Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
File:                     84ggnKyyxrgUysV4XUv002zElx8.mft (raw, json)
Hash identifier:          c0JbJUIB0qpVTbC8kLy2bocEsfTjRPQhB6lgrF6l8rM=
Subject key identifier:   B9:E6:F3:0A:1B:C1:DE:CF:55:28:E4:63:5C:9F:D6:21:53:E8:C4:4F
Authority key identifier: F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F
Certificate issuer:       /CN=A9138A50/serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
Certificate serial:       050C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
Manifest number:          0505
Signing time:             Wed 20 May 2026 23:44:55 +0000
Manifest this update:     Wed 20 May 2026 23:44:55 +0000
Manifest next update:     Wed 27 May 2026 23:44:55 +0000
Files and hashes:         1: 84ggnKyyxrgUysV4XUv002zElx8.crl (hash: qck7/pGopgrH6TkBW+EDDFo/1nwI4I1FYP3YqfyKdUc=)
                          2: 0DA4853256FC11EC8032440FC4F9AE02.roa (hash: 4pb/gM8lDNYdlH1fovFGDxDjw7tPKno0MVw8fyTlO8I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl
                          rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1292 (0x50c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9138A50, serialNumber=F388209CACB2C6B814CAC5785D4BF4D36CC4971F
        Validity
            Not Before: May 20 23:44:55 2026 GMT
            Not After : May 27 23:44:55 2026 GMT
        Subject: CN=6a0e4777-b241
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:37:cd:e6:ee:be:d9:bf:69:13:a2:53:3b:47:
                    7a:9c:23:b7:6d:54:8a:17:e4:ca:58:d4:99:10:a5:
                    e5:f6:23:e2:f6:a7:ad:5c:f4:fd:31:26:43:b9:62:
                    05:a4:5f:0d:8b:0f:64:15:76:19:51:ba:35:44:66:
                    9a:ea:a9:ce:d5:45:2f:e5:f4:a6:75:8e:7e:10:02:
                    32:b8:c2:fb:90:f6:cd:70:53:13:c5:ce:23:12:b7:
                    42:fa:9a:db:4a:91:a1:61:04:75:7b:bb:84:7f:f8:
                    0b:11:db:fa:c5:9b:48:eb:d9:61:e9:87:87:b5:c4:
                    fb:75:54:12:98:ba:ac:1f:b2:49:3f:b4:a2:e4:b2:
                    bd:6a:db:d4:68:b2:94:17:f5:3b:9c:7e:40:59:3b:
                    b6:af:65:07:13:aa:f0:f5:ee:78:49:23:34:09:be:
                    7c:14:3e:4d:25:26:ec:52:15:df:2e:8b:00:4d:f2:
                    8c:03:dc:3a:44:45:1e:26:0f:07:e1:08:4f:ba:15:
                    d5:6d:11:4a:60:2c:58:5a:cd:f3:fc:7e:d9:13:a6:
                    b2:87:ab:96:85:cf:21:04:d8:c5:79:04:34:fa:63:
                    0f:fa:a9:bd:83:3a:c4:d7:c8:ad:a8:d3:30:f7:46:
                    b4:60:0d:9b:4b:c3:c1:5e:9f:83:47:b0:fd:33:2c:
                    e5:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E6:F3:0A:1B:C1:DE:CF:55:28:E4:63:5C:9F:D6:21:53:E8:C4:4F
            X509v3 Authority Key Identifier:
                keyid:F3:88:20:9C:AC:B2:C6:B8:14:CA:C5:78:5D:4B:F4:D3:6C:C4:97:1F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/84ggnKyyxrgUysV4XUv002zElx8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9138A50/C9A7A43856F911EC836E910DC4F9AE02/84ggnKyyxrgUysV4XUv002zElx8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:65:81:11:ea:02:8b:e6:8d:93:11:cc:c5:cc:4c:7b:1b:bf:
         f4:87:01:96:7a:c4:8f:10:cc:f8:6c:30:39:2d:d8:ab:14:64:
         73:da:77:b8:6b:92:22:7a:ae:62:db:ae:a1:11:38:ce:55:4d:
         a3:39:fe:0d:cf:1f:07:c9:1d:ab:29:41:10:70:c4:2d:36:14:
         32:fa:31:45:e4:94:36:7b:11:bb:1d:02:a0:8c:8b:37:7e:2b:
         64:71:d7:ae:31:f9:48:80:8a:2c:8b:57:e2:0e:c3:c2:c2:13:
         48:7d:0b:cf:22:b4:a4:5f:31:62:8b:5e:13:a0:c2:83:44:cd:
         01:d0:e8:22:41:10:1c:2b:0a:ed:eb:45:89:8d:7b:b0:83:dd:
         8c:d6:43:00:1d:94:f0:af:2c:92:dd:8c:3f:ad:67:20:12:63:
         a9:76:f1:ee:bd:28:ef:18:27:ec:cc:6e:0a:d5:dd:08:3c:fb:
         21:90:c7:a5:61:f2:77:52:a3:19:82:da:5a:98:b8:29:86:d7:
         73:c7:54:27:b3:2c:5c:c8:81:48:fa:d9:f5:e3:d1:6e:ae:d5:
         14:7d:26:5a:2c:a5:a3:9b:fd:3e:21:c9:08:fd:63:7c:7e:6f:
         83:2a:38:c4:07:cd:35:a0:7e:f3:28:f0:73:8e:a6:bf:da:7c:
         cb:92:75:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:31 2026 by rpki-client