Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
File:                     kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft (raw, json)
Hash identifier:          nvtqts+mh8caIcN7oi6QfCKA6FH5b/nf0bDg3jvU26E=
Subject key identifier:   6D:F7:7F:6D:5F:74:11:3C:2C:91:34:47:B8:DA:B2:8C:E9:02:C8:03
Authority key identifier: 90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5
Certificate issuer:       /CN=A91C7169/serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
Certificate serial:       1953
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
Manifest number:          1914
Signing time:             Wed 20 May 2026 16:27:02 +0000
Manifest this update:     Wed 20 May 2026 16:27:02 +0000
Manifest next update:     Wed 27 May 2026 16:27:02 +0000
Files and hashes:         1: kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl (hash: xhJBeIr7j25z5LVwu52w+aYKds14sK3sh3vNEJviO1E=)
                          2: FCDF983C4B7411F19F4B0F3BB6833773.roa (hash: 6PczisSqxXOoG4GpKjkiVPbqFf7Z32JMD/yyHEXImvA=)
                          3: 6C409F0C90D411F09617F260C4F9AE02.roa (hash: EVQn/KNomyKNTdeIsk8hWARt5eleL1I0XO8r52dM3Kg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl
                          rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 16:27:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6483 (0x1953)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C7169, serialNumber=900B870C80C0EB3F8468F53E7672FA741752C5D5
        Validity
            Not Before: May 20 16:27:02 2026 GMT
            Not After : May 27 16:27:02 2026 GMT
        Subject: CN=6a0de0d6-862f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:7d:c8:f5:c8:50:b3:44:22:76:7e:b5:4d:8f:
                    02:c3:94:61:b7:6c:ce:47:ea:d8:0a:a4:3c:1b:bb:
                    f3:24:87:72:c3:f1:b0:12:9e:99:a9:74:bb:89:16:
                    5f:a7:86:1a:05:5e:0b:06:e9:fb:c4:44:ea:b0:52:
                    9e:f9:86:49:58:38:21:37:fb:97:34:00:d8:f9:26:
                    2b:f6:0c:46:ad:17:b6:4a:e7:1d:b4:a6:36:39:5f:
                    2f:be:2c:7c:e7:14:74:65:8e:f0:07:45:be:a9:14:
                    08:cf:7a:d8:e4:6c:eb:85:b2:34:38:59:d1:8a:b8:
                    72:b6:e4:59:ff:04:0c:cb:f3:f6:9e:35:81:f3:27:
                    d5:6b:65:2d:8a:0f:52:86:47:04:5c:0c:a0:f2:db:
                    ac:a3:5b:62:2f:44:2d:0d:48:c3:01:d9:e3:f9:9b:
                    19:45:86:11:b6:7c:b3:e7:c2:a9:1d:36:d5:d9:be:
                    66:ab:49:b7:0d:a7:06:78:92:e0:b8:eb:76:2c:7d:
                    08:b9:03:c4:6e:7b:14:14:a8:be:21:bc:8c:1e:66:
                    67:88:7d:75:9d:99:21:8e:61:5a:62:4d:6d:be:7a:
                    43:de:db:37:74:90:e5:09:0d:5e:da:6c:63:aa:51:
                    a8:73:d7:a7:67:ce:1b:75:72:5b:3d:5f:59:cc:5b:
                    51:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:7F:6D:5F:74:11:3C:2C:91:34:47:B8:DA:B2:8C:E9:02:C8:03
            X509v3 Authority Key Identifier:
                keyid:90:0B:87:0C:80:C0:EB:3F:84:68:F5:3E:76:72:FA:74:17:52:C5:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kAuHDIDA6z-EaPU-dnL6dBdSxdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C7169/502608B4AD9011E79267FF0FC4F9AE02/kAuHDIDA6z-EaPU-dnL6dBdSxdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:13:56:4a:ef:8e:a3:01:a1:30:c6:b8:2e:83:cf:d1:7f:d6:
         a1:30:95:a4:04:d2:6d:1d:d0:8a:a2:14:ab:db:cd:f2:89:ee:
         95:d0:c5:4c:c0:b6:54:e2:0b:b7:5b:40:ef:52:5d:1e:f4:89:
         80:f8:d5:03:bd:d9:f9:c7:ae:d0:ba:7a:55:ca:0a:66:20:92:
         43:c4:f0:fd:76:7a:7d:1e:b2:ea:0c:22:68:f5:57:36:f9:07:
         53:aa:7e:70:bd:45:f0:39:be:33:2d:53:b4:31:09:20:ae:a9:
         f1:6b:d2:3c:b8:47:77:2a:68:ff:5b:45:71:1c:51:72:9c:71:
         83:37:0b:81:80:ab:65:1b:8c:4d:09:d4:f0:f7:87:90:6d:67:
         6d:96:ed:59:af:ec:44:88:c4:6a:88:d7:db:25:6c:e6:25:dd:
         50:bf:db:f4:58:8d:15:8a:d9:09:ed:d6:55:28:73:bb:38:21:
         be:0c:2c:ad:77:17:1e:1c:19:eb:64:62:9d:5e:e9:c0:49:3b:
         79:63:ec:89:7f:09:cf:c1:dc:0a:98:39:4a:52:23:d3:ee:6f:
         4e:55:02:3d:c4:5d:02:45:22:2b:8a:84:0f:4c:7c:46:09:63:
         9e:8b:5b:36:61:b1:21:be:6e:71:e7:c0:56:c1:27:e0:7a:8c:
         5e:c4:2f:ed
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICGVMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QzcxNjkxMTAvBgNVBAUTKDkwMEI4NzBDODBDMEVCM0Y4NDY4RjUzRTc2NzJGQTc0
MTc1MkM1RDUwHhcNMjYwNTIwMTYyNzAyWhcNMjYwNTI3MTYyNzAyWjAYMRYwFAYD
VQQDEw02YTBkZTBkNi04NjJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAsn3I9chQs0Qidn61TY8Cw5Rht2zOR+rYCqQ8G7vzJIdyw/GwEp6ZqXS7iRZf
p4YaBV4LBun7xETqsFKe+YZJWDghN/uXNADY+SYr9gxGrRe2SucdtKY2OV8vvix8
5xR0ZY7wB0W+qRQIz3rY5GzrhbI0OFnRirhytuRZ/wQMy/P2njWB8yfVa2Utig9S
hkcEXAyg8tuso1tiL0QtDUjDAdnj+ZsZRYYRtnyz58KpHTbV2b5mq0m3DacGeJLg
uOt2LH0IuQPEbnsUFKi+IbyMHmZniH11nZkhjmFaYk1tvnpD3ts3dJDlCQ1e2mxj
qlGoc9enZ84bdXJbPV9ZzFtR7wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFG33f21f
dBE8LJE0R7jasozpAsgDMB8GA1UdIwQYMBaAFJALhwyAwOs/hGj1PnZy+nQXUsXV
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDNzE2OS81MDI2MDhCNEFE
OTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6LUVhUFUtZG5MNmRCZFN4
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2tBdUhESURBNnotRWFQVS1kbkw2ZEJkU3hkVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD
NzE2OS81MDI2MDhCNEFEOTAxMUU3OTI2N0ZGMEZDNEY5QUUwMi9rQXVIRElEQTZ6
LUVhUFUtZG5MNmRCZFN4ZFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjBNWSu+OowGhMMa4LoPP0X/WoTCVpATSbR3QiqIUq9vN8onuldDFTMC2VOIL
t1tA71JdHvSJgPjVA73Z+ceu0Lp6VcoKZiCSQ8Tw/XZ6fR6y6gwiaPVXNvkHU6p+
cL1F8Dm+My1TtDEJIK6p8WvSPLhHdypo/1tFcRxRcpxxgzcLgYCrZRuMTQnU8PeH
kG1nbZbtWa/sRIjEaojX2yVs5iXdUL/b9FiNFYrZCe3WVShzuzghvgwsrXcXHhwZ
62RinV7pwEk7eWPsiX8Jz8HcCpg5SlIj0+5vTlUCPcRdAkUiK4qED0x8Rgljnotb
NmGxIb5ucefAVsEn4HqMXsQv7Q==
-----END CERTIFICATE-----
Generated at Thu May 21 10:16:24 2026 by rpki-client