Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
File:                     5DyCH7uc7qZ-unouUFzF3X92YFU.mft (raw, json)
Hash identifier:          Iw7GOW8L1StxC2w2GMmw3RpVxwF+JJyFwLjnIx3t2gs=
Subject key identifier:   CC:16:AD:90:15:DA:7D:C0:77:CA:65:E8:E5:E7:DF:8B:A4:BD:FE:82
Authority key identifier: E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55
Certificate issuer:       /CN=A9114D2E/serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
Certificate serial:       0B91
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
Manifest number:          0B7D
Signing time:             Fri 22 May 2026 19:09:06 +0000
Manifest this update:     Fri 22 May 2026 19:09:06 +0000
Manifest next update:     Fri 29 May 2026 19:09:06 +0000
Files and hashes:         1: 5DyCH7uc7qZ-unouUFzF3X92YFU.crl (hash: zeLFD4ln6VoQl6BJ6PB3AmDtzX3p8LF/eGOWJb2zCNs=)
                          2: 823433125F0C11EC8C2C2820C4F9AE02.roa (hash: I2M9w6e7F+kF8zoqR1zOccQi0KP2UgvXuI5yq77m7wM=)
                          3: 8ABED0585F0911ECA629B815C4F9AE02.roa (hash: qJFLmW+cXJRTYpRYhxmf/kfGb1OFH5gs6tcdRPh5wTs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl
                          rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 May 2026 19:09:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2961 (0xb91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114D2E, serialNumber=E43C821FBB9CEEA67EBA7A2E505CC5DD7F766055
        Validity
            Not Before: May 22 19:09:06 2026 GMT
            Not After : May 29 19:09:06 2026 GMT
        Subject: CN=6a10a9d2-a5dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b5:c7:3c:18:65:d1:75:dd:9c:50:bf:ea:2b:
                    7e:9d:0d:1b:93:2a:96:f6:70:89:c7:f8:fd:39:93:
                    5b:47:dc:cd:21:e9:29:8d:d8:90:00:75:a8:ad:c1:
                    37:fe:ec:a0:ac:cc:58:a7:47:9d:aa:df:02:46:b9:
                    ad:60:53:c7:d3:89:c8:2b:6b:05:dd:b9:65:cb:16:
                    68:da:e6:a0:6e:14:55:57:15:49:b9:04:a9:2e:3b:
                    af:99:ae:f4:10:61:6d:eb:c0:cb:98:ac:b0:f6:fa:
                    3b:d4:be:a7:ee:5d:02:47:22:cd:f5:0e:08:c7:42:
                    23:12:95:c2:12:b0:3a:3d:e3:c4:ce:01:15:e8:f7:
                    51:90:a8:a3:67:99:06:15:8d:25:e1:63:3e:ea:9f:
                    ed:f4:d0:5d:6b:4c:11:60:09:0c:08:20:ad:84:76:
                    72:cd:d9:4b:e2:0a:18:21:58:28:cd:e3:9f:cd:15:
                    9a:f4:16:25:19:aa:85:a2:43:17:26:b0:ce:d4:a3:
                    61:e3:fa:4e:81:09:f6:b6:2d:6b:eb:b6:e6:ac:e3:
                    53:e5:30:db:bf:4b:a4:51:ce:13:c2:27:df:d3:af:
                    4e:d9:f1:3a:07:f3:ca:d6:bd:18:8b:a9:db:e2:44:
                    6c:d9:77:9e:56:98:25:2b:c5:10:31:1e:fe:9f:de:
                    af:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:16:AD:90:15:DA:7D:C0:77:CA:65:E8:E5:E7:DF:8B:A4:BD:FE:82
            X509v3 Authority Key Identifier:
                keyid:E4:3C:82:1F:BB:9C:EE:A6:7E:BA:7A:2E:50:5C:C5:DD:7F:76:60:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5DyCH7uc7qZ-unouUFzF3X92YFU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114D2E/0FE19C6C511E11EAB8182580C4F9AE02/5DyCH7uc7qZ-unouUFzF3X92YFU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:61:a9:6d:cb:ce:19:b7:1e:46:ac:be:b5:ff:a5:0f:c3:46:
         e8:80:47:d7:38:f4:3b:f7:1d:86:f5:2e:ee:1b:2f:38:f6:c7:
         d9:18:c1:98:18:0c:bb:22:c4:b4:78:bd:b1:06:bd:d5:23:90:
         23:70:61:52:4a:81:69:9c:2b:6a:f3:20:ae:9a:ad:28:5e:51:
         50:e0:b1:a6:43:bd:53:10:ea:00:62:d4:6e:77:ee:9a:3f:7f:
         a9:04:a0:e4:9b:8f:f8:41:2a:a6:c4:ee:bb:36:65:6b:d2:81:
         66:35:4f:a3:a2:c8:fa:6a:8f:97:dd:e9:f6:ee:25:df:60:df:
         73:5c:4e:40:3a:25:a4:ad:72:90:16:19:86:ae:a0:ae:8d:1d:
         2b:0d:dc:4c:d6:5d:4a:aa:e2:f6:4c:16:6f:44:c7:b3:33:7f:
         76:55:a7:3b:06:0a:f2:85:e8:3c:2a:8b:e0:04:d5:44:41:cc:
         88:b3:52:df:07:5d:c5:6c:b9:18:df:ed:10:d2:69:34:00:a7:
         c1:55:02:77:4e:22:20:c9:63:a2:11:cc:83:bc:67:56:87:67:
         49:42:99:89:a4:89:e0:0a:9b:b7:3a:b5:fa:c0:ea:1d:32:d2:
         25:b3:24:21:61:da:2c:89:11:0d:f8:bc:32:ae:65:d8:b0:23:
         85:9f:bb:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 23 03:48:21 2026 by rpki-client