Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
File:                     4xZnlgSAzwfjwi15DeTiAe9wQNs.mft (raw, json)
Hash identifier:          NXr4SMtM+gTDfcyGJqj6zPkAfpJ3iFvieJI3ZMVxVlg=
Subject key identifier:   5B:11:F1:18:95:37:15:AE:22:35:B2:EE:3E:BA:AE:E4:0F:8C:21:76
Authority key identifier: E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB
Certificate issuer:       /CN=A911B310/serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
Certificate serial:       0279
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
Manifest number:          0269
Signing time:             Fri 15 May 2026 02:12:36 +0000
Manifest this update:     Fri 15 May 2026 02:12:36 +0000
Manifest next update:     Fri 22 May 2026 02:12:36 +0000
Files and hashes:         1: 4xZnlgSAzwfjwi15DeTiAe9wQNs.crl (hash: r7igSvcU+OBhIc5GA+pi9rx3LYDjaJ0PbjDWRZoYfuU=)
                          2: 0BBC997C5DB911F0A54D4C6FC4F9AE02.roa (hash: wtwpRqnqeYQSTF5tuYeTMKBYPSpu+aJ0HfsSDYw4/oQ=)
                          3: 0ADA583C5DB911F0A54D4C6FC4F9AE02.roa (hash: vtHqwtSvpKd0UZw+IVp/WFTlhLrYLk265RmDqE6z7KQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl
                          rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 02:12:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 633 (0x279)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911B310, serialNumber=E31667960480CF07E3C22D790DE4E201EF7040DB
        Validity
            Not Before: May 15 02:12:36 2026 GMT
            Not After : May 22 02:12:36 2026 GMT
        Subject: CN=6a068114-862a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8a:9e:27:58:c2:9d:64:b7:19:e9:87:4a:a7:
                    69:01:81:ec:d3:ec:f0:d1:c5:f3:b1:7b:b9:54:bb:
                    e4:99:2b:3f:f3:f4:ce:90:12:ad:8e:e3:1f:ea:2a:
                    ba:0f:69:24:c4:73:95:14:74:10:4b:78:f0:7a:49:
                    f6:e3:c1:1c:33:ca:de:a1:a8:9f:f9:a5:0b:96:fe:
                    5a:7d:2d:9b:3e:83:4e:21:9d:ff:56:f5:c1:a9:7f:
                    19:5b:f6:d5:14:0d:16:3c:d1:f7:ef:a5:e1:81:d2:
                    d6:1f:77:1f:c6:f5:91:f8:1b:e7:34:24:51:fc:32:
                    dc:9c:34:70:59:a8:68:5a:96:ad:84:9e:e1:ab:f8:
                    fe:f6:8c:b0:18:dc:31:0c:2d:92:6b:36:6c:5e:a9:
                    17:bf:ec:81:7d:eb:6c:51:8f:d0:4c:37:09:e9:e7:
                    fc:9c:de:b0:0a:1e:5a:37:5c:a6:d4:a5:4a:5c:f3:
                    f5:99:40:fa:a8:4f:f0:d7:0e:83:37:09:f6:bf:68:
                    4b:2d:f1:5e:a4:ec:45:49:06:7e:7e:e0:7b:44:27:
                    58:5b:47:87:bc:9e:90:e2:21:35:93:b2:58:46:a3:
                    7b:44:89:34:b6:b5:8e:ce:de:0d:38:1b:97:43:ce:
                    bc:82:92:6f:b8:b7:ba:92:db:e2:7e:a5:16:42:e1:
                    1a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:11:F1:18:95:37:15:AE:22:35:B2:EE:3E:BA:AE:E4:0F:8C:21:76
            X509v3 Authority Key Identifier:
                keyid:E3:16:67:96:04:80:CF:07:E3:C2:2D:79:0D:E4:E2:01:EF:70:40:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4xZnlgSAzwfjwi15DeTiAe9wQNs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911B310/3EBD17C2AD1011ED854A3E1DC4F9AE02/4xZnlgSAzwfjwi15DeTiAe9wQNs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:a4:f1:3c:44:1d:64:f1:34:ed:26:db:73:2f:bc:d3:4c:f9:
         23:98:71:4a:80:a8:2d:ae:4b:f1:59:e0:18:d1:6e:f1:1a:a1:
         f8:a4:3f:ff:23:42:9f:89:67:f4:b0:4e:bf:2e:c0:30:ae:4d:
         8e:d0:f8:b3:d9:ae:a9:35:ea:27:a4:37:2f:f0:57:6c:cf:f3:
         4d:df:7e:66:b3:f1:47:0d:0b:f4:fc:9d:13:6f:6e:81:b0:2f:
         51:24:9b:2c:7f:b9:90:1b:94:f9:49:e0:f1:93:26:63:9e:cb:
         07:63:f8:16:ba:a1:2b:aa:0e:ab:97:83:76:a9:0d:d2:bd:87:
         26:b9:79:9d:48:2e:92:f3:43:e9:d2:28:1d:50:ee:f4:74:f2:
         b9:f2:70:4b:3e:3b:bd:9f:ce:b0:46:41:71:f6:67:2d:75:86:
         93:cb:2b:56:b8:80:6e:a7:65:40:77:9d:9a:84:81:8f:dd:48:
         95:de:c4:a6:9e:83:78:78:28:59:61:16:92:03:b4:08:0c:94:
         aa:c1:96:0a:79:01:63:23:15:dc:a4:4f:14:1b:b5:d3:a4:13:
         0a:b8:87:24:38:71:f4:90:63:b1:32:33:b8:e9:21:20:a2:d4:
         21:e3:93:e1:9e:5c:3f:8b:54:ec:c1:4e:21:66:2e:49:4b:d6:
         bc:5a:59:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 23:10:48 2026 by rpki-client