Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
File:                     fnHZ0UYSF7D4LAexXE8CnyZySYo.mft (raw, json)
Hash identifier:          hSg9K37JFx4z57gKybg9iHYsJn3nqhsp+B7nNoTslQ0=
Subject key identifier:   69:64:80:9A:CF:85:A1:DE:E7:E5:0D:6A:76:1C:AC:C9:24:6B:54:54
Authority key identifier: 7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A
Certificate issuer:       /CN=A91A11A1/serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
Certificate serial:       01C5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
Manifest number:          01B8
Signing time:             Tue 05 May 2026 03:55:39 +0000
Manifest this update:     Tue 05 May 2026 03:55:39 +0000
Manifest next update:     Tue 12 May 2026 03:55:39 +0000
Files and hashes:         1: fnHZ0UYSF7D4LAexXE8CnyZySYo.crl (hash: +WShZn18BPRl5yLFEfAY3ISkW3IYGzHRirOpFTxUAlQ=)
                          2: F57B503EB05F11EEB6F38532C4F9AE02.roa (hash: Cf+f/rErS+gscIQrLTVw0RlWMSXZG8pgxu+sjMSHC6U=)
                          3: FA66BA00BD1311EEBC015623C4F9AE02.roa (hash: qJJvsPUngd7sU+FxNj5+ieKU5yZcXa/zUUo8JSHAZ60=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl
                          rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A11A1, serialNumber=7E71D9D1461217B0F82C07B15C4F029F2672498A
        Validity
            Not Before: May  5 03:55:39 2026 GMT
            Not After : May 12 03:55:39 2026 GMT
        Subject: CN=69f96a3b-fb35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a3:23:ac:6f:98:09:6b:74:5a:96:2a:d6:66:
                    38:b4:0a:27:53:73:d7:f6:07:de:26:5e:02:75:35:
                    5c:60:c5:fe:0c:e6:69:89:d7:0a:3f:5d:05:e9:33:
                    9a:19:92:63:48:94:c9:8d:c4:4c:98:c0:6b:da:70:
                    e8:70:0e:fe:f5:05:ac:e6:17:ad:6b:cf:f7:26:1e:
                    6a:1a:51:58:b8:cf:ce:77:fe:ba:f6:54:76:e0:e2:
                    21:f1:bb:36:96:38:c1:46:8f:04:87:20:c3:a6:c0:
                    cd:1b:a3:ec:4d:c0:64:8e:ef:2d:46:10:43:ae:79:
                    00:14:8e:a1:a1:21:80:73:b9:9a:72:08:53:5f:d3:
                    39:b8:b8:1d:49:2b:e0:a5:03:eb:88:56:55:81:05:
                    ff:00:85:59:8c:54:3c:f0:b0:1f:8f:34:35:3b:d3:
                    f7:cc:ea:df:cb:95:75:9b:d5:0d:e3:7b:c0:fc:3a:
                    6b:ba:9a:bd:87:08:19:c4:88:e3:70:6f:2d:7a:46:
                    28:a7:13:8d:01:71:00:2c:0a:b0:3b:dd:bf:7d:67:
                    ed:53:58:93:16:85:da:d1:0e:4d:8c:53:ce:fd:30:
                    b9:b3:97:1b:08:f9:bc:c8:6e:e3:a0:c1:94:d1:b2:
                    57:ec:01:97:16:08:f3:4f:36:ac:80:d5:fb:c9:9a:
                    d8:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:64:80:9A:CF:85:A1:DE:E7:E5:0D:6A:76:1C:AC:C9:24:6B:54:54
            X509v3 Authority Key Identifier:
                keyid:7E:71:D9:D1:46:12:17:B0:F8:2C:07:B1:5C:4F:02:9F:26:72:49:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fnHZ0UYSF7D4LAexXE8CnyZySYo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A11A1/A9B73CA8B05F11EE99C65477C4F9AE02/fnHZ0UYSF7D4LAexXE8CnyZySYo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a5:e9:39:e0:72:3c:33:4b:00:93:f3:ac:6c:8b:63:34:c6:2d:
         4e:53:ee:92:f2:83:3b:5b:82:5d:6b:6d:a9:af:2a:b9:93:8a:
         df:55:3a:c4:35:8e:5f:9f:be:b3:49:e6:01:e6:1c:0e:e8:0e:
         f9:c7:9e:25:6c:9f:94:95:52:73:88:05:c7:da:c7:b8:af:75:
         6a:62:3f:93:bb:54:26:26:7d:67:24:ec:b9:fc:ed:74:c2:5f:
         f1:8a:93:09:cb:91:d1:db:3f:43:54:ab:66:e2:71:4b:64:46:
         d1:f5:34:ec:91:57:88:ab:0d:e1:fc:dd:8d:f0:0b:22:14:f1:
         76:02:f8:9f:96:13:48:de:d1:27:87:11:e9:c6:47:4f:a8:8b:
         8e:f9:72:44:f1:60:43:b8:73:b9:cd:6b:91:51:82:87:74:d4:
         7d:4b:30:ac:5d:97:6a:9e:cb:93:96:cb:10:1a:e1:d7:ea:0c:
         57:e0:c7:9c:9a:74:38:f2:5f:af:ae:bb:19:b0:87:e6:05:ad:
         90:66:3d:e7:5f:9e:0a:2c:0a:08:9f:b7:36:29:44:ff:08:0b:
         a5:3a:a0:46:4e:92:fd:37:c3:6a:8d:d0:91:19:28:64:93:1a:
         5c:51:5a:de:fa:8f:ef:6f:7b:ad:c5:cf:49:18:bf:ef:32:fd:
         dc:c4:da:fa
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAcUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTExQTExMTAvBgNVBAUTKDdFNzFEOUQxNDYxMjE3QjBGODJDMDdCMTVDNEYwMjlG
MjY3MjQ5OEEwHhcNMjYwNTA1MDM1NTM5WhcNMjYwNTEyMDM1NTM5WjAYMRYwFAYD
VQQDEw02OWY5NmEzYi1mYjM1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEApaMjrG+YCWt0WpYq1mY4tAonU3PX9gfeJl4CdTVcYMX+DOZpidcKP10F6TOa
GZJjSJTJjcRMmMBr2nDocA7+9QWs5heta8/3Jh5qGlFYuM/Od/669lR24OIh8bs2
ljjBRo8EhyDDpsDNG6PsTcBkju8tRhBDrnkAFI6hoSGAc7macghTX9M5uLgdSSvg
pQPriFZVgQX/AIVZjFQ88LAfjzQ1O9P3zOrfy5V1m9UN43vA/Dprupq9hwgZxIjj
cG8tekYopxONAXEALAqwO92/fWftU1iTFoXa0Q5NjFPO/TC5s5cbCPm8yG7joMGU
0bJX7AGXFgjzTzasgNX7yZrY3wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGlkgJrP
haHe5+UNanYcrMkka1RUMB8GA1UdIwQYMBaAFH5x2dFGEhew+CwHsVxPAp8mckmK
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBMTFBMS9BOUI3M0NBOEIw
NUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3RDRMQWV4WEU4Q255WnlT
WW8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2ZuSFowVVlTRjdENExBZXhYRThDbnlaeVNZby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
MTFBMS9BOUI3M0NBOEIwNUYxMUVFOTlDNjU0NzdDNEY5QUUwMi9mbkhaMFVZU0Y3
RDRMQWV4WEU4Q255WnlTWW8ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEApek54HI8M0sAk/OsbItjNMYtTlPukvKDO1uCXWttqa8quZOK31U6xDWOX5++
s0nmAeYcDugO+ceeJWyflJVSc4gFx9rHuK91amI/k7tUJiZ9ZyTsufztdMJf8YqT
CcuR0ds/Q1SrZuJxS2RG0fU07JFXiKsN4fzdjfALIhTxdgL4n5YTSN7RJ4cR6cZH
T6iLjvlyRPFgQ7hzuc1rkVGCh3TUfUswrF2Xap7Lk5bLEBrh1+oMV+DHnJp0OPJf
r667GbCH5gWtkGY951+eCiwKCJ+3NilE/wgLpTqgRk6S/TfDao3QkRkoZJMaXFFa
3vqP7297rcXPSRi/7zL93MTa+g==
-----END CERTIFICATE-----
Generated at Wed May 6 06:40:03 2026 by rpki-client