Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File:                     j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier:          L12NYz4g1GuRqIpc312Mjq9bqKdf88ghn5WCwupfvIg=
Subject key identifier:   42:96:5B:C0:A1:B9:44:7A:FA:15:AC:6A:03:03:96:9E:AA:AF:78:45
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer:       /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial:       0361
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number:          035A
Signing time:             Thu 21 May 2026 00:59:52 +0000
Manifest this update:     Thu 21 May 2026 00:59:51 +0000
Manifest next update:     Thu 28 May 2026 00:59:51 +0000
Files and hashes:         1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: lDdYIVANopOcFFUCYjS91wJyscQki+1W+nr+ygxg94A=)
                          2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
                          rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 00:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 865 (0x361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
        Validity
            Not Before: May 21 00:59:51 2026 GMT
            Not After : May 28 00:59:51 2026 GMT
        Subject: CN=6a0e5907-de54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:67:b2:2b:a9:3d:23:58:46:df:09:8d:1d:
                    c3:69:70:23:df:1d:d5:c1:ac:ad:9d:be:d6:e2:e7:
                    61:a8:c7:6a:81:7e:72:17:f1:23:6d:5e:ee:ec:70:
                    e7:65:37:5e:0a:36:7f:7b:72:d6:fb:54:c2:de:3f:
                    eb:11:74:b5:18:b0:12:a2:38:32:1a:b5:7d:70:0b:
                    bc:ae:24:e8:22:73:6c:23:74:36:3f:ec:59:c7:58:
                    a3:29:a4:eb:df:35:10:ed:53:d6:22:dd:21:86:ff:
                    2b:cf:7b:73:20:56:78:86:fe:27:59:31:8a:93:71:
                    82:f8:1a:6a:da:1e:89:01:73:73:19:bd:4a:76:56:
                    6a:50:67:2f:c6:e5:50:bf:ee:6b:4e:dd:38:6b:72:
                    cb:be:9a:d8:26:8a:c9:64:47:64:d9:ae:e9:03:d6:
                    b4:d9:c3:17:8b:ea:17:c2:73:71:f4:fe:1a:e2:7c:
                    18:f9:8c:13:31:57:89:f2:df:76:d6:43:5c:bf:e1:
                    65:fc:6c:3c:4a:75:a9:c6:66:15:82:7b:58:c7:cb:
                    98:87:73:b1:67:ec:b8:f5:9a:5d:88:9d:aa:0c:0a:
                    71:67:97:aa:60:8e:74:cb:c6:27:bf:d2:7f:9b:9a:
                    cf:3a:ca:25:ed:26:da:dc:1e:bc:b3:ff:25:69:4f:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:96:5B:C0:A1:B9:44:7A:FA:15:AC:6A:03:03:96:9E:AA:AF:78:45
            X509v3 Authority Key Identifier:
                keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:92:5e:20:95:dc:36:da:91:90:ae:fe:40:6a:7d:42:a5:1f:
         70:0d:c2:87:aa:37:22:a6:32:e7:da:d4:61:f0:d7:f1:e8:a8:
         6b:5a:9a:7e:04:02:45:c3:07:94:17:22:ba:73:c6:71:7f:a1:
         f7:c8:d9:0f:0f:25:50:d1:4b:c2:a3:a6:6a:b7:dd:42:8d:44:
         98:48:0e:65:3d:fe:88:48:2f:26:5f:72:f5:95:bd:40:9c:ca:
         85:4c:3e:8b:25:45:30:c4:5c:de:a3:95:a7:4a:33:11:d9:e6:
         df:45:04:60:f9:c7:c6:0f:31:29:bf:84:04:da:4d:37:d6:de:
         9b:ae:51:14:4e:d7:6a:8f:fb:03:4c:b5:98:f5:23:5d:f7:a0:
         e0:5e:6e:a9:f1:c2:42:05:41:f2:1e:b0:99:79:de:e4:d7:f1:
         e5:ff:9f:97:29:b1:ca:ce:21:79:67:96:37:a6:0a:51:41:a6:
         93:c8:05:4f:3e:73:b5:79:1a:d1:29:83:0a:b5:cd:b4:36:0b:
         f2:43:1e:dd:49:4d:24:d9:fa:1c:e0:18:91:05:95:83:60:6e:
         fd:98:e9:ed:db:05:83:b8:4e:55:9b:ec:38:37:4c:57:2d:03:
         07:80:9b:a8:63:05:b9:6c:18:97:90:2b:ed:ee:23:9d:74:1c:
         af:eb:7f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:14:19 2026 by rpki-client