Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
File:                     wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft (raw, json)
Hash identifier:          PXCHc5D8mhV+IRAD03JtaoJqaErZqusSp/K+OsoArjs=
Subject key identifier:   56:6A:4A:70:ED:3F:64:12:A4:DB:DD:AE:02:F9:04:8A:67:DC:9E:5C
Authority key identifier: C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B
Certificate issuer:       /CN=A91B0B65/serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
Certificate serial:       11E5
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
Manifest number:          11CE
Signing time:             Wed 20 May 2026 17:11:07 +0000
Manifest this update:     Wed 20 May 2026 17:11:07 +0000
Manifest next update:     Wed 27 May 2026 17:11:07 +0000
Files and hashes:         1: wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl (hash: T2U9zarkNVUqJNr20iGvy0F1mR4ffifsfI663k3lFY8=)
                          2: CA7A6F1A157C11E9BB547B7AC4F9AE02.roa (hash: eh77xy/M1nZdj0GwmtoZv3V9lfazohZ6e7A9i7EqAfo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl
                          rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:11:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4581 (0x11e5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0B65, serialNumber=C057119CA45DD314215C61E09BF871D48ABB5F9B
        Validity
            Not Before: May 20 17:11:07 2026 GMT
            Not After : May 27 17:11:07 2026 GMT
        Subject: CN=6a0deb2b-58ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:7c:57:ed:0d:41:b8:f8:62:70:cb:f3:f3:5f:
                    90:d5:10:d6:f5:a8:a1:ab:01:ea:f9:9e:73:8c:43:
                    3b:f6:de:31:d0:c9:8a:54:54:c7:54:f1:81:37:cf:
                    1f:91:b4:89:74:cf:0d:30:8b:2f:67:96:7e:0d:ca:
                    5f:3e:b2:e8:7b:fe:7b:84:e5:6a:35:9d:0a:f9:ff:
                    de:eb:4a:d5:fb:80:80:76:41:12:f0:d2:c4:c5:a4:
                    18:4f:33:af:63:19:12:99:ca:9b:9f:a1:92:6d:53:
                    ff:66:48:4d:17:62:64:3f:0c:f0:0d:c8:b9:0a:94:
                    97:9c:7b:14:75:93:c7:38:1a:f4:cc:6a:43:f0:ff:
                    43:97:f6:4a:2e:3a:1d:d0:ad:97:e1:55:c0:0b:e4:
                    00:6f:97:c6:da:72:ab:30:e1:26:d1:f6:a5:3a:7e:
                    40:d1:0f:1b:27:49:ee:3d:3f:0d:60:63:2a:a0:1c:
                    37:ca:72:49:83:15:89:f7:2f:e3:4f:ad:72:a3:a2:
                    4b:c7:70:c4:04:78:59:42:ee:ac:e5:ca:83:81:fe:
                    f7:5f:71:37:97:26:3f:b1:d7:8e:8f:98:43:f3:a4:
                    a1:cc:a2:57:c1:2a:76:4b:e7:2f:e7:7f:d3:74:af:
                    61:98:c5:fb:d5:cc:85:7b:0c:28:c9:c8:60:6c:cc:
                    90:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:6A:4A:70:ED:3F:64:12:A4:DB:DD:AE:02:F9:04:8A:67:DC:9E:5C
            X509v3 Authority Key Identifier:
                keyid:C0:57:11:9C:A4:5D:D3:14:21:5C:61:E0:9B:F8:71:D4:8A:BB:5F:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0B65/E6E422A6156111E9934B1B36C4F9AE02/wFcRnKRd0xQhXGHgm_hx1Iq7X5s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2e:de:55:93:16:7a:6b:ba:ef:2a:42:8b:b7:92:d4:94:6d:71:
         28:9a:81:5f:02:57:af:94:26:66:1b:ca:6d:85:c7:a5:ee:74:
         da:3e:ce:5b:bf:0a:c9:7f:f1:5e:3a:ff:bf:2f:53:cd:97:31:
         5d:a6:f7:52:57:72:50:6f:1c:48:65:5d:dc:7a:f6:78:69:73:
         81:1f:05:27:55:55:55:25:23:a0:d9:33:cd:9a:98:47:da:30:
         8a:b0:90:0e:25:ac:fc:ed:bd:7e:b2:8f:b8:72:83:99:fa:e1:
         3b:5f:14:d3:c5:a2:dd:cd:b5:38:80:ea:b4:2e:cf:36:19:16:
         06:71:01:ff:63:e7:a1:5c:50:1d:86:20:76:10:a2:24:0b:19:
         1b:24:24:14:af:6f:a0:c7:99:ec:8a:6d:44:22:3d:db:ee:65:
         36:6a:bc:28:b1:a5:ab:d2:fd:1c:1b:d8:f5:eb:46:a9:6c:fb:
         8b:9a:ba:f4:b4:7a:f7:0f:6e:7a:16:8c:3d:41:e2:63:3d:65:
         34:1d:fa:1b:f2:a7:5a:36:fb:5f:d1:c8:2b:4a:df:1f:0d:53:
         8a:d5:3f:4a:8e:cc:7d:bc:f3:d5:44:44:bf:e9:62:e0:05:e5:
         e9:85:af:44:b2:f1:6d:d0:99:3b:63:ec:f4:77:b8:fa:65:ea:
         fd:d8:1e:c6
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICEeUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjBCNjUxMTAvBgNVBAUTKEMwNTcxMTlDQTQ1REQzMTQyMTVDNjFFMDlCRjg3MUQ0
OEFCQjVGOUIwHhcNMjYwNTIwMTcxMTA3WhcNMjYwNTI3MTcxMTA3WjAYMRYwFAYD
VQQDEw02YTBkZWIyYi01OGVhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxXxX7Q1BuPhicMvz81+Q1RDW9aihqwHq+Z5zjEM79t4x0MmKVFTHVPGBN88f
kbSJdM8NMIsvZ5Z+DcpfPrLoe/57hOVqNZ0K+f/e60rV+4CAdkES8NLExaQYTzOv
YxkSmcqbn6GSbVP/ZkhNF2JkPwzwDci5CpSXnHsUdZPHOBr0zGpD8P9Dl/ZKLjod
0K2X4VXAC+QAb5fG2nKrMOEm0falOn5A0Q8bJ0nuPT8NYGMqoBw3ynJJgxWJ9y/j
T61yo6JLx3DEBHhZQu6s5cqDgf73X3E3lyY/sdeOj5hD86ShzKJXwSp2S+cv53/T
dK9hmMX71cyFewwoychgbMyQjwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFZqSnDt
P2QSpNvdrgL5BIpn3J5cMB8GA1UdIwQYMBaAFMBXEZykXdMUIVxh4Jv4cdSKu1+b
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMEI2NS9FNkU0MjJBNjE1
NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4UWhYR0hnbV9oeDFJcTdY
NXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3dGY1JuS1JkMHhRaFhHSGdtX2h4MUlxN1g1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MEI2NS9FNkU0MjJBNjE1NjExMUU5OTM0QjFCMzZDNEY5QUUwMi93RmNSbktSZDB4
UWhYR0hnbV9oeDFJcTdYNXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALt5VkxZ6a7rvKkKLt5LUlG1xKJqBXwJXr5QmZhvKbYXHpe502j7OW78KyX/x
Xjr/vy9TzZcxXab3UldyUG8cSGVd3Hr2eGlzgR8FJ1VVVSUjoNkzzZqYR9owirCQ
DiWs/O29frKPuHKDmfrhO18U08Wi3c21OIDqtC7PNhkWBnEB/2PnoVxQHYYgdhCi
JAsZGyQkFK9voMeZ7IptRCI92+5lNmq8KLGlq9L9HBvY9etGqWz7i5q69LR69w9u
ehaMPUHiYz1lNB36G/KnWjb7X9HIK0rfHw1TitU/So7Mfbzz1UREv+li4AXl6YWv
RLLxbdCZO2Ps9He4+mXq/dgexg==
-----END CERTIFICATE-----
Generated at Thu May 21 10:28:50 2026 by rpki-client