Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
File:                     lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft (raw, json)
Hash identifier:          /Zhtdi5yXIOm8mtH4l9rNvSFvclbU6DCrtlRScAv7nU=
Subject key identifier:   3C:77:94:18:89:B6:AA:FE:1A:7C:2C:4B:EB:3D:6B:44:EE:25:53:2B
Authority key identifier: 94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2
Certificate issuer:       /CN=A91CDF78/serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
Certificate serial:       06
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
Manifest number:          06
Signing time:             Mon 11 May 2026 09:24:27 +0000
Manifest this update:     Mon 11 May 2026 09:24:26 +0000
Manifest next update:     Mon 18 May 2026 09:24:26 +0000
Files and hashes:         1: lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl (hash: Sc4fW1QFk1TJwutKEEVXBbyaZhQQk2rluyaOXFSEQz4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl
                          rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:24:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CDF78, serialNumber=948E8C11D74BACF16CBF82CD403694E0DB7E94F2
        Validity
            Not Before: May 11 09:24:26 2026 GMT
            Not After : May 18 09:24:26 2026 GMT
        Subject: CN=6a01a04b-2322
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b0:c6:a8:aa:de:67:83:09:b9:04:18:65:9a:
                    ed:56:75:31:5f:9e:c1:65:a6:20:e1:2a:ac:e4:41:
                    51:4a:1e:94:76:f7:98:fb:a1:02:d2:3b:58:ad:91:
                    76:3d:18:84:43:f4:3d:fa:28:fb:9b:f9:fe:18:4f:
                    e0:48:d8:bb:7b:f9:24:3d:9a:cc:ad:1f:eb:5d:ac:
                    dc:1f:16:ed:08:12:c2:3e:24:30:31:f9:68:6f:8f:
                    83:51:0b:71:c3:33:35:d5:e6:21:83:3b:84:ed:de:
                    5d:d3:d9:42:e9:e9:2f:d7:c6:1e:ee:a8:4f:17:0c:
                    da:3d:97:6e:40:5e:3c:9a:e9:85:9c:30:81:27:b2:
                    a1:d5:f5:e5:71:1d:15:3f:44:74:c8:7c:f6:2e:58:
                    4f:5a:af:0e:a0:86:1c:fc:48:41:c1:dc:f6:ea:f6:
                    53:21:96:21:24:a9:ca:85:5c:83:d4:da:d6:98:b7:
                    ae:ce:18:08:e8:86:a1:0f:46:31:5f:00:60:c7:4e:
                    b0:cc:71:40:34:6d:a6:57:a9:f5:e2:0f:c4:f7:23:
                    1a:05:fc:a2:e2:8c:27:84:89:e7:5f:88:6b:4c:91:
                    75:19:ad:f6:be:03:93:9a:12:89:56:61:6b:10:70:
                    36:59:44:a9:c2:1c:9f:58:08:0b:b5:9b:67:b9:2d:
                    e1:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:77:94:18:89:B6:AA:FE:1A:7C:2C:4B:EB:3D:6B:44:EE:25:53:2B
            X509v3 Authority Key Identifier:
                keyid:94:8E:8C:11:D7:4B:AC:F1:6C:BF:82:CD:40:36:94:E0:DB:7E:94:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lI6MEddLrPFsv4LNQDaU4Nt-lPI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDF78/FABDF29E47C611F19E38693EB1833773/lI6MEddLrPFsv4LNQDaU4Nt-lPI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         98:f2:de:ad:6e:b7:d8:ba:19:fa:80:f4:e7:2a:0d:84:67:22:
         35:2b:4f:44:2a:96:2a:ae:47:5c:ac:5b:22:b8:70:a6:95:77:
         a1:f4:ae:10:15:ff:e2:01:a1:9f:e3:a3:00:64:36:47:58:73:
         28:02:4a:51:81:87:f8:72:5b:f6:8c:e0:77:7b:3e:6b:b7:ce:
         77:43:fb:15:44:2f:1b:c5:b6:dd:d5:56:7a:50:20:9e:d8:96:
         58:89:38:90:39:45:3c:ae:f0:5d:38:5f:e9:6f:11:45:4e:15:
         73:75:43:e5:ad:fd:f2:b0:1c:33:54:eb:24:04:bd:39:68:ad:
         c7:e0:2f:88:a8:be:71:8b:00:b2:0a:12:21:85:24:0e:7e:ca:
         53:0a:09:da:f4:e7:1b:d3:37:06:7c:9e:10:e0:d9:cb:52:fe:
         ca:e4:04:5e:1e:b3:3f:f1:ab:52:70:47:2b:47:0d:03:72:f4:
         c6:cf:02:27:0d:6e:35:d7:77:4f:e2:3f:a3:a7:6a:0a:4a:2c:
         38:e1:7b:c6:a5:f2:2f:30:96:97:eb:8e:c5:22:b3:c1:12:fc:
         fe:89:1e:a7:56:f1:a0:a3:fd:0f:e5:6a:34:8a:80:d0:dc:49:
         d2:3c:4a:38:0c:84:32:3d:de:a4:25:81:8c:90:8b:08:01:ad:
         7e:22:35:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:33:04 2026 by rpki-client