Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
File:                     R1dShEvqeklwW8JaqPDJ7xAMmPg.mft (raw, json)
Hash identifier:          UBeOH7umh09dT12OUBImHAzX6T95/I5pIJZkWRbJJyc=
Subject key identifier:   8C:CA:B0:F3:5B:87:BE:A9:E2:CB:06:87:51:20:EA:97:B6:54:6C:D9
Authority key identifier: 47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8
Certificate issuer:       /CN=A912D072/serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
Certificate serial:       089A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
Manifest number:          086F
Signing time:             Mon 18 May 2026 20:35:08 +0000
Manifest this update:     Mon 18 May 2026 20:35:07 +0000
Manifest next update:     Mon 25 May 2026 20:35:07 +0000
Files and hashes:         1: R1dShEvqeklwW8JaqPDJ7xAMmPg.crl (hash: ZjFRMAEjiM+qc7/GZT3oAJ8Uh26nJtEo6quOGlDaPjI=)
                          2: 430E7F9CACBC11EBB0651B63C4F9AE02.roa (hash: yORei5KpH6OrXSTxn5SzQbTbq4XYVihJ7MoNWsI4oTo=)
                          3: 452550BCACBC11EBB0651B63C4F9AE02.roa (hash: 1+/TSeqM0xH0r4ykTodyEDUT7FZPqGrEUSLZkMBLnfQ=)
                          4: 44873A76ACBC11EBB0651B63C4F9AE02.roa (hash: PZdaQN5bcibKqcfzydfFFWwb3ypU3837yXutax2XYyI=)
                          5: 424D6EC4ACBC11EBB0651B63C4F9AE02.roa (hash: Lb/T9nBCmtckdHe4b9hm5305kn9OjeJ7JSA7XieKmSk=)
                          6: 43A8A46EACBC11EBB0651B63C4F9AE02.roa (hash: eoYohii7cC6khiQ+f0wpp//0YBGq0N/Ozq5XmvZPWOg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl
                          rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 25 May 2026 20:35:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2202 (0x89a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D072, serialNumber=475752844BEA7A49705BC25AA8F0C9EF100C98F8
        Validity
            Not Before: May 18 20:35:07 2026 GMT
            Not After : May 25 20:35:07 2026 GMT
        Subject: CN=6a0b77fc-0ff3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:af:20:d3:46:42:92:f3:42:b9:43:15:e2:56:
                    7f:a5:cf:94:46:6c:16:7f:a8:51:a9:8e:73:15:bd:
                    7f:9c:f1:e8:65:f5:87:fa:7b:56:e8:f5:35:9e:9b:
                    c4:90:28:36:bf:fe:29:a5:2c:19:e4:d8:96:9c:8e:
                    31:13:a2:18:75:c2:ca:30:a0:50:6d:f9:13:aa:d3:
                    1d:5e:66:65:70:25:d2:f4:da:aa:3b:3d:06:1b:90:
                    1f:60:dc:95:34:58:9a:d8:86:1e:61:41:68:81:bf:
                    a5:f2:62:ab:5e:69:d9:7d:c3:38:b8:c1:ec:cc:2a:
                    ef:1a:75:9a:bd:3c:3a:43:e2:0a:d2:c2:f6:41:e1:
                    6e:08:17:ef:e9:e5:10:fe:d4:f0:8d:fa:63:db:1f:
                    a0:54:2a:34:32:e5:30:ee:50:68:c4:43:3f:ee:6e:
                    03:dc:8e:1b:0f:26:51:46:2d:ef:44:bf:21:8d:56:
                    67:12:b7:21:4c:82:01:28:3c:c0:a2:03:cb:56:c0:
                    59:0f:7e:1c:41:02:f2:3f:ca:3d:10:7a:62:7f:a3:
                    82:ca:a6:ea:34:98:b1:0e:e8:74:2c:e0:c4:8d:c4:
                    d6:1a:84:32:07:5f:92:d4:75:9e:29:92:50:7f:18:
                    08:6b:d6:da:b4:d6:d7:53:c7:4f:5c:f3:c6:d4:80:
                    a9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:CA:B0:F3:5B:87:BE:A9:E2:CB:06:87:51:20:EA:97:B6:54:6C:D9
            X509v3 Authority Key Identifier:
                keyid:47:57:52:84:4B:EA:7A:49:70:5B:C2:5A:A8:F0:C9:EF:10:0C:98:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/R1dShEvqeklwW8JaqPDJ7xAMmPg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D072/3A418936FBE611EAB353660CC4F9AE02/R1dShEvqeklwW8JaqPDJ7xAMmPg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ae:41:1a:fd:e4:d0:dd:bc:3c:43:28:50:3d:22:9f:8e:98:46:
         ee:49:91:3c:7b:51:14:bb:09:f8:00:50:2b:4e:8a:60:07:11:
         53:6a:9c:7a:a2:27:cb:d6:50:b9:bc:a4:58:68:70:37:6f:cb:
         56:44:0d:b4:4c:3e:86:d5:19:29:16:d7:6c:3e:c9:a1:b7:0f:
         b7:16:af:3e:9e:90:6d:d0:30:c5:51:6e:6e:eb:ec:4a:20:74:
         8b:dd:3f:c1:10:36:44:47:6e:73:84:11:c8:41:b0:3b:42:d1:
         ce:1a:cb:0f:9a:51:08:e6:d4:8a:f6:06:6b:08:c3:7d:d8:dd:
         3f:d5:57:79:dd:d9:9c:c1:6c:db:e2:76:1f:6b:b0:ef:48:c6:
         11:9e:d8:a8:f3:90:4d:b9:be:56:73:91:79:b7:a8:16:a9:87:
         c3:40:a8:4c:d9:5e:a8:bf:c4:13:d6:1b:8d:43:fc:ff:49:f4:
         61:78:1e:01:58:61:d7:24:42:4a:62:f9:97:cd:b5:49:b7:98:
         d9:75:da:12:a5:40:1b:6e:e8:a0:10:10:3b:0a:82:97:a5:9c:
         75:8c:9a:4f:6c:bd:63:5c:ed:03:35:ef:5a:18:bf:44:fb:ab:
         a7:42:9c:56:8a:0e:e7:88:6a:e0:c3:16:05:70:57:4a:67:a7:
         a5:82:3d:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 20 15:53:51 2026 by rpki-client