Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
File:                     _f0WbMUdnjq3SWQHS25klGdOL24.mft (raw, json)
Hash identifier:          s9yft8DOUHTcGEmuZcP2UZ1RZnvYFkQbjJX+FzWtAHc=
Subject key identifier:   F1:7C:35:3D:18:FF:8C:FE:4B:EA:F6:15:C4:BE:81:13:51:A4:10:B2
Authority key identifier: FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E
Certificate issuer:       /CN=A91884F8/serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
Certificate serial:       1F74
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
Manifest number:          1F5B
Signing time:             Wed 20 May 2026 16:00:13 +0000
Manifest this update:     Wed 20 May 2026 16:00:12 +0000
Manifest next update:     Wed 27 May 2026 16:00:12 +0000
Files and hashes:         1: _f0WbMUdnjq3SWQHS25klGdOL24.crl (hash: 2/vmigFvQU/p84VIo3ZofgRJc1QD1Jam+jP+XnlyOFU=)
                          2: 888B4AC26B3611E6A149F871C4F9AE02.roa (hash: AkHZVFpWpRiqPyM58pXt8XWBhgL1/61b1bh+bdJb7XA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl
                          rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:00:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8052 (0x1f74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91884F8, serialNumber=FDFD166CC51D9E3AB74964074B6E6494674E2F6E
        Validity
            Not Before: May 20 16:00:12 2026 GMT
            Not After : May 27 16:00:12 2026 GMT
        Subject: CN=6a0dda8d-a93f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:29:9c:a1:fe:a1:81:38:70:48:a6:74:a0:6d:
                    42:f7:7d:7c:1a:da:2b:1d:13:bb:8c:62:bc:a0:5d:
                    b7:fe:46:eb:19:fe:ae:98:5f:b4:12:3c:a3:62:6f:
                    02:f4:2f:44:65:d0:e5:ca:6b:79:84:b2:c7:15:62:
                    7a:1a:f5:cf:64:8f:ff:8f:fc:63:49:00:7d:e7:a4:
                    d4:02:1e:03:c1:0b:8b:ce:56:1d:0d:cc:1e:6f:c2:
                    3d:df:3f:22:11:be:e0:3c:75:ca:0d:5c:57:27:de:
                    cf:a5:76:dd:5f:42:23:87:e3:01:f8:1f:1d:c8:af:
                    d2:e5:45:ed:7d:1b:6e:d3:a7:0e:ab:be:64:02:1d:
                    71:3c:2e:1a:f4:f2:99:67:5f:5a:5b:fe:ea:7f:0e:
                    6e:f1:d2:9b:78:0c:74:1e:6d:a5:96:9c:ac:f1:7f:
                    8a:11:52:44:19:fe:af:1c:9e:8d:1c:ad:f5:c8:24:
                    fb:80:50:fd:9d:eb:a6:6b:01:30:6c:01:54:57:b7:
                    0d:1e:53:cc:c2:0b:d4:57:9b:60:51:05:81:19:b7:
                    37:be:e2:ee:ad:a3:5b:9b:09:ce:89:55:e1:e4:1d:
                    da:7d:1e:a4:cb:60:1e:8c:a4:6f:71:ee:66:a5:3c:
                    b9:b2:d0:30:0b:2d:cf:92:27:30:df:f5:05:c9:ab:
                    3f:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:7C:35:3D:18:FF:8C:FE:4B:EA:F6:15:C4:BE:81:13:51:A4:10:B2
            X509v3 Authority Key Identifier:
                keyid:FD:FD:16:6C:C5:1D:9E:3A:B7:49:64:07:4B:6E:64:94:67:4E:2F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_f0WbMUdnjq3SWQHS25klGdOL24.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91884F8/228AD3EA6B3211E694166265C4F9AE02/_f0WbMUdnjq3SWQHS25klGdOL24.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:8b:57:06:6d:a4:a9:d6:0d:8d:a8:1d:51:ac:88:dd:6e:a5:
         99:ef:ef:e8:e1:c7:cf:71:f9:c2:2d:3e:d0:d5:9c:e7:7a:6a:
         27:19:87:f8:3c:64:ee:23:b2:38:98:e6:f1:ec:6f:e1:29:da:
         0c:50:51:36:1b:eb:1a:e3:f6:c0:4b:b4:a1:88:24:45:a1:ea:
         f7:e2:59:09:fd:7d:df:6c:1b:eb:00:ad:63:84:b8:d3:1d:b5:
         98:43:da:38:75:bc:86:15:9d:3e:20:9f:80:6e:6f:9a:ce:94:
         88:51:45:4e:c2:c4:ee:87:73:bb:fb:06:e6:84:f9:b5:33:2b:
         ad:44:84:bf:e4:10:65:ae:5c:af:17:0d:93:80:d8:39:fc:73:
         14:1c:97:89:17:35:14:24:5d:a6:7f:1a:0d:c6:f6:f6:ee:93:
         66:3d:6b:62:30:24:c7:a7:cf:06:f4:d9:77:a8:f4:3e:76:17:
         b3:82:ca:e8:d3:0d:1d:4a:82:e5:d8:26:22:97:50:aa:c6:4d:
         c2:08:50:ec:24:a6:d7:bc:7a:63:47:b0:4c:c1:e0:7f:4d:9c:
         e8:96:af:ce:93:6f:41:88:02:2f:25:83:1a:5c:e0:0c:2c:fc:
         05:9c:43:87:4b:f1:5d:b9:62:3f:21:c0:f5:f1:84:76:18:3a:
         b5:ec:9f:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:36:10 2026 by rpki-client