Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
File:                     _8KErBsaXwhD61dbiwXeIk_64fo.mft (raw, json)
Hash identifier:          8t0xzPavjaYKxYKxGYw49BQN9SNP6Blkfc4Hxyj8uVc=
Subject key identifier:   33:2C:B4:79:60:38:64:66:F8:E9:40:FD:A8:FE:3E:49:18:EE:B2:58
Authority key identifier: FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA
Certificate issuer:       /CN=A91BB508/serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
Certificate serial:       055A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
Manifest number:          0551
Signing time:             Wed 20 May 2026 23:30:13 +0000
Manifest this update:     Wed 20 May 2026 23:30:13 +0000
Manifest next update:     Wed 27 May 2026 23:30:13 +0000
Files and hashes:         1: _8KErBsaXwhD61dbiwXeIk_64fo.crl (hash: 03Ct1R1Tzg2tvd3zJyCAISETyhn4LIkswZvqDTlcwdk=)
                          2: D2312B583F0511ECA6E6BB80C4F9AE02.roa (hash: IciT28SUjRQ0I2gdini8FnT61/04yJg06IILVj5+2rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl
                          rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:30:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1370 (0x55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB508, serialNumber=FFC284AC1B1A5F0843EB575B8B05DE224FFAE1FA
        Validity
            Not Before: May 20 23:30:13 2026 GMT
            Not After : May 27 23:30:13 2026 GMT
        Subject: CN=6a0e4405-244f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:08:d4:03:9c:8c:97:0d:24:20:b5:db:ea:83:
                    42:13:8b:2f:c3:59:b4:35:57:08:e0:8f:4c:43:dc:
                    9a:a8:50:1f:0c:fb:c2:85:65:fd:03:77:7c:f5:b4:
                    4e:e8:bf:4e:27:14:a1:d3:e7:75:0c:c3:4b:59:bc:
                    f0:5d:d9:4b:ef:25:06:51:b5:27:d2:33:db:15:e2:
                    48:ad:42:af:45:21:f9:79:7b:ec:1b:33:3b:18:94:
                    9c:7a:20:fb:54:3a:0d:04:15:94:5a:ae:41:eb:3d:
                    eb:66:b3:83:ee:76:e8:33:eb:57:b1:61:d8:c5:bd:
                    19:bd:80:67:9d:d9:6d:b2:74:87:dc:96:b8:5b:2e:
                    d9:90:57:9c:49:c0:54:47:a3:04:6f:d4:97:0c:6c:
                    f2:de:5e:b0:8b:b3:0e:63:6d:60:48:f9:95:e5:6d:
                    24:aa:11:c1:f1:26:61:91:e4:51:15:fe:1e:1d:d2:
                    24:d8:d8:3e:33:b2:10:96:15:cb:df:8c:a3:c7:6f:
                    ca:71:e9:61:5e:c2:07:3a:d3:dd:e2:39:a6:8d:57:
                    27:4c:e6:6a:68:1b:14:30:08:43:64:bb:2f:6d:97:
                    91:c8:a5:1e:1e:04:ed:56:9e:cc:6e:27:08:10:cf:
                    40:ed:d0:f3:c1:82:6c:12:ce:f5:94:95:de:83:f2:
                    9c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:2C:B4:79:60:38:64:66:F8:E9:40:FD:A8:FE:3E:49:18:EE:B2:58
            X509v3 Authority Key Identifier:
                keyid:FF:C2:84:AC:1B:1A:5F:08:43:EB:57:5B:8B:05:DE:22:4F:FA:E1:FA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_8KErBsaXwhD61dbiwXeIk_64fo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB508/7A33791E395711ECABD4376EC4F9AE02/_8KErBsaXwhD61dbiwXeIk_64fo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:f1:50:5d:71:34:5d:2b:ad:da:0d:36:ac:88:76:55:2b:1a:
         1c:a5:42:ef:f2:e1:ba:9a:56:39:37:70:05:05:08:90:82:77:
         2d:58:85:64:29:5e:98:55:a6:d2:e8:a3:64:6f:77:55:e7:17:
         a0:db:2d:cf:39:b4:bc:17:f5:d7:9a:72:39:eb:ac:53:31:dc:
         1d:7f:59:a0:41:58:e3:24:01:39:c7:45:bd:83:ff:24:5a:0d:
         4c:f9:7f:4e:3d:d5:6f:a7:b3:41:d5:ee:61:90:8e:63:c5:92:
         93:d0:5d:5d:1e:89:66:ce:88:24:9a:15:76:30:b9:96:1e:1b:
         5a:cc:28:20:41:d1:03:2b:db:f2:56:43:58:63:d5:65:cf:8d:
         9c:62:36:43:72:0f:f2:e7:c1:cb:21:b7:d6:5f:fe:ad:67:bb:
         59:af:be:1c:f7:74:75:f4:b0:b1:69:cf:6d:87:d5:34:e5:0d:
         e0:6c:84:c2:57:28:68:18:be:de:72:80:1b:0a:6a:e7:6a:51:
         72:09:1f:47:f6:1d:04:68:c1:9f:a8:1f:37:7a:43:8e:7d:2e:
         66:5c:81:9a:0a:49:bf:10:6b:6c:12:6d:1e:5d:65:8d:60:17:
         7d:c7:84:5e:20:87:17:53:99:45:a7:a9:07:b3:04:7a:35:56:
         e9:02:97:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:54:08 2026 by rpki-client