Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
File:                     aUCPaxygKBZoPM5MCOAEkyUZRLI.mft (raw, json)
Hash identifier:          bOnB/pJq7xlgCEFouV50sQMppXz1tW0X1Zl9qrr2oec=
Subject key identifier:   D3:99:3B:0D:79:79:D9:6C:57:37:AA:34:87:51:57:39:47:E0:0F:CB
Authority key identifier: 69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2
Certificate issuer:       /CN=A91166FC/serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
Certificate serial:       0B00
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
Manifest number:          0AE8
Signing time:             Wed 20 May 2026 19:27:35 +0000
Manifest this update:     Wed 20 May 2026 19:27:35 +0000
Manifest next update:     Wed 27 May 2026 19:27:35 +0000
Files and hashes:         1: aUCPaxygKBZoPM5MCOAEkyUZRLI.crl (hash: 5SOM5CXziUGKVSY2T1iOBrayOawwGuq5tc7kEM5opPs=)
                          2: 834C938A12C711F09998A234C4F9AE02.roa (hash: FGFCUH8ClLANdklj2bZ58cKTnItHntcutDN30p2U93k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl
                          rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 19:27:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2816 (0xb00)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91166FC, serialNumber=69408F6B1CA02816683CCE4C08E00493251944B2
        Validity
            Not Before: May 20 19:27:35 2026 GMT
            Not After : May 27 19:27:35 2026 GMT
        Subject: CN=6a0e0b27-390f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:0d:ea:cd:f9:1d:a7:10:93:81:41:f8:b8:9d:
                    cf:6c:4d:76:ac:15:c0:61:15:a8:e8:d1:86:6f:d5:
                    61:ae:65:43:41:e9:1f:fd:51:f3:99:ac:98:0b:86:
                    ee:e0:67:82:77:b9:2b:a8:c8:0a:ec:27:17:40:3b:
                    36:2f:76:fe:f6:26:8a:f2:d5:4d:84:a8:6f:db:f1:
                    21:8e:c7:da:f1:ca:ce:28:58:fd:c2:db:4e:16:1d:
                    8a:60:f7:fe:c2:ea:fa:6e:af:88:b8:a2:d2:cd:2e:
                    6f:0f:1e:d1:46:ce:6a:cd:cf:bd:ad:c0:0d:42:23:
                    e1:32:7f:b7:fb:6a:9e:cf:10:e3:d8:3c:06:c1:c8:
                    20:ae:66:c7:8c:5f:c8:7b:d9:17:1b:c9:d7:10:8f:
                    83:62:ab:2f:20:28:55:4c:18:3d:fa:b9:8a:0f:71:
                    11:65:93:92:54:03:ef:43:ac:c8:87:ba:eb:27:67:
                    3f:c6:3d:ef:bb:97:6c:bc:66:d3:5e:a8:13:df:8c:
                    95:e9:67:cf:93:f3:c2:ea:99:ff:d9:cd:0a:a0:83:
                    78:6a:2f:f3:c7:0e:a2:99:7e:ae:7a:f6:48:c0:f0:
                    21:65:c0:48:75:04:76:09:0c:4a:b9:0d:2c:71:d7:
                    a3:cf:48:59:e7:7c:2b:bf:76:91:4d:43:5c:9c:41:
                    b0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:99:3B:0D:79:79:D9:6C:57:37:AA:34:87:51:57:39:47:E0:0F:CB
            X509v3 Authority Key Identifier:
                keyid:69:40:8F:6B:1C:A0:28:16:68:3C:CE:4C:08:E0:04:93:25:19:44:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUCPaxygKBZoPM5MCOAEkyUZRLI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91166FC/AB1F4ECA729A11EAABBF9141C4F9AE02/aUCPaxygKBZoPM5MCOAEkyUZRLI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c6:29:86:75:2f:26:13:58:7e:70:d4:e6:8d:2b:3f:58:f5:72:
         e6:6f:dd:e3:8b:ec:9e:88:27:79:cf:12:09:e4:55:a5:46:66:
         e4:92:11:c9:2e:69:14:24:67:6c:0e:a4:e1:eb:56:f3:f0:8b:
         9f:3c:2d:f2:03:9a:b9:0c:2f:4a:d0:10:09:b8:ae:7a:90:15:
         cf:de:41:89:a4:00:c8:ff:21:ab:63:40:d1:d7:cd:d6:fe:a2:
         68:c4:75:7e:47:e4:71:56:2e:e2:60:1a:68:70:e1:fe:27:ed:
         5b:89:ed:8a:25:50:5c:82:ec:b0:e8:04:2b:34:4e:df:b2:e9:
         92:3a:b4:96:bb:aa:42:61:bc:29:04:d6:39:ba:16:44:bd:0d:
         84:28:07:ee:c2:3b:3b:7b:9a:38:04:48:e1:e0:db:c9:96:d5:
         d5:48:e4:35:fd:85:b1:6b:16:de:5b:b9:34:4b:7f:c7:4a:72:
         11:96:7c:eb:34:11:28:fe:a6:13:6c:8f:12:c4:97:6a:2c:91:
         90:5f:76:bc:67:fe:82:59:2a:81:ff:3e:b9:bd:f9:28:91:f1:
         8d:81:1b:64:37:a9:8a:49:c4:72:57:88:eb:f9:d2:6d:ae:d9:
         d2:44:e0:ef:a9:8d:f1:fb:1f:49:75:fe:30:3b:31:f5:dd:7f:
         40:5a:f9:f7
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTY2RkMxMTAvBgNVBAUTKDY5NDA4RjZCMUNBMDI4MTY2ODNDQ0U0QzA4RTAwNDkz
MjUxOTQ0QjIwHhcNMjYwNTIwMTkyNzM1WhcNMjYwNTI3MTkyNzM1WjAYMRYwFAYD
VQQDEw02YTBlMGIyNy0zOTBmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApg3qzfkdpxCTgUH4uJ3PbE12rBXAYRWo6NGGb9VhrmVDQekf/VHzmayYC4bu
4GeCd7krqMgK7CcXQDs2L3b+9iaK8tVNhKhv2/Ehjsfa8crOKFj9wttOFh2KYPf+
wur6bq+IuKLSzS5vDx7RRs5qzc+9rcANQiPhMn+3+2qezxDj2DwGwcggrmbHjF/I
e9kXG8nXEI+DYqsvIChVTBg9+rmKD3ERZZOSVAPvQ6zIh7rrJ2c/xj3vu5dsvGbT
XqgT34yV6WfPk/PC6pn/2c0KoIN4ai/zxw6imX6uevZIwPAhZcBIdQR2CQxKuQ0s
cdejz0hZ53wrv3aRTUNcnEGw+wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNOZOw15
edlsVzeqNIdRVzlH4A/LMB8GA1UdIwQYMBaAFGlAj2scoCgWaDzOTAjgBJMlGUSy
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExNjZGQy9BQjFGNEVDQTcy
OUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tCWm9QTTVNQ09BRWt5VVpS
TEkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2FVQ1BheHlnS0Jab1BNNU1DT0FFa3lVWlJMSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
NjZGQy9BQjFGNEVDQTcyOUExMUVBQUJCRjkxNDFDNEY5QUUwMi9hVUNQYXh5Z0tC
Wm9QTTVNQ09BRWt5VVpSTEkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAximGdS8mE1h+cNTmjSs/WPVy5m/d44vsnognec8SCeRVpUZm5JIRyS5pFCRn
bA6k4etW8/CLnzwt8gOauQwvStAQCbiuepAVz95BiaQAyP8hq2NA0dfN1v6iaMR1
fkfkcVYu4mAaaHDh/iftW4ntiiVQXILssOgEKzRO37Lpkjq0lruqQmG8KQTWOboW
RL0NhCgH7sI7O3uaOARI4eDbyZbV1UjkNf2FsWsW3lu5NEt/x0pyEZZ86zQRKP6m
E2yPEsSXaiyRkF92vGf+glkqgf8+ub35KJHxjYEbZDepiknEcleI6/nSba7Z0kTg
76mN8fsfSXX+MDsx9d1/QFr59w==
-----END CERTIFICATE-----
Generated at Thu May 21 10:14:45 2026 by rpki-client