Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft
File:                     8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft (raw, json)
Hash identifier:          pYCuCHsQ1ZhqPUAj9PpOX9ZqUMOg1ZhvjYrWy3THXrA=
Subject key identifier:   76:DF:ED:99:5D:BF:D3:D3:D0:0A:11:CA:2C:5D:30:9F:CF:4B:2C:5A
Authority key identifier: F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0
Certificate issuer:       /CN=A91D09BC/serialNumber=F15D11790B0E75357406611DC57058F69DC578A0
Certificate serial:       0131
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft
Manifest number:          0133
Signing time:             Mon 11 May 2026 05:59:19 +0000
Manifest this update:     Mon 11 May 2026 05:59:18 +0000
Manifest next update:     Mon 18 May 2026 05:59:18 +0000
Files and hashes:         1: 8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl (hash: 0mxZLMBZZgUnkwdAikusWmWVUXISW6WRrlxDd3GoAnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl
                          rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:59:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 305 (0x131)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D09BC, serialNumber=F15D11790B0E75357406611DC57058F69DC578A0
        Validity
            Not Before: May 11 05:59:18 2026 GMT
            Not After : May 18 05:59:18 2026 GMT
        Subject: CN=6a017037-276b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:96:c7:94:0f:76:c2:2d:ed:71:02:90:82:5a:
                    54:57:63:e9:47:a9:9d:6c:31:a4:e2:c2:5c:f8:27:
                    97:45:57:e8:e2:0e:27:ea:00:86:62:9d:71:07:59:
                    57:b6:f7:51:28:03:87:f7:96:bd:f0:2b:00:0f:3c:
                    00:ed:ae:8b:0a:72:59:50:fe:1c:5a:79:17:96:24:
                    c3:48:3c:ac:03:14:ea:ad:72:f4:ce:f2:cb:07:74:
                    c2:ab:d3:03:e1:e5:47:8a:62:9f:2a:00:7f:be:00:
                    19:23:ab:54:b6:71:5a:7d:9a:4c:d8:58:45:41:93:
                    e6:b0:5b:a4:45:74:6c:02:ab:9f:d6:a5:8d:cb:d3:
                    ed:6d:bd:71:57:04:9c:01:df:ca:34:56:40:cf:fa:
                    f5:dd:f6:7b:3b:2b:cd:57:fe:42:9d:26:75:7b:f5:
                    f8:d2:6d:96:51:06:3a:6e:a8:65:83:fe:b8:41:46:
                    d1:f2:2f:6f:e2:a2:ac:3c:ab:6d:f9:dc:bc:54:6f:
                    65:b3:84:39:f3:bf:59:c9:f0:e7:ab:8d:29:9b:d5:
                    c1:61:9b:5f:3b:87:42:1c:3e:72:dd:8a:94:df:6f:
                    fc:9e:f8:89:df:f8:a6:ee:31:44:aa:55:30:67:0c:
                    fa:43:80:eb:99:b8:d2:2f:a5:fd:17:6d:18:e0:3a:
                    68:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DF:ED:99:5D:BF:D3:D3:D0:0A:11:CA:2C:5D:30:9F:CF:4B:2C:5A
            X509v3 Authority Key Identifier:
                keyid:F1:5D:11:79:0B:0E:75:35:74:06:61:1D:C5:70:58:F6:9D:C5:78:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8V0ReQsOdTV0BmEdxXBY9p3FeKA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D09BC/CB882E7EA70711EF99A57741C4F9AE02/8V0ReQsOdTV0BmEdxXBY9p3FeKA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:76:4b:1f:ab:b0:3a:bd:f8:34:f9:b4:1d:a0:74:c7:ae:30:
         ea:a5:6f:75:e6:e1:93:cd:57:b8:db:8c:2a:ac:bd:a0:dd:c1:
         e3:45:e6:73:b8:3c:4a:2a:16:11:b9:fc:9f:1b:16:22:89:8e:
         d5:08:d8:2e:64:90:4a:9a:68:fa:c1:a4:8a:5e:e4:6e:82:b3:
         c6:bb:a6:df:c9:94:a2:e0:f6:4d:97:dc:42:8a:c1:c9:08:b7:
         52:44:80:09:ad:2d:12:cf:a2:66:6e:1f:ed:90:ae:3f:12:21:
         d0:a2:d7:c6:14:1e:e9:62:2e:85:27:8c:a1:6e:ae:ad:88:d6:
         18:5d:6f:3a:9a:80:6b:d9:79:67:d4:ea:21:50:ec:80:66:e9:
         1e:44:69:62:12:4c:3d:d3:36:f3:fc:a2:5a:94:88:eb:d8:36:
         0c:a9:2d:71:7e:76:60:f0:09:ed:c1:80:41:bd:46:14:a9:ed:
         7f:b0:98:a8:96:6c:fb:36:ac:23:c2:a6:06:dc:26:41:22:74:
         d1:05:dc:29:a8:77:b0:f0:1c:d8:fb:1c:73:93:26:3a:f9:77:
         24:30:f1:3e:ad:8d:2f:de:23:83:be:40:8e:1e:22:94:96:b4:
         b0:26:b8:a7:bd:a6:26:bd:d8:5a:0f:c6:77:07:bf:f1:c7:03:
         55:28:6f:89
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICATEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDA5QkMxMTAvBgNVBAUTKEYxNUQxMTc5MEIwRTc1MzU3NDA2NjExREM1NzA1OEY2
OURDNTc4QTAwHhcNMjYwNTExMDU1OTE4WhcNMjYwNTE4MDU1OTE4WjAYMRYwFAYD
VQQDEw02YTAxNzAzNy0yNzZiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAq5bHlA92wi3tcQKQglpUV2PpR6mdbDGk4sJc+CeXRVfo4g4n6gCGYp1xB1lX
tvdRKAOH95a98CsADzwA7a6LCnJZUP4cWnkXliTDSDysAxTqrXL0zvLLB3TCq9MD
4eVHimKfKgB/vgAZI6tUtnFafZpM2FhFQZPmsFukRXRsAquf1qWNy9Ptbb1xVwSc
Ad/KNFZAz/r13fZ7OyvNV/5CnSZ1e/X40m2WUQY6bqhlg/64QUbR8i9v4qKsPKtt
+dy8VG9ls4Q5879ZyfDnq40pm9XBYZtfO4dCHD5y3YqU32/8nviJ3/im7jFEqlUw
Zwz6Q4DrmbjSL6X9F20Y4DpoUQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHbf7Zld
v9PT0AoRyixdMJ/PSyxaMB8GA1UdIwQYMBaAFPFdEXkLDnU1dAZhHcVwWPadxXig
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFEMDlCQy9DQjg4MkU3RUE3
MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RUVjBCbUVkeFhCWTlwM0Zl
S0EuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhWMFJlUXNPZFRWMEJtRWR4WEJZOXAzRmVLQS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
MDlCQy9DQjg4MkU3RUE3MDcxMUVGOTlBNTc3NDFDNEY5QUUwMi84VjBSZVFzT2RU
VjBCbUVkeFhCWTlwM0ZlS0EubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAcXZLH6uwOr34NPm0HaB0x64w6qVvdebhk81XuNuMKqy9oN3B40Xmc7g8SioW
Ebn8nxsWIomO1QjYLmSQSppo+sGkil7kboKzxrum38mUouD2TZfcQorByQi3UkSA
Ca0tEs+iZm4f7ZCuPxIh0KLXxhQe6WIuhSeMoW6urYjWGF1vOpqAa9l5Z9TqIVDs
gGbpHkRpYhJMPdM28/yiWpSI69g2DKktcX52YPAJ7cGAQb1GFKntf7CYqJZs+zas
I8KmBtwmQSJ00QXcKah3sPAc2Pscc5MmOvl3JDDxPq2NL94jg75Ajh4ilJa0sCa4
p72mJr3YWg/Gdwe/8ccDVShviQ==
-----END CERTIFICATE-----
Generated at Wed May 13 04:11:13 2026 by rpki-client