Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
File:                     Alr-kZVIIEnyUJPriYEVxr03FEg.mft (raw, json)
Hash identifier:          UxIpFV/1KYwS3hQEbm1wUF8H+0JHggLm3TPvfYxUoXQ=
Subject key identifier:   46:EE:19:96:0F:B5:39:63:31:4F:12:BC:47:7D:B3:3F:5B:FF:A2:89
Authority key identifier: 02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48
Certificate issuer:       /CN=A91BA044/serialNumber=025AFE9195482049F25093EB898115C6BD371448
Certificate serial:       0347
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
Manifest number:          0340
Signing time:             Thu 21 May 2026 01:06:13 +0000
Manifest this update:     Thu 21 May 2026 01:06:13 +0000
Manifest next update:     Thu 28 May 2026 01:06:13 +0000
Files and hashes:         1: Alr-kZVIIEnyUJPriYEVxr03FEg.crl (hash: Ni3wHN8kZRtsEnUD9N01voCt8w95NdCnVX6/bd7TxSA=)
                          2: 5CE70ACC074E11ED99CF6642C4F9AE02.roa (hash: q+aeOJgllUvaXxmahDweOCiCHQM4aB3x3nz/0WBTZiY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl
                          rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:06:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 839 (0x347)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BA044, serialNumber=025AFE9195482049F25093EB898115C6BD371448
        Validity
            Not Before: May 21 01:06:13 2026 GMT
            Not After : May 28 01:06:13 2026 GMT
        Subject: CN=6a0e5a85-7db5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:6c:c7:be:1c:b1:17:61:14:67:8c:55:16:e4:
                    f1:a4:bc:20:e6:55:e6:9d:a8:f6:e3:e0:84:46:2a:
                    92:17:d6:3f:39:b8:9e:94:a2:b9:8e:07:84:4c:86:
                    8d:a1:80:d2:60:8b:2f:3f:04:bf:d8:e1:12:b5:2c:
                    a6:d5:35:75:b3:2b:72:00:cb:01:4f:04:93:78:d6:
                    b0:35:a3:3d:4f:c3:e9:fa:0a:b6:0b:2b:b6:e5:de:
                    d2:7f:2e:17:8a:aa:ae:90:73:2a:45:a9:f0:65:5c:
                    9f:08:08:9b:2b:16:c9:d9:4a:45:43:18:21:e2:c4:
                    7e:8b:38:dc:a4:d5:23:6b:a7:75:bb:51:c4:9b:a3:
                    50:ec:60:3e:7d:4c:73:af:cc:7b:7f:8b:fe:3e:2e:
                    89:e0:88:b9:83:bb:bb:29:51:4a:a7:62:1b:e9:51:
                    a6:e4:7e:df:18:a0:cb:f7:c8:71:14:b7:5a:0f:49:
                    f1:25:ef:93:dc:3a:e0:f4:90:30:d0:36:59:8e:d2:
                    57:19:69:d4:61:b2:cb:5e:71:9d:0e:78:79:77:b0:
                    01:5b:bf:cd:d1:47:f6:5e:0f:17:df:dd:83:6a:08:
                    3c:4d:36:13:af:a2:9d:e2:c8:43:9a:03:90:61:b0:
                    ac:4e:6e:29:c6:1f:29:79:2b:8f:ea:9b:66:5c:4b:
                    67:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:EE:19:96:0F:B5:39:63:31:4F:12:BC:47:7D:B3:3F:5B:FF:A2:89
            X509v3 Authority Key Identifier:
                keyid:02:5A:FE:91:95:48:20:49:F2:50:93:EB:89:81:15:C6:BD:37:14:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Alr-kZVIIEnyUJPriYEVxr03FEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BA044/A7C7E65A074A11ED90A35414C4F9AE02/Alr-kZVIIEnyUJPriYEVxr03FEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:68:cc:34:dd:eb:67:44:bb:f8:db:a8:e3:d5:40:e1:db:d0:
         bd:81:1c:76:6e:bd:ea:90:f7:2c:3b:fc:bb:8f:bc:f9:eb:35:
         27:f3:fa:ed:ce:02:36:76:87:99:75:0f:a2:08:f3:5e:af:57:
         20:55:fe:e2:1e:79:b8:5c:cc:6f:82:11:89:d5:e0:6a:2f:49:
         07:e8:79:78:08:c7:8e:db:0d:fe:77:4f:76:b8:5e:eb:2a:01:
         b8:ae:06:77:36:80:49:6d:0d:4a:eb:a4:68:60:0e:80:c6:de:
         8c:f4:65:80:35:08:29:45:0e:e7:c1:19:d1:ba:28:5a:91:06:
         46:06:41:75:54:5d:66:97:66:32:f7:2b:cf:f6:e2:16:cd:0a:
         38:e9:23:52:da:50:f8:ea:51:b8:af:e0:60:cc:7d:3d:04:ff:
         8a:fe:48:26:34:43:84:bf:c3:b2:7a:76:29:f3:10:4b:66:5c:
         f7:47:f4:be:cb:03:c9:12:bc:9f:6a:21:dc:57:32:45:ee:63:
         59:21:b1:02:2d:80:45:1c:c5:4f:fb:64:d3:35:3c:43:59:89:
         70:7c:c2:d7:55:06:76:a8:12:f6:8d:1b:d1:21:11:39:63:51:
         6e:73:0f:d5:b4:2f:22:48:db:ab:a3:a8:fb:83:b2:b3:cb:4f:
         bb:4f:d2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:37:45 2026 by rpki-client