Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
File:                     0efCSnRBTL3c_NiORsXVzTs-rtc.mft (raw, json)
Hash identifier:          e3DOwanLdypokn5AUYVRqZYFZb+dEryMZovCAwaXprs=
Subject key identifier:   2C:63:18:F3:00:97:3D:42:92:09:3A:DC:C4:4F:AE:33:1C:E2:4A:16
Authority key identifier: D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7
Certificate issuer:       /CN=A91606AF/serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
Certificate serial:       07B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
Manifest number:          0795
Signing time:             Wed 20 May 2026 21:38:56 +0000
Manifest this update:     Wed 20 May 2026 21:38:56 +0000
Manifest next update:     Wed 27 May 2026 21:38:56 +0000
Files and hashes:         1: 0efCSnRBTL3c_NiORsXVzTs-rtc.crl (hash: /I8EkXWYuvTEG9Kh6TRPVq0A2LKkw1TlysXt2RM41fo=)
                          2: 8C2D64121CB011EDA4740D7EC4F9AE02.roa (hash: a0yVbOyKmzsc8MOg+dTg0w6gn2yodW2h3rxYL00GULI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl
                          rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:38:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1969 (0x7b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91606AF, serialNumber=D1E7C24A74414CBDDCFCD88E46C5D5CD3B3EAED7
        Validity
            Not Before: May 20 21:38:56 2026 GMT
            Not After : May 27 21:38:56 2026 GMT
        Subject: CN=6a0e29f0-9bd7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:86:cc:0d:c4:df:dd:c2:8a:83:35:5e:ec:80:
                    2a:c2:2d:dd:b5:d2:28:38:1e:f9:a0:62:e3:8e:72:
                    a8:37:98:bb:83:47:a1:94:81:b6:5f:f5:71:13:af:
                    61:e3:28:8e:a5:d9:a7:2f:a5:4e:73:9c:53:56:cc:
                    bc:55:5e:6c:5c:cc:8d:a0:97:ea:87:78:b6:78:a0:
                    87:0d:21:4f:43:ae:fb:5a:1c:bf:8d:76:88:d2:56:
                    fe:11:1c:99:e0:03:90:fc:59:9c:b5:f2:98:78:d1:
                    33:43:9f:4c:7b:2e:c3:05:1f:d2:5f:d9:ad:77:09:
                    bb:8d:ca:0b:1f:2c:21:eb:66:40:75:5b:b2:7d:cf:
                    ce:6b:01:67:51:27:ef:19:34:46:fa:88:2c:8a:23:
                    dc:a8:0d:78:79:51:32:44:ac:1b:9b:a6:8f:91:a7:
                    bc:8f:fb:a6:0d:88:00:4f:0f:4f:ce:a1:43:3e:94:
                    6c:e7:de:64:3f:95:2d:79:55:6d:01:66:f8:db:89:
                    1a:92:a8:e4:7a:cd:5e:39:e4:30:c0:79:7a:7b:f2:
                    39:a2:b5:9d:c5:a1:32:cc:49:4a:ac:26:b1:3b:fb:
                    68:88:d1:79:58:cb:f0:de:50:78:7c:d2:0a:29:e0:
                    63:e4:be:aa:9a:d0:37:2a:a3:1f:a2:6d:8b:29:d0:
                    0a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:63:18:F3:00:97:3D:42:92:09:3A:DC:C4:4F:AE:33:1C:E2:4A:16
            X509v3 Authority Key Identifier:
                keyid:D1:E7:C2:4A:74:41:4C:BD:DC:FC:D8:8E:46:C5:D5:CD:3B:3E:AE:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0efCSnRBTL3c_NiORsXVzTs-rtc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91606AF/A0958F305ECD11EB90876372C4F9AE02/0efCSnRBTL3c_NiORsXVzTs-rtc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         18:c6:e4:71:97:d9:14:b0:a8:b3:ac:29:05:6e:c4:e4:0b:2a:
         da:2b:2e:bf:37:af:03:ed:a5:6a:d7:1f:10:e1:01:3f:d1:da:
         38:e2:fb:05:82:34:c5:b7:75:89:44:5a:c5:47:52:21:9e:5f:
         9f:71:af:b3:62:e1:61:f7:ff:af:e9:e8:5d:f8:a3:66:06:55:
         81:60:b4:91:11:19:1f:93:0b:13:22:85:53:43:10:cc:84:42:
         4e:ea:89:c4:ef:67:d3:ee:47:14:14:68:be:36:5a:a0:ee:06:
         42:93:d7:0f:44:2c:64:2b:5d:54:31:98:e5:6b:56:82:49:c8:
         e5:09:93:b9:69:6f:4a:db:7f:42:2b:67:83:88:38:95:5c:2a:
         59:36:d5:e8:d7:94:24:5c:a5:f1:25:d8:a5:89:65:59:46:b0:
         e5:35:a1:8d:c4:14:51:67:14:b9:d6:5c:d4:b4:c4:43:96:5b:
         8d:a6:08:29:13:cd:d9:74:55:8e:49:9b:02:a8:4e:5c:43:e2:
         f2:c1:73:cf:27:8f:2e:1e:00:c4:6b:36:fe:35:65:40:54:19:
         a9:d4:2b:ae:5a:6f:27:0a:de:e8:df:37:99:69:a1:86:7f:b7:
         f0:e9:9d:f5:f2:b8:4a:37:33:79:3f:60:ed:96:72:22:83:65:
         6c:cd:e5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:09 2026 by rpki-client