Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
File:                     bkWq8A0m8fB31nRzkUTUuMOU87g.mft (raw, json)
Hash identifier:          2M7zSoG2KeRooEMVvj4Q2XuBlU4hCgwjbsqZ5dZ/FCY=
Subject key identifier:   8D:79:1E:0F:D7:D6:D1:FD:7C:18:54:1B:20:A7:85:E2:F8:56:5B:0B
Authority key identifier: 6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8
Certificate issuer:       /CN=A919F0DA/serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
Certificate serial:       2492
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
Manifest number:          624E
Signing time:             Tue 12 May 2026 14:15:27 +0000
Manifest this update:     Tue 12 May 2026 14:15:27 +0000
Manifest next update:     Tue 19 May 2026 14:15:27 +0000
Files and hashes:         1: bkWq8A0m8fB31nRzkUTUuMOU87g.crl (hash: G3bV1BpdlTSL5lku0FCoua8XNnEEcu1eOWkwzzGk76k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl
                          rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:15:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9362 (0x2492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F0DA, serialNumber=6E45AAF00D26F1F077D674739144D4B8C394F3B8
        Validity
            Not Before: May 12 14:15:27 2026 GMT
            Not After : May 19 14:15:27 2026 GMT
        Subject: CN=6a0335ff-6eb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:9e:49:f5:8b:41:53:5e:0f:4c:03:aa:ea:3c:
                    b3:17:3a:b3:d3:ef:80:de:8e:d5:c0:06:2b:0c:a8:
                    1a:4b:92:1c:4e:a8:fe:a4:fa:c8:db:c7:4e:fb:d3:
                    5b:95:91:ae:59:9a:20:0e:15:c6:35:7a:93:23:4b:
                    23:c4:83:1e:9b:1e:06:2b:c6:ae:a9:a5:39:ac:31:
                    76:96:21:d1:a9:29:c9:95:ea:02:16:51:66:ca:97:
                    9f:79:99:80:30:c0:99:1e:d4:04:c2:6f:b9:64:24:
                    3e:5e:e1:2d:95:c5:ee:bc:07:16:df:f1:51:72:1b:
                    37:9b:6f:eb:a9:d1:44:3c:af:22:fe:41:44:2c:43:
                    37:9a:c4:7f:08:99:83:40:01:77:e3:fd:c8:e7:89:
                    84:50:48:c2:d8:73:1d:f0:5f:b8:9a:e0:f8:8e:14:
                    e1:de:b9:b6:43:80:4b:1c:34:2b:18:90:c7:c4:b8:
                    6c:f2:a3:82:b9:a9:a1:79:3a:fa:17:15:ce:5e:36:
                    74:3d:45:32:e2:78:9b:16:fc:d5:f7:e2:59:79:fc:
                    d3:d9:bc:04:dd:af:57:f6:02:34:ef:f6:93:21:72:
                    a0:50:b1:62:48:4c:bd:a7:9d:88:e9:2a:03:c9:a1:
                    a9:be:66:11:ee:27:68:84:14:26:95:a6:9a:46:8a:
                    5e:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:79:1E:0F:D7:D6:D1:FD:7C:18:54:1B:20:A7:85:E2:F8:56:5B:0B
            X509v3 Authority Key Identifier:
                keyid:6E:45:AA:F0:0D:26:F1:F0:77:D6:74:73:91:44:D4:B8:C3:94:F3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bkWq8A0m8fB31nRzkUTUuMOU87g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F0DA/150D3EF41D6811E28C1828A408B02CD2/bkWq8A0m8fB31nRzkUTUuMOU87g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7b:2a:11:a3:83:7f:87:87:96:b7:e0:c4:bc:7d:1a:84:0d:a9:
         ba:2a:d0:bd:87:a5:2d:22:cd:62:34:78:09:8d:d6:73:a5:c3:
         c3:81:88:ef:58:4a:e3:d2:f4:8c:35:78:3d:70:3f:41:70:f9:
         60:20:1d:b9:f9:8e:d4:b5:71:25:20:dd:f1:bf:e5:1e:a3:5e:
         0b:02:11:f9:94:90:a5:48:65:c3:b7:50:d9:97:f8:cd:ca:e2:
         7c:a0:c8:14:d3:fe:b5:64:d3:e4:50:9d:62:a5:f5:f1:57:ca:
         18:3b:84:2d:bd:68:61:63:23:25:db:2a:62:85:09:4f:45:b0:
         fa:9c:ab:b7:8f:51:81:6d:34:1a:19:9f:40:30:3c:0c:1c:62:
         ae:8f:27:32:e8:f0:11:8d:87:fe:2f:fb:b6:89:01:e7:60:eb:
         26:33:43:b8:1b:9f:48:23:20:8f:3b:2b:ba:05:fc:49:a2:e6:
         45:bf:50:a7:29:dd:98:9d:96:25:6e:e4:0e:6d:fb:6b:b2:11:
         9f:77:96:cd:cd:63:c5:a9:78:ae:85:74:3b:a8:a3:42:19:0d:
         4c:d0:b9:a5:d5:82:60:64:b4:a2:8c:c2:16:00:09:dd:db:a4:
         d1:93:32:7f:15:ff:74:81:3c:ec:b1:c9:d6:04:50:ee:18:d3:
         46:ff:01:db
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICJJIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
OUYwREExMTAvBgNVBAUTKDZFNDVBQUYwMEQyNkYxRjA3N0Q2NzQ3MzkxNDRENEI4
QzM5NEYzQjgwHhcNMjYwNTEyMTQxNTI3WhcNMjYwNTE5MTQxNTI3WjAYMRYwFAYD
VQQDEw02YTAzMzVmZi02ZWI2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAop5J9YtBU14PTAOq6jyzFzqz0++A3o7VwAYrDKgaS5IcTqj+pPrI28dO+9Nb
lZGuWZogDhXGNXqTI0sjxIMemx4GK8auqaU5rDF2liHRqSnJleoCFlFmypefeZmA
MMCZHtQEwm+5ZCQ+XuEtlcXuvAcW3/FRchs3m2/rqdFEPK8i/kFELEM3msR/CJmD
QAF34/3I54mEUEjC2HMd8F+4muD4jhTh3rm2Q4BLHDQrGJDHxLhs8qOCuamheTr6
FxXOXjZ0PUUy4nibFvzV9+JZefzT2bwE3a9X9gI07/aTIXKgULFiSEy9p52I6SoD
yaGpvmYR7idohBQmlaaaRopeNQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI15Hg/X
1tH9fBhUGyCnheL4VlsLMB8GA1UdIwQYMBaAFG5FqvANJvHwd9Z0c5FE1LjDlPO4
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5RjBEQS8xNTBEM0VGNDFE
NjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThmQjMxblJ6a1VUVXVNT1U4
N2cuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2JrV3E4QTBtOGZCMzFuUnprVVRVdU1PVTg3Zy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE5
RjBEQS8xNTBEM0VGNDFENjgxMUUyOEMxODI4QTQwOEIwMkNEMi9ia1dxOEEwbThm
QjMxblJ6a1VUVXVNT1U4N2cubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeyoRo4N/h4eWt+DEvH0ahA2puirQvYelLSLNYjR4CY3Wc6XDw4GI71hK49L0
jDV4PXA/QXD5YCAdufmO1LVxJSDd8b/lHqNeCwIR+ZSQpUhlw7dQ2Zf4zcrifKDI
FNP+tWTT5FCdYqX18VfKGDuELb1oYWMjJdsqYoUJT0Ww+pyrt49RgW00GhmfQDA8
DBxiro8nMujwEY2H/i/7tokB52DrJjNDuBufSCMgjzsrugX8SaLmRb9QpyndmJ2W
JW7kDm37a7IRn3eWzc1jxal4roV0O6ijQhkNTNC5pdWCYGS0oozCFgAJ3duk0ZMy
fxX/dIE87LHJ1gRQ7hjTRv8B2w==
-----END CERTIFICATE-----
Generated at Wed May 13 05:19:51 2026 by rpki-client