Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
File:                     8wm0k6ku58YpXgCQYwolGh0TZRc.mft (raw, json)
Hash identifier:          GQO6GYF5HUe0sR2VJTFkaczxOtQ4QgsfUWR4L/m6qBs=
Subject key identifier:   3C:2F:17:04:64:C0:35:9A:02:CC:FE:7F:9E:7A:D2:FE:5D:EC:D6:E7
Authority key identifier: F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17
Certificate issuer:       /CN=A913D756/serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
Manifest number:          0103
Signing time:             Fri 17 Apr 2026 05:50:08 +0000
Manifest this update:     Fri 17 Apr 2026 05:50:08 +0000
Manifest next update:     Fri 24 Apr 2026 05:50:08 +0000
Files and hashes:         1: 8wm0k6ku58YpXgCQYwolGh0TZRc.crl (hash: GxCIkksYgDTrazSvKuKh4kBNdIWisf9Q/LIlpzJJrUE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl
                          rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 05:50:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913D756, serialNumber=F309B493A92EE7C6295E0090630A251A1D136517
        Validity
            Not Before: Apr 17 05:50:08 2026 GMT
            Not After : Apr 24 05:50:08 2026 GMT
        Subject: CN=69e1ca10-8ed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:91:35:f9:65:05:28:43:e5:43:55:38:3f:9e:
                    b0:3e:9d:26:a8:11:3c:7b:e2:a8:a6:bb:ea:64:17:
                    33:3b:73:40:f1:cb:86:de:1f:08:a2:3e:ee:e7:cf:
                    e5:7d:a7:c8:2e:1a:ae:75:3c:ae:1f:34:0a:76:1d:
                    d0:c9:96:ae:ed:e5:e3:77:5d:5e:d2:a5:81:ea:09:
                    42:38:1b:28:92:db:82:1e:f2:31:76:74:21:48:bc:
                    cc:8c:10:9c:2b:bd:7a:53:03:ff:e5:9d:39:15:b8:
                    7b:c6:ce:e0:7b:54:0a:dc:96:88:3c:f8:ad:8c:85:
                    1d:46:e4:d2:16:36:64:7d:46:1c:9e:f5:83:38:33:
                    9e:41:0f:27:26:8c:b2:63:16:c1:55:9d:c9:da:32:
                    a9:e3:b0:8d:77:d3:86:21:15:7f:b5:37:81:d7:2c:
                    50:62:80:5b:4f:17:2f:28:17:0e:1a:5d:bd:62:2d:
                    9a:19:0f:6d:98:a8:4d:31:b6:ee:58:34:b2:82:13:
                    81:66:f5:d5:e4:ea:77:e0:aa:d6:86:8e:74:38:ad:
                    30:a1:df:8e:82:7b:0b:3b:6d:e2:ed:3f:ce:c2:9e:
                    94:a5:4b:56:c0:0c:53:28:9b:84:0d:5c:f7:ce:c4:
                    89:53:10:08:8a:53:fd:fc:f6:1f:05:42:6c:a4:f9:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:2F:17:04:64:C0:35:9A:02:CC:FE:7F:9E:7A:D2:FE:5D:EC:D6:E7
            X509v3 Authority Key Identifier:
                keyid:F3:09:B4:93:A9:2E:E7:C6:29:5E:00:90:63:0A:25:1A:1D:13:65:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/8wm0k6ku58YpXgCQYwolGh0TZRc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913D756/6A421A80B06711EF8214D469C4F9AE02/8wm0k6ku58YpXgCQYwolGh0TZRc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:66:cc:7d:30:c9:89:f6:dc:1f:21:84:3c:7e:90:cf:8c:c6:
         fb:b2:62:69:a9:4c:5c:3e:70:d1:51:c6:20:c1:bf:de:cc:a7:
         9b:ce:48:58:83:4b:71:25:c6:c5:46:29:60:bc:6e:7b:36:e1:
         89:9f:19:f4:98:5b:7f:65:8c:dd:db:b5:ba:0e:f0:1f:1f:a8:
         cf:a2:a5:d0:37:cb:dd:f5:6a:c3:7c:da:03:b1:2e:48:38:35:
         0b:73:d7:85:f6:dc:d6:92:f5:a3:9e:03:63:60:2f:f9:9d:91:
         35:4d:63:79:45:e8:17:2c:e7:31:14:3a:74:ca:34:dc:e0:73:
         bb:d0:7a:dd:d3:9f:53:b9:8b:6f:ab:62:d2:49:1f:b9:c2:45:
         70:82:f2:2c:f7:d8:3c:c0:51:46:80:4f:e2:79:a8:0f:b8:f4:
         45:8b:2f:8a:49:b1:27:8f:dd:11:34:48:77:a5:af:d9:49:20:
         88:51:ed:33:45:24:cb:33:53:d2:c1:a7:e0:33:d9:7c:eb:c1:
         8d:35:d4:50:bc:5f:79:f6:86:18:4c:67:5d:20:c4:40:ef:c5:
         e3:29:5b:c6:da:1c:26:12:70:82:55:4a:e7:63:1a:c4:71:84:
         a4:01:19:85:55:1b:67:8d:b6:90:ba:6f:6c:20:2d:85:a9:eb:
         02:67:a8:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 19:06:25 2026 by rpki-client