Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
File:                     xM4RIyFRinKEfG1X56ijVDRVNzs.mft (raw, json)
Hash identifier:          FnPX/P3I8yKaVo+qYa/WV2f76bWtHd2VbhgFUzhobiM=
Subject key identifier:   0F:81:F0:A7:F1:ED:C6:8A:1B:6C:9A:73:99:D0:02:8D:F9:27:04:87
Authority key identifier: C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B
Certificate issuer:       /CN=A9116D64/serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
Certificate serial:       355F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
Manifest number:          355F
Signing time:             Tue 28 Jul 2026 15:11:53 +0000
Manifest this update:     Tue 28 Jul 2026 15:11:53 +0000
Manifest next update:     Tue 04 Aug 2026 15:11:53 +0000
Files and hashes:         1: xM4RIyFRinKEfG1X56ijVDRVNzs.crl (hash: 6HdMAA9rJxexUDToM5HkSuvhi5T11F0J9FAIPb6bMYU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl
                          rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 04 Aug 2026 15:11:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13663 (0x355f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116D64, serialNumber=C4CE112321518A72847C6D57E7A8A3543455373B
        Validity
            Not Before: Jul 28 15:11:53 2026 GMT
            Not After : Aug  4 15:11:53 2026 GMT
        Subject: CN=6a68c6b9-1d6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8b:bd:6a:69:b9:09:1b:47:c4:3f:01:44:6b:
                    d5:b7:b2:2f:ad:a3:94:8d:13:24:b1:1e:ab:d6:79:
                    8e:97:a4:c0:e2:f2:d8:39:41:0d:14:fd:3e:62:86:
                    cd:34:f3:c6:bd:9e:44:94:eb:7b:c9:5b:4a:6e:5d:
                    19:ee:ec:c8:a2:8b:28:8b:9a:97:e5:60:f6:18:ff:
                    5c:bd:e1:c3:db:99:69:1b:4f:ea:05:5a:ed:c3:fd:
                    55:09:1c:97:84:91:bf:c7:b8:72:26:cd:aa:bf:ae:
                    7e:c2:25:f1:54:7d:36:e7:98:c5:5b:eb:e2:22:83:
                    c8:41:ec:a4:7b:25:49:4c:22:69:a3:dd:e5:e7:68:
                    7f:62:18:ff:4b:b9:51:4a:47:c3:eb:3f:8d:c7:f1:
                    c0:6b:1a:56:e9:ce:f4:90:0c:e6:4c:a2:c8:79:9e:
                    06:da:a9:71:44:32:eb:27:8e:57:24:87:76:06:89:
                    2d:4a:c3:be:2e:33:9b:d4:8c:0e:7d:47:e4:7a:f1:
                    22:31:d9:4e:02:6c:16:73:86:02:9c:c2:1b:db:dd:
                    82:31:f2:a3:57:d3:9a:71:08:5c:da:4a:14:3b:af:
                    84:d3:05:c5:76:4c:ac:2d:5f:9b:14:6b:f6:c7:32:
                    4e:65:c4:68:5a:f0:0d:2a:27:57:35:a5:ae:14:b7:
                    99:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:81:F0:A7:F1:ED:C6:8A:1B:6C:9A:73:99:D0:02:8D:F9:27:04:87
            X509v3 Authority Key Identifier:
                keyid:C4:CE:11:23:21:51:8A:72:84:7C:6D:57:E7:A8:A3:54:34:55:37:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xM4RIyFRinKEfG1X56ijVDRVNzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116D64/3AF9CAD81DA411E28BA3219A08B02CD2/xM4RIyFRinKEfG1X56ijVDRVNzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0d:ba:31:72:cc:e6:56:4f:31:6a:d1:90:7c:36:aa:ad:6a:3a:
         c3:0d:97:74:69:22:52:7b:74:0d:35:b4:16:11:3f:2a:23:eb:
         5d:39:0a:d7:ff:e4:fe:ec:6f:b9:07:49:f7:18:80:31:7a:ed:
         ad:49:e4:ad:8f:7c:13:38:ee:e7:61:ac:3f:73:f7:cf:7b:d1:
         e8:cd:ce:7c:7e:52:f9:2d:b3:2d:d9:11:70:26:5e:b1:5a:cd:
         d5:a8:4b:b8:cf:ca:81:c0:f7:61:8b:dd:24:87:dc:c9:e8:69:
         58:7a:be:77:02:72:4f:9b:f9:fa:96:23:3c:e5:c9:59:49:35:
         32:4e:15:27:2a:ab:75:07:72:ae:52:8e:ae:64:e7:0a:6e:cf:
         d9:5e:88:91:68:0c:9d:e3:6f:21:3c:63:0c:c3:a5:b9:bc:d0:
         37:e3:67:ca:35:09:97:b4:55:04:bf:2f:8a:57:b6:57:59:c8:
         5c:0e:5e:2e:02:3c:1c:c5:1e:e5:2f:54:05:86:38:26:bc:57:
         4c:f7:67:d5:fa:cd:76:31:d7:60:08:c9:7a:d0:0c:69:2f:df:
         28:a1:d8:b8:29:41:dd:d0:ba:60:f5:3c:a4:5a:fa:ac:32:0d:
         92:02:d3:b5:22:01:b1:13:f7:01:04:f0:6b:6c:b5:f8:71:e0:
         cd:13:6f:fe
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICNV8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTZENjQxMTAvBgNVBAUTKEM0Q0UxMTIzMjE1MThBNzI4NDdDNkQ1N0U3QThBMzU0
MzQ1NTM3M0IwHhcNMjYwNzI4MTUxMTUzWhcNMjYwODA0MTUxMTUzWjAYMRYwFAYD
VQQDEw02YTY4YzZiOS0xZDZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoYu9amm5CRtHxD8BRGvVt7IvraOUjRMksR6r1nmOl6TA4vLYOUENFP0+YobN
NPPGvZ5ElOt7yVtKbl0Z7uzIoosoi5qX5WD2GP9cveHD25lpG0/qBVrtw/1VCRyX
hJG/x7hyJs2qv65+wiXxVH0255jFW+viIoPIQeykeyVJTCJpo93l52h/Yhj/S7lR
SkfD6z+Nx/HAaxpW6c70kAzmTKLIeZ4G2qlxRDLrJ45XJId2BoktSsO+LjOb1IwO
fUfkevEiMdlOAmwWc4YCnMIb292CMfKjV9OacQhc2koUO6+E0wXFdkysLV+bFGv2
xzJOZcRoWvANKidXNaWuFLeZcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFA+B8Kfx
7caKG2yac5nQAo35JwSHMB8GA1UdIwQYMBaAFMTOESMhUYpyhHxtV+eoo1Q0VTc7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNkQ2NC8zQUY5Q0FEODFE
QTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmluS0VmRzFYNTZpalZEUlZO
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3hNNFJJeUZSaW5LRWZHMVg1NmlqVkRSVk56cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NkQ2NC8zQUY5Q0FEODFEQTQxMUUyOEJBMzIxOUEwOEIwMkNEMi94TTRSSXlGUmlu
S0VmRzFYNTZpalZEUlZOenMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEADboxcszmVk8xatGQfDaqrWo6ww2XdGkiUnt0DTW0FhE/KiPrXTkK1//k/uxv
uQdJ9xiAMXrtrUnkrY98Ezju52GsP3P3z3vR6M3OfH5S+S2zLdkRcCZesVrN1ahL
uM/KgcD3YYvdJIfcyehpWHq+dwJyT5v5+pYjPOXJWUk1Mk4VJyqrdQdyrlKOrmTn
Cm7P2V6IkWgMneNvITxjDMOlubzQN+NnyjUJl7RVBL8vile2V1nIXA5eLgI8HMUe
5S9UBYY4JrxXTPdn1frNdjHXYAjJetAMaS/fKKHYuClB3dC6YPU8pFr6rDINkgLT
tSIBsRP3AQTwa2y1+HHgzRNv/g==
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:48:52 2026 by rpki-client