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2239 (0x8bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918FCB4, serialNumber=DCE6227C0547C00AEC65C5E680F61793F49D5583
        Validity
            Not Before: May 12 20:33:32 2026 GMT
            Not After : May 19 20:33:32 2026 GMT
        Subject: CN=6a038e9c-9363
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f7:d4:f7:9b:86:d6:e8:77:85:3e:41:21:c1:
                    56:29:db:7e:f7:41:97:19:c3:63:70:62:04:16:fe:
                    54:73:b4:7e:05:4a:b2:8c:1d:2e:a9:1d:2a:19:58:
                    a3:90:47:4e:11:f3:58:b3:54:2b:6a:57:58:6a:aa:
                    d9:be:a6:54:ae:ca:40:82:ad:2f:ad:a2:07:9c:19:
                    01:89:cc:8a:8c:39:c1:6b:06:ff:c0:6f:62:ea:52:
                    ee:c3:87:0d:e6:6c:b2:91:7f:99:53:e2:b8:1c:aa:
                    75:fa:6e:be:ef:c2:93:f3:b7:51:9c:5c:66:4e:82:
                    e1:5f:f7:bc:6c:77:90:68:05:4d:08:a9:f0:26:03:
                    f5:3a:f0:ec:06:38:16:8b:f1:db:ac:85:c3:fc:e1:
                    3b:e3:81:c8:fe:31:af:d9:d6:43:51:55:82:bb:7f:
                    ea:df:34:fb:b0:f4:23:e1:3b:d0:10:4f:34:da:59:
                    31:99:33:21:0b:18:cf:4d:d3:df:38:92:78:c3:73:
                    6c:0f:73:85:72:7b:c8:95:ab:78:f7:a9:f6:b5:38:
                    2b:d0:d4:30:70:10:b3:b1:55:f7:3d:f7:dc:48:ed:
                    7b:89:d4:fe:6b:42:cb:cc:06:0c:ac:09:b8:b9:2f:
                    81:73:73:89:8f:76:33:f6:89:82:8c:01:11:2a:8b:
                    f7:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:22:32:E1:92:10:5E:0A:16:8A:FB:A8:76:E0:1E:77:C7:84:6E:EB
            X509v3 Authority Key Identifier:
                keyid:DC:E6:22:7C:05:47:C0:0A:EC:65:C5:E6:80:F6:17:93:F4:9D:55:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3OYifAVHwArsZcXmgPYXk_SdVYM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918FCB4/3A7AD3B2E38611EA9FA23A36C4F9AE02/3OYifAVHwArsZcXmgPYXk_SdVYM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:5e:ac:97:a2:55:f6:aa:c1:73:55:39:a1:bb:12:ba:02:dc:
         23:e9:29:10:6e:ec:16:52:34:34:cc:95:0b:4e:c3:a5:4e:0d:
         df:df:61:f1:da:1f:fa:4c:09:a6:1f:09:04:23:ee:3b:20:16:
         ec:34:d3:86:af:30:4b:d4:99:19:38:aa:78:ab:78:3b:ba:b9:
         ca:c9:3f:f1:02:08:ea:c2:7e:00:cc:75:ab:68:a2:c8:12:ce:
         a9:61:c8:17:1e:7b:73:df:83:ae:d1:95:73:0a:40:39:46:b2:
         56:73:bc:34:70:1b:e2:c1:03:56:dd:86:af:17:d6:34:0c:51:
         d7:8e:e6:1f:ac:e3:11:ed:ec:87:63:37:a5:6b:f0:48:a1:08:
         95:72:99:7d:c8:b4:a7:23:bd:b8:c5:33:df:4d:1b:fb:ce:f4:
         fd:e9:aa:cb:90:ea:c5:cd:3d:a5:6e:d9:a1:6c:55:b8:5a:25:
         b4:2b:fc:8c:9b:be:be:02:df:12:80:82:6d:a6:91:b3:e7:61:
         f3:fa:93:92:24:01:9d:07:2b:f8:68:5c:1d:96:ac:ba:b9:2e:
         56:26:a8:f3:b9:02:89:4f:1b:45:87:4c:ea:b7:5d:38:92:7d:
         8a:32:75:51:bd:61:88:6a:63:47:43:0b:9e:22:3f:1f:ca:bd:
         2c:b7:7e:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCL8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OEZDQjQxMTAvBgNVBAUTKERDRTYyMjdDMDU0N0MwMEFFQzY1QzVFNjgwRjYxNzkz
RjQ5RDU1ODMwHhcNMjYwNTEyMjAzMzMyWhcNMjYwNTE5MjAzMzMyWjAYMRYwFAYD
VQQDEw02YTAzOGU5Yy05MzYzMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAt/fU95uG1uh3hT5BIcFWKdt+90GXGcNjcGIEFv5Uc7R+BUqyjB0uqR0qGVij
kEdOEfNYs1QraldYaqrZvqZUrspAgq0vraIHnBkBicyKjDnBawb/wG9i6lLuw4cN
5myykX+ZU+K4HKp1+m6+78KT87dRnFxmToLhX/e8bHeQaAVNCKnwJgP1OvDsBjgW
i/HbrIXD/OE744HI/jGv2dZDUVWCu3/q3zT7sPQj4TvQEE802lkxmTMhCxjPTdPf
OJJ4w3NsD3OFcnvIlat496n2tTgr0NQwcBCzsVX3PffcSO17idT+a0LLzAYMrAm4
uS+Bc3OJj3Yz9omCjAERKov3mwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFEMiMuGS
EF4KFor7qHbgHnfHhG7rMB8GA1UdIwQYMBaAFNzmInwFR8AK7GXF5oD2F5P0nVWD
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4RkNCNC8zQTdBRDNCMkUz
ODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdBcnNaY1htZ1BZWGtfU2RW
WU0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzNPWWlmQVZId0Fyc1pjWG1nUFlYa19TZFZZTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
RkNCNC8zQTdBRDNCMkUzODYxMUVBOUZBMjNBMzZDNEY5QUUwMi8zT1lpZkFWSHdB
cnNaY1htZ1BZWGtfU2RWWU0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAHF6sl6JV9qrBc1U5obsSugLcI+kpEG7sFlI0NMyVC07DpU4N399h8dof+kwJ
ph8JBCPuOyAW7DTThq8wS9SZGTiqeKt4O7q5ysk/8QII6sJ+AMx1q2iiyBLOqWHI
Fx57c9+DrtGVcwpAOUayVnO8NHAb4sEDVt2GrxfWNAxR147mH6zjEe3sh2M3pWvw
SKEIlXKZfci0pyO9uMUz300b+870/emqy5Dqxc09pW7ZoWxVuFoltCv8jJu+vgLf
EoCCbaaRs+dh8/qTkiQBnQcr+GhcHZasurkuViao87kCiU8bRYdM6rddOJJ9ijJ1
Ub1hiGpjR0MLniI/H8q9LLd+0A==
-----END CERTIFICATE-----
Generated at Wed May 13 04:35:55 2026 by rpki-client