Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
File:                     fXiohwseVXPWM8mnsAQKLuQF2VE.mft (raw, json)
Hash identifier:          YCAXTh5gNM3VVFaCwRVhabd3bABBpNpmlRLSW0WvenE=
Subject key identifier:   31:47:B3:16:E4:00:82:66:4D:65:A5:0C:F6:8F:76:27:B9:FD:E7:2D
Authority key identifier: 7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51
Certificate issuer:       /CN=A91C162D/serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
Certificate serial:       0833
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
Manifest number:          0821
Signing time:             Wed 20 May 2026 21:07:01 +0000
Manifest this update:     Wed 20 May 2026 21:07:00 +0000
Manifest next update:     Wed 27 May 2026 21:07:00 +0000
Files and hashes:         1: fXiohwseVXPWM8mnsAQKLuQF2VE.crl (hash: FGXYEgTFwylFnu8d+QxSEPtLcKRn8T3xbz6L9l/RA8c=)
                          2: 460D934A1C1611EB8BD35065C4F9AE02.roa (hash: ztH/rPflIbsMb75wLSR1J5uWjOy6EQTAIN54Eb15iU8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl
                          rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 21:07:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2099 (0x833)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C162D, serialNumber=7D78A8870B1E5573D633C9A7B0040A2EE405D951
        Validity
            Not Before: May 20 21:07:00 2026 GMT
            Not After : May 27 21:07:00 2026 GMT
        Subject: CN=6a0e2275-75e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:6f:08:5e:48:6d:7a:44:18:d8:21:62:35:40:
                    33:48:3e:cb:a3:1e:3a:23:78:c2:ac:d4:64:1d:dc:
                    05:d7:22:60:90:29:57:21:67:f9:ce:b9:12:78:ce:
                    8d:53:2e:a6:42:32:02:0f:21:0d:41:88:34:cc:e3:
                    53:2c:7b:e1:87:6c:7a:6c:ae:2f:b3:03:41:22:33:
                    2a:86:e8:72:87:9a:8f:45:61:ac:2e:1a:0a:b5:72:
                    1b:86:ef:f2:0c:d5:80:8d:76:7f:ca:68:1d:99:23:
                    24:f0:ca:f1:90:24:84:22:d8:93:ac:62:c1:e6:16:
                    cf:7c:a5:24:17:9c:53:1f:58:3e:c1:24:7b:92:4b:
                    c0:70:28:99:c8:56:16:77:03:66:2a:4f:41:b2:7e:
                    41:49:97:97:a0:0f:b1:ea:80:e8:96:0b:70:ad:b1:
                    74:3c:83:0f:64:89:03:04:22:d7:4d:a2:e0:30:ec:
                    9a:ec:dc:ff:88:1b:57:de:c2:88:60:ef:be:48:14:
                    7a:e9:21:b7:3b:68:4b:32:42:6b:62:e6:e7:9e:9c:
                    0a:e6:ad:b9:18:c7:f2:76:e4:36:57:99:8a:bc:04:
                    6d:bc:c0:cf:cf:71:7d:4c:e3:65:63:41:5d:42:dd:
                    1c:49:49:d1:8d:ee:56:85:d6:68:9d:bd:9c:ff:33:
                    8f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:47:B3:16:E4:00:82:66:4D:65:A5:0C:F6:8F:76:27:B9:FD:E7:2D
            X509v3 Authority Key Identifier:
                keyid:7D:78:A8:87:0B:1E:55:73:D6:33:C9:A7:B0:04:0A:2E:E4:05:D9:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/fXiohwseVXPWM8mnsAQKLuQF2VE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C162D/6A0CFE901C1411EB82C09A62C4F9AE02/fXiohwseVXPWM8mnsAQKLuQF2VE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:6d:87:f7:6a:1d:9b:a6:c3:65:a2:79:01:bd:07:f8:c2:27:
         b8:15:4e:7a:ca:01:12:3f:98:28:24:65:25:e3:57:82:61:f8:
         8f:a3:65:49:59:4f:e6:19:b7:a6:51:7e:13:78:15:f3:fd:13:
         4e:f4:f5:f8:55:cc:42:80:bf:a3:18:56:3f:b3:29:fe:96:f4:
         f3:cc:bc:69:e7:5a:76:17:71:ee:dd:0f:01:7d:65:b9:23:e3:
         92:e4:86:38:42:d7:bc:2f:90:5f:6a:d1:b5:7d:c6:e8:88:32:
         97:46:c4:fe:68:f0:0a:ca:78:40:08:6b:23:19:e5:b7:df:3f:
         0f:a1:e5:37:b1:92:db:37:e3:02:5b:29:4a:2e:c4:84:86:2e:
         2f:6a:e5:5d:05:94:a9:86:f9:33:35:f0:79:ee:07:d6:c2:a8:
         05:41:0e:0c:7d:73:43:7c:6d:a7:02:aa:4a:1d:c3:4e:fa:fa:
         4b:71:6d:6e:ec:1d:61:46:30:87:e3:87:26:da:a6:04:bf:ad:
         ee:71:55:69:26:2d:88:b3:14:92:60:ef:12:9d:a1:39:46:5c:
         d4:61:13:26:12:30:8f:fc:16:d2:32:8e:7f:4f:84:be:1a:38:
         27:d8:c6:5c:ee:29:00:e9:06:11:a3:83:02:10:24:f9:8c:52:
         e3:59:42:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:32 2026 by rpki-client