Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
File:                     C3f3vSPLQoWNC7_29-OscxNVMdU.mft (raw, json)
Hash identifier:          /BzsTsw4eeEtu4K1pB84Fw+2Odhq/GcQlRssVN11cAs=
Subject key identifier:   CA:79:D0:27:73:65:C3:8E:A8:6D:A9:ED:15:4D:84:98:71:7D:3C:64
Authority key identifier: 0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5
Certificate issuer:       /CN=A91EBC61/serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
Certificate serial:       010B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
Manifest number:          010B
Signing time:             Mon 11 May 2026 06:08:29 +0000
Manifest this update:     Mon 11 May 2026 06:08:28 +0000
Manifest next update:     Mon 18 May 2026 06:08:28 +0000
Files and hashes:         1: C3f3vSPLQoWNC7_29-OscxNVMdU.crl (hash: BGxIBnMTlbA/pssru123mjyPlYm6HDNC/Cy0N3ORhJg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl
                          rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:08:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 267 (0x10b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBC61, serialNumber=0B77F7BD23CB42858D0BBFF6F7E3AC73135531D5
        Validity
            Not Before: May 11 06:08:28 2026 GMT
            Not After : May 18 06:08:28 2026 GMT
        Subject: CN=6a01725d-ba67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:a5:28:b2:4a:36:38:f1:43:c1:2e:5d:0a:65:
                    09:45:83:26:7a:0f:75:ce:47:24:70:b6:88:80:ef:
                    53:1e:7b:64:e3:b0:79:3a:4c:f7:1f:6c:17:e1:e4:
                    26:3a:3f:ce:1b:83:44:cb:aa:41:7e:67:ea:1e:f9:
                    15:3f:64:e7:0c:06:51:aa:71:85:c7:9d:99:39:75:
                    88:6b:10:f9:33:f6:af:dd:4d:6f:e1:34:b4:d2:7a:
                    29:45:53:ad:28:e4:13:0d:52:20:68:ee:ba:4b:8c:
                    c9:3d:6f:66:2d:49:4c:38:60:fc:cc:61:e4:e9:0c:
                    f6:5d:5d:0e:df:de:23:d1:d4:8c:b9:90:45:e9:8c:
                    16:a0:f7:9f:38:b4:7d:5f:08:7d:98:93:f5:92:bf:
                    cd:27:55:72:bf:77:0d:65:58:98:61:42:64:41:7a:
                    1c:4d:37:bc:1c:61:5e:ed:90:7f:06:f1:71:94:87:
                    e8:2e:f8:9e:3f:3d:b5:80:3b:98:59:ca:03:bd:5b:
                    c8:52:9b:44:ec:47:5e:d6:97:23:a4:9f:f9:fc:9f:
                    5b:a2:75:81:e6:0b:91:e3:c9:0a:1d:5b:80:ba:4d:
                    1d:f7:88:e3:f0:f5:be:e1:b0:36:aa:50:d3:a8:35:
                    56:20:ae:e6:8e:05:a0:c3:b6:8b:32:2d:a7:83:3e:
                    2e:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:79:D0:27:73:65:C3:8E:A8:6D:A9:ED:15:4D:84:98:71:7D:3C:64
            X509v3 Authority Key Identifier:
                keyid:0B:77:F7:BD:23:CB:42:85:8D:0B:BF:F6:F7:E3:AC:73:13:55:31:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C3f3vSPLQoWNC7_29-OscxNVMdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBC61/4C6F6856B6C411EFA24AA616C4F9AE02/C3f3vSPLQoWNC7_29-OscxNVMdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:1e:21:63:2e:8d:05:97:26:fb:3f:41:b6:59:55:2b:c7:30:
         cb:cb:4f:c7:45:b2:08:bc:05:b2:b9:a8:25:69:1e:66:8b:e1:
         87:19:0c:0f:fc:f3:6d:8e:f2:0e:07:62:ba:a5:91:95:9f:74:
         8b:71:55:66:ff:ff:f3:82:80:a6:ef:bf:8d:a7:4c:d8:25:ee:
         1d:a0:03:88:6f:b8:7d:44:44:02:c6:5e:26:93:ac:90:a0:f2:
         ad:1b:61:dd:99:4e:16:bb:ee:e2:8b:85:70:1d:52:67:81:7b:
         7a:9e:ac:10:2d:50:d9:d0:33:55:73:ba:55:f5:ec:7e:1a:ce:
         bc:c7:e5:b2:eb:e1:d7:6b:a6:a3:cd:d0:36:8d:9f:71:99:05:
         ff:9c:74:e4:53:53:42:62:ac:e3:03:12:14:90:70:59:28:5f:
         51:b1:8d:d5:84:15:37:02:37:69:c5:51:b9:71:8f:f4:49:79:
         45:43:43:1b:35:e5:5a:c3:43:78:ef:f7:b6:db:64:86:3e:71:
         fe:32:5d:de:b9:63:dd:08:1a:eb:57:32:fa:ac:a9:94:67:bf:
         2a:e1:59:0e:38:25:a6:e2:f5:df:71:c8:ff:5e:42:4b:7f:b8:
         06:89:0c:2a:31:04:d1:b2:31:60:6b:79:12:f4:eb:e4:4a:4d:
         66:7f:95:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:28:39 2026 by rpki-client