Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
File:                     MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft (raw, json)
Hash identifier:          RCOkd0iZ6x4DBWY3cK2iT9jOW6XegoB9F5Ds0A4erx0=
Subject key identifier:   AA:7F:91:47:B1:8D:FA:1A:48:2F:FE:F2:9E:A0:E9:A1:6D:FB:9B:F1
Authority key identifier: 32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96
Certificate issuer:       /CN=A91CBF47/serialNumber=326371E399824F8004ED96756819760881B7CD96
Certificate serial:       3554
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
Manifest number:          354C
Signing time:             Wed 20 May 2026 14:32:39 +0000
Manifest this update:     Wed 20 May 2026 14:32:38 +0000
Manifest next update:     Wed 27 May 2026 14:32:38 +0000
Files and hashes:         1: MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl (hash: Cb8zYgUp5jvWnzSpIbAs67qBGb/SzazElAtkVOrihx0=)
                          2: 608C129E33E011ED979ED20EC4F9AE02.roa (hash: 6+roL2PbfwWq8y6ta4w/K7qCXrfAWrT67sYJoqqWyCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl
                          rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 14:32:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13652 (0x3554)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CBF47, serialNumber=326371E399824F8004ED96756819760881B7CD96
        Validity
            Not Before: May 20 14:32:38 2026 GMT
            Not After : May 27 14:32:38 2026 GMT
        Subject: CN=6a0dc607-25f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:8a:4a:f6:3a:e0:ac:fb:66:97:bf:61:f9:39:
                    54:11:65:5c:1a:5a:97:51:a8:06:5e:5e:ab:56:32:
                    67:1c:72:79:03:33:62:60:d3:32:74:ad:d2:68:00:
                    35:14:0a:74:b8:c3:dc:04:50:6d:9b:48:65:91:d5:
                    68:a2:cd:1e:53:01:a7:f0:c3:88:c3:6e:a8:24:56:
                    4a:bc:83:88:d6:21:a6:bd:64:85:2a:2f:71:3c:2a:
                    09:fd:d9:d7:06:73:7f:56:30:27:ef:c1:e7:fa:be:
                    34:dc:a5:93:f9:37:81:62:67:39:75:91:b4:9b:4f:
                    a8:ee:68:14:55:a5:6e:d5:77:99:9d:8f:59:4f:b8:
                    88:3f:4b:55:42:aa:86:1e:e6:99:5e:23:82:3e:5a:
                    44:8c:84:da:5e:21:86:b6:5a:fc:8c:51:25:48:e4:
                    d6:86:40:15:3a:fd:cf:ba:80:03:b6:8c:20:d3:dc:
                    ea:ab:6f:c2:f8:2f:02:50:03:fb:4c:32:d0:bc:15:
                    57:46:9b:b1:e7:46:4f:09:36:6d:54:da:1d:e3:71:
                    07:67:a1:01:46:41:49:68:d7:2e:1e:77:07:de:bc:
                    96:43:c4:dc:ef:0b:3a:c0:c2:86:07:1b:7a:28:bc:
                    19:82:d1:72:cf:d9:35:1b:1e:b5:1f:54:b1:57:cf:
                    46:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:7F:91:47:B1:8D:FA:1A:48:2F:FE:F2:9E:A0:E9:A1:6D:FB:9B:F1
            X509v3 Authority Key Identifier:
                keyid:32:63:71:E3:99:82:4F:80:04:ED:96:75:68:19:76:08:81:B7:CD:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CBF47/370CA2C01D8A11E2B79B13E408B02CD2/MmNx45mCT4AE7ZZ1aBl2CIG3zZY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:c0:aa:8c:00:0a:ea:29:33:be:da:bd:b7:33:6b:ab:32:ea:
         fd:f0:fe:63:64:d2:c3:69:7d:99:24:27:57:68:66:56:65:9d:
         4b:89:7e:5d:22:42:fa:ae:2b:2f:07:e5:88:4f:1d:99:5a:7f:
         93:51:32:5a:aa:3a:68:98:e5:fd:ad:33:09:70:39:1c:fd:be:
         74:09:68:62:00:52:40:6d:a5:16:54:eb:55:25:b2:40:88:ca:
         80:d8:ec:92:a6:54:c2:9e:fd:8a:57:c0:87:27:68:ab:2c:29:
         2a:16:cc:98:b8:57:30:7e:2c:bd:94:29:c5:5b:fb:e7:c4:c9:
         22:89:2c:77:84:22:5c:48:45:87:19:2e:03:bc:0c:67:cb:65:
         b4:8a:ea:72:4d:0c:dd:63:bf:14:1b:ef:0d:b2:54:fb:4d:cb:
         4f:48:c8:21:b5:a9:5e:1a:68:16:e9:83:92:4c:36:87:97:76:
         2b:44:bf:49:fd:34:27:f0:71:a7:a6:85:c7:3d:51:b8:b6:98:
         ff:6d:94:95:87:cb:60:b4:9a:78:e2:4f:2d:4b:85:17:7f:6b:
         cd:69:2b:9f:30:a0:ae:9f:38:ef:b8:47:f1:4d:84:6f:bf:ff:
         01:0c:86:ab:9e:e8:a2:cb:16:7d:29:5b:56:3d:9c:f4:53:27:
         b5:37:ea:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:58:30 2026 by rpki-client