Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
File:                     fToi3tGr8M05CSgLibI3bFRfbwc.mft (raw, json)
Hash identifier:          dyJWzei+WR1RXeJPTibYdMh7hug7UK3w9HjJKqOj8Sw=
Subject key identifier:   5A:01:F1:A1:E4:C0:13:55:83:20:34:E2:C7:A1:48:0E:DB:D2:CC:AE
Authority key identifier: 7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07
Certificate issuer:       /CN=A91AC232/serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
Certificate serial:       0790
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
Manifest number:          0786
Signing time:             Wed 20 May 2026 21:36:45 +0000
Manifest this update:     Wed 20 May 2026 21:36:45 +0000
Manifest next update:     Wed 27 May 2026 21:36:45 +0000
Files and hashes:         1: fToi3tGr8M05CSgLibI3bFRfbwc.crl (hash: bbh97jWW1wTE97wl7T3Era7HqlUhqVIRJ4qJl8lT0JM=)
                          2: D93244BAF2EF11ED91F08A4FC4F9AE02.roa (hash: Hti98hcC+ag2IJ3RoxadOaVc5hLgBIiE7Elxt08Tr5c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl
                          rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1936 (0x790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91AC232, serialNumber=7D3A22DED1ABF0CD3909280B89B2376C545F6F07
        Validity
            Not Before: May 20 21:36:45 2026 GMT
            Not After : May 27 21:36:45 2026 GMT
        Subject: CN=6a0e296d-055a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:22:d3:9e:e3:aa:df:77:6f:9b:69:11:01:c7:
                    3c:b4:f1:87:bd:49:dc:2a:c2:ff:79:82:be:7b:73:
                    e6:27:f2:4f:eb:61:19:31:33:e9:99:b1:a8:f4:35:
                    b8:a2:9f:39:5e:e3:3e:46:cc:e4:d2:9d:68:3e:8e:
                    df:36:4c:2f:4c:81:8b:4f:a9:b3:fb:4a:58:c5:d6:
                    e0:a1:64:f5:5c:d3:c1:cf:60:1b:51:16:46:1a:04:
                    7b:f4:1e:28:79:3c:0f:b6:ee:31:ff:4c:0f:5a:b7:
                    63:de:b3:21:a6:94:a9:05:b4:7b:e3:6c:f6:3d:5d:
                    ad:ad:53:96:64:7c:a0:c4:30:d7:ed:c0:b4:85:08:
                    3a:45:92:e4:3f:5c:d5:28:d1:82:62:4a:02:74:6f:
                    f1:73:75:6d:4a:3d:bc:63:36:be:2a:b0:34:f6:e6:
                    96:b3:47:d8:38:07:b0:1c:0c:32:49:94:85:59:76:
                    69:be:a3:08:e8:f4:8d:02:b2:b2:86:97:a6:00:bc:
                    e9:8f:a1:ed:d8:2e:61:f2:48:2d:7c:2c:98:ee:73:
                    14:96:74:0e:41:b3:36:18:f5:f9:f0:87:df:8f:77:
                    4a:e8:59:41:69:e4:d8:80:b8:bb:cc:b2:84:94:c3:
                    a4:ae:0b:4c:5e:3b:cb:a5:af:0b:15:3c:ba:84:c4:
                    bb:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:01:F1:A1:E4:C0:13:55:83:20:34:E2:C7:A1:48:0E:DB:D2:CC:AE
            X509v3 Authority Key Identifier:
                keyid:7D:3A:22:DE:D1:AB:F0:CD:39:09:28:0B:89:B2:37:6C:54:5F:6F:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fToi3tGr8M05CSgLibI3bFRfbwc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91AC232/41730086598D11EBAECC8321C4F9AE02/fToi3tGr8M05CSgLibI3bFRfbwc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:35:3b:07:2a:d5:a6:a2:f0:2e:23:6a:f2:1a:d6:0d:05:6b:
         ad:1b:d5:a4:46:81:53:eb:a9:b3:f6:a5:84:1e:16:57:cc:0d:
         37:c5:2d:91:02:a8:4e:1b:ba:1a:b5:ed:75:8f:cf:22:fb:ad:
         fa:26:09:5e:83:ca:4c:23:21:2a:de:15:1e:00:12:d9:87:f6:
         7f:5d:ab:06:b6:f9:93:1d:14:b4:85:0c:dc:95:38:e4:ee:14:
         c0:40:83:15:cb:cb:ed:48:f3:8c:6c:77:94:fb:6b:b3:20:36:
         c8:7f:3b:c8:bc:88:0d:de:e3:c7:00:93:23:23:c3:32:0c:26:
         77:51:24:c5:c6:43:15:98:96:e1:00:3c:e0:d7:8d:02:c3:c9:
         dc:2e:25:e0:28:10:5d:00:b9:77:23:1b:71:12:a6:2c:83:af:
         52:73:e6:bd:07:ba:70:ed:b4:ad:59:59:9a:f2:58:6f:61:d0:
         88:72:56:c4:84:da:95:18:e9:53:27:58:ec:8a:62:95:f7:25:
         69:b4:ff:97:92:72:1e:0b:ad:ae:f8:74:f2:cf:be:ed:d3:fb:
         a4:33:b4:1f:2f:45:cf:3b:66:ed:9e:06:3c:b7:bc:a2:73:f8:
         08:c5:b8:9b:d1:6b:ae:4e:03:0b:73:eb:cf:a9:36:8f:f4:35:
         6d:75:aa:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:13:43 2026 by rpki-client