Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
File:                     86DXLWMw1yFWoA2fRuqwyfyTvIw.mft (raw, json)
Hash identifier:          KvY7RvzabxHrrdRq1yvjPwM0Z9TIUb84kiUIa7I1bjI=
Subject key identifier:   0A:40:FD:DA:D5:B6:D8:96:6D:8D:AA:DE:51:CC:93:AD:1F:D5:A9:78
Authority key identifier: F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C
Certificate issuer:       /CN=A9135395/serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
Certificate serial:       029B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
Manifest number:          0293
Signing time:             Thu 21 May 2026 01:45:50 +0000
Manifest this update:     Thu 21 May 2026 01:45:50 +0000
Manifest next update:     Thu 28 May 2026 01:45:50 +0000
Files and hashes:         1: 86DXLWMw1yFWoA2fRuqwyfyTvIw.crl (hash: 2CqAsSPCsfuOpf6vpttLIQKZxWjDq+h26B0uiZdZPgk=)
                          2: 5F0ACC76962011F09F73D036C4F9AE02.roa (hash: zxI7VE3eg0TasmD62sh1djQSdFuNkWLF/C/+dkz7utI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl
                          rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:45:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 667 (0x29b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9135395, serialNumber=F3A0D72D6330D72156A00D9F46EAB0C9FC93BC8C
        Validity
            Not Before: May 21 01:45:50 2026 GMT
            Not After : May 28 01:45:50 2026 GMT
        Subject: CN=6a0e63ce-fa00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:a2:6b:ad:d4:d2:93:58:0a:8a:7a:d8:1c:e1:
                    04:89:d1:8f:b4:be:ae:2e:19:c0:5e:3c:ba:78:2d:
                    20:34:92:e8:59:0d:c5:cb:6d:de:16:22:40:17:e5:
                    9b:ea:3d:74:08:68:88:98:2c:68:2a:f4:e2:e9:32:
                    d1:99:f3:4f:97:54:ed:69:b8:e3:5b:b9:3d:45:6b:
                    88:09:4c:a0:77:90:af:26:60:87:ef:66:a1:93:dd:
                    60:46:26:ae:6c:97:d1:59:fb:26:0a:46:e3:e3:c9:
                    48:60:55:d8:27:d8:8e:da:1d:a1:34:de:70:76:ae:
                    44:1d:3d:8f:53:08:d1:e3:84:0d:c6:0f:2c:23:d4:
                    60:69:05:c5:a5:71:38:a3:fc:12:65:1d:3b:4c:f1:
                    ef:59:75:ff:cc:fe:0f:0e:8e:2b:c2:54:1d:00:d0:
                    13:13:28:54:cc:31:02:3c:c2:65:09:71:3a:16:dc:
                    92:38:c1:27:c8:f3:e1:81:8d:bb:65:b3:4d:31:e6:
                    aa:91:6d:90:a5:61:31:d3:a4:f1:25:e4:f5:a1:92:
                    4b:26:aa:1e:80:d6:b6:d5:79:86:2a:aa:13:a2:9c:
                    64:5b:ce:17:25:24:13:3e:65:76:8c:c3:83:77:1f:
                    20:cb:cb:73:ca:27:91:32:86:0a:e9:35:9b:84:5f:
                    f3:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:40:FD:DA:D5:B6:D8:96:6D:8D:AA:DE:51:CC:93:AD:1F:D5:A9:78
            X509v3 Authority Key Identifier:
                keyid:F3:A0:D7:2D:63:30:D7:21:56:A0:0D:9F:46:EA:B0:C9:FC:93:BC:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/86DXLWMw1yFWoA2fRuqwyfyTvIw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9135395/57E1D1846AE911EDBCDAAE22C4F9AE02/86DXLWMw1yFWoA2fRuqwyfyTvIw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3d:18:9e:b0:14:8d:e0:08:52:d9:23:55:5c:55:d5:06:b3:1e:
         e8:96:b4:bc:53:c4:c0:ac:81:fe:68:4a:f8:2a:97:75:01:28:
         25:87:0e:ff:83:18:dc:0b:e6:0e:89:04:e4:bc:4a:2a:42:e2:
         a3:7d:e6:6e:06:bb:55:15:c9:f4:69:32:45:c6:12:b2:9f:b5:
         a1:9f:eb:d4:ec:bd:1d:e7:88:c8:19:d0:81:b5:b6:4f:e1:05:
         54:77:1f:6c:14:54:45:09:ad:91:8c:04:45:66:ff:e8:6d:0a:
         06:b9:fe:54:7f:bb:ef:eb:92:84:29:23:f9:b9:8c:3a:97:08:
         56:fa:13:80:18:ec:25:6b:08:f3:24:a9:c0:21:1a:dc:b6:63:
         8d:00:b2:45:26:e7:15:03:d3:7d:f2:c4:5c:70:b9:bb:5c:5a:
         6a:f0:3a:44:25:23:6c:94:7f:87:8d:2e:ef:ba:1a:0c:b8:e6:
         02:8e:97:4a:6e:6e:ac:ee:5f:c8:e3:87:a3:e8:53:f7:e0:a5:
         1a:58:10:08:f7:d9:b9:5c:a9:a6:2f:d7:20:90:be:0d:bc:2a:
         31:ab:f8:04:d4:a9:90:ca:77:21:c3:1b:59:ab:24:f5:c3:fa:
         60:0d:4c:86:0d:a9:a8:7c:4e:5e:6e:a9:19:eb:68:8a:db:5f:
         29:d4:fb:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:29:13 2026 by rpki-client