Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
File:                     _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft (raw, json)
Hash identifier:          RwRkIOH0XVsJvdFGIJW9NIBfJqZWzzWZKcvDn8pzQs8=
Subject key identifier:   A1:9B:19:99:E0:3A:5C:99:9D:68:37:7C:07:0C:5D:B3:7E:73:21:FE
Authority key identifier: FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F
Certificate issuer:       /CN=A916ACF5/serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
Certificate serial:       0152
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
Manifest number:          0148
Signing time:             Thu 21 May 2026 05:26:52 +0000
Manifest this update:     Thu 21 May 2026 05:26:52 +0000
Manifest next update:     Thu 28 May 2026 05:26:52 +0000
Files and hashes:         1: _Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl (hash: qHPDeoXaRjESTdNH8DUK6xxJN3S7hc1D7IvdfFGyUvs=)
                          2: B538B552701211EFB6868329C4F9AE02.roa (hash: +r7tbi6WVUntCm60F2BN4Gz2em1ApwcRGlCJmDJjK9I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl
                          rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 05:26:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 338 (0x152)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916ACF5, serialNumber=FD5A3F5A1F335744C0C142AC4217ECBC3D20CA0F
        Validity
            Not Before: May 21 05:26:52 2026 GMT
            Not After : May 28 05:26:52 2026 GMT
        Subject: CN=6a0e979c-315d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:54:3e:c6:0d:97:1e:d8:4a:80:f9:1a:ab:
                    e9:2d:eb:26:12:11:9e:61:44:02:d3:59:47:45:8a:
                    8c:06:65:e0:3e:e9:fb:93:5c:08:81:09:42:75:e9:
                    44:17:c4:f5:fc:68:56:33:36:06:56:4f:6b:98:d2:
                    0c:a3:ed:6e:4f:d0:6a:84:96:14:f0:aa:39:7e:d9:
                    c6:87:76:0f:51:38:e7:78:53:3f:ef:0d:84:cc:82:
                    3c:e6:c9:78:7d:87:b0:ab:f5:a0:d2:83:18:77:24:
                    2c:15:f7:e7:62:37:f5:61:49:2d:c0:b8:f6:98:98:
                    2c:48:f0:7d:2a:66:6a:77:fd:db:bc:49:4f:3d:22:
                    3b:43:4f:68:48:ef:f1:0a:75:9f:24:88:d9:8f:4f:
                    ef:5c:ef:11:50:c3:bc:9e:c2:05:57:18:b9:5e:08:
                    69:75:80:68:ca:35:4b:ac:94:f8:10:50:48:aa:fc:
                    25:ac:c1:a1:69:3c:42:85:0a:c7:7b:31:6c:1b:10:
                    c5:f6:60:3b:3c:93:a6:8b:2d:6b:cc:dd:ca:8c:88:
                    db:1b:10:6c:24:0f:59:a9:d2:80:de:80:95:15:b7:
                    2a:2f:1d:f8:dd:02:8a:16:73:d0:ba:43:ea:33:2a:
                    ed:fb:36:6d:e7:ef:2f:4f:e8:ca:99:e6:6f:47:ab:
                    77:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9B:19:99:E0:3A:5C:99:9D:68:37:7C:07:0C:5D:B3:7E:73:21:FE
            X509v3 Authority Key Identifier:
                keyid:FD:5A:3F:5A:1F:33:57:44:C0:C1:42:AC:42:17:EC:BC:3D:20:CA:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916ACF5/5B30C49A6F3C11EFB5899612C4F9AE02/_Vo_Wh8zV0TAwUKsQhfsvD0gyg8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7e:9a:fa:08:0a:a9:c7:73:7c:a1:98:22:67:c2:4c:37:6b:b9:
         69:3c:ce:9f:99:22:fc:3a:0c:2a:28:ee:78:b3:fa:36:f7:ea:
         f5:94:c5:be:86:ff:a2:c3:5a:0b:da:0e:fe:83:89:dd:c4:54:
         c6:04:f6:a1:e6:7c:9d:bf:eb:b0:c8:df:0b:16:ba:b2:28:53:
         3c:d3:1a:02:90:4f:22:67:97:b2:f2:da:cc:a1:64:6d:3f:71:
         f9:d3:50:1b:15:24:c8:13:1d:aa:a6:de:c2:18:9d:c9:52:c9:
         af:47:a9:06:ff:f0:f7:1d:57:02:c8:a6:1a:7e:2d:38:2a:de:
         8f:ed:55:54:b6:29:4e:1e:1f:d6:9d:c8:4f:bb:7e:e1:a6:a6:
         a4:15:6b:e0:c1:89:a1:13:75:24:2a:c2:d0:b8:c0:73:09:a0:
         2e:18:f1:cb:1f:46:15:3e:f5:e2:69:b7:55:af:d9:77:44:d7:
         c9:c7:65:c8:ce:31:f1:2a:9c:3d:26:d0:70:3d:a4:7c:a5:21:
         a3:86:f4:8b:07:7c:9d:e5:48:c1:fa:2c:08:91:70:b1:84:f8:
         99:af:a4:2e:a9:65:64:60:db:e1:8a:23:33:c2:a9:c9:ee:22:
         ac:be:63:ad:4d:6f:80:3e:f3:52:a1:89:1c:e9:80:14:1e:22:
         a3:c0:d7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:39:31 2026 by rpki-client