Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
File:                     em4wIQZCz0-7QXPzUnSOHqXCx8M.mft (raw, json)
Hash identifier:          LZdJ5mj7LuEruUMOp2756ch5ADZnX3cd8DSUfRBA+00=
Subject key identifier:   14:B4:6B:6F:A1:56:88:8B:F1:84:C1:C5:D6:09:45:75:1C:74:11:DA
Authority key identifier: 7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3
Certificate issuer:       /CN=A917D9FC/serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
Certificate serial:       18FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
Manifest number:          18D5
Signing time:             Wed 20 May 2026 16:28:29 +0000
Manifest this update:     Wed 20 May 2026 16:28:28 +0000
Manifest next update:     Wed 27 May 2026 16:28:28 +0000
Files and hashes:         1: em4wIQZCz0-7QXPzUnSOHqXCx8M.crl (hash: W4mqYyTh11ht+XuTcxD60vqBv1HLQci7t4svKVh0Bgg=)
                          2: F49AA4A889C211EEADFCF27CC4F9AE02.roa (hash: F7gvzg0So++J2V4XA9vCkNOHszA1gZ0+wMtYApbJrQM=)
                          3: 708DE4A87AB011E8B7AB0E53C4F9AE02.roa (hash: 0s3JTAw/4XShDWFvdlukgZX7zCTBz3Ez8ZKgigq0we4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl
                          rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:28:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6396 (0x18fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D9FC, serialNumber=7A6E30210642CF4FBB4173F352748E1EA5C2C7C3
        Validity
            Not Before: May 20 16:28:28 2026 GMT
            Not After : May 27 16:28:28 2026 GMT
        Subject: CN=6a0de12c-a9c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:64:24:a4:c2:ea:fb:04:35:ff:c7:7e:0f:2a:
                    92:84:a9:af:0f:13:67:82:12:1f:dc:51:7d:f0:c9:
                    2a:35:dc:a8:d0:2b:5c:65:ae:45:cd:4d:92:94:13:
                    76:a5:b1:55:b4:a3:89:f4:35:4a:06:18:81:a8:a9:
                    81:16:a3:de:33:ec:62:a7:54:23:84:9e:dc:35:cb:
                    ee:89:bb:d5:6c:d2:cc:d1:a9:de:ce:72:48:f1:7f:
                    93:d5:c8:b7:21:36:a6:e9:ba:1b:ba:8d:b6:c3:66:
                    a7:f2:b0:06:bc:51:7d:9a:ac:08:78:66:ba:c6:8c:
                    f3:7b:cc:b7:f6:97:4b:ef:6f:4d:72:bc:1d:81:a8:
                    bf:cd:2d:b4:d7:d2:6f:c4:30:01:0b:e5:21:90:2a:
                    c5:56:82:17:1b:9c:32:ae:56:31:fa:1e:7b:b6:de:
                    67:e0:0b:01:42:f6:7b:ae:2a:bf:63:b4:ca:23:78:
                    dc:9a:d2:7f:76:3e:96:b5:a7:43:37:31:e3:2c:83:
                    29:6d:20:c7:7a:43:48:a5:77:9f:4a:20:ae:da:38:
                    1d:d6:c9:09:5f:eb:7b:00:05:87:4b:30:34:ba:fd:
                    fc:ee:ad:b3:85:d8:9a:eb:e9:d4:ed:c7:47:bb:ee:
                    53:d9:69:64:06:84:c4:af:3c:7b:c1:08:f9:5e:fd:
                    f0:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:B4:6B:6F:A1:56:88:8B:F1:84:C1:C5:D6:09:45:75:1C:74:11:DA
            X509v3 Authority Key Identifier:
                keyid:7A:6E:30:21:06:42:CF:4F:BB:41:73:F3:52:74:8E:1E:A5:C2:C7:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/em4wIQZCz0-7QXPzUnSOHqXCx8M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D9FC/C6B034AAB89911E7B269B850C4F9AE02/em4wIQZCz0-7QXPzUnSOHqXCx8M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:59:00:fd:1e:4b:12:0f:6d:89:89:eb:4b:8e:79:fd:8b:a4:
         39:ec:7f:54:45:72:fa:56:4d:4e:b1:59:34:e6:b0:84:6c:de:
         5e:96:17:30:79:de:ee:7d:52:15:fb:b4:ba:21:87:6d:88:df:
         ac:84:92:95:03:e0:4c:05:a8:fd:fe:94:1d:f1:48:d9:f3:bf:
         3f:fa:da:a1:d6:20:7c:2c:30:94:4c:18:85:a4:46:c5:69:d3:
         91:f7:1a:cd:ca:a8:47:b6:57:ad:be:34:27:46:e3:91:dc:f1:
         bf:0f:b3:fb:fe:83:6f:55:8c:87:11:67:c3:18:8b:ef:c6:e6:
         5c:ec:f0:b6:de:37:0a:b8:95:b9:53:04:3c:f9:f8:9b:d1:14:
         75:a1:26:ae:e4:fd:d1:26:32:cc:d1:c3:c7:6c:ad:53:b5:d3:
         8d:43:8c:79:d0:d3:34:b2:14:7e:ef:e4:23:cf:80:57:46:83:
         f9:b5:b3:10:41:08:3d:8d:e2:bb:eb:d5:f5:9f:b4:00:de:f4:
         d5:fb:ce:08:72:06:05:aa:66:8e:22:13:d6:82:d2:e9:11:8a:
         bb:ec:fe:80:02:53:13:38:2f:0f:41:d7:bc:4b:85:4a:0c:90:
         47:bc:07:32:58:91:e6:d7:d4:63:87:7a:94:60:d4:ac:5e:c0:
         eb:4a:30:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:38:49 2026 by rpki-client