Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
File:                     m_aWWObA_qLqCOOn_dKtysoTOUk.mft (raw, json)
Hash identifier:          wua+fmJkwKyg3F924fsHnRAzNvrg3r082SbY8NEXk7w=
Subject key identifier:   32:0C:70:1C:17:AC:B3:8C:48:19:9B:67:E8:5C:DF:93:64:BE:9B:0E
Authority key identifier: 9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49
Certificate issuer:       /CN=A91CC28E/serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
Manifest number:          0289
Signing time:             Thu 21 May 2026 01:52:03 +0000
Manifest this update:     Thu 21 May 2026 01:52:02 +0000
Manifest next update:     Thu 28 May 2026 01:52:02 +0000
Files and hashes:         1: m_aWWObA_qLqCOOn_dKtysoTOUk.crl (hash: N0O7l4rKjf9PJhpXud+I/qsUBgaIv9dOul+i5HbEZeU=)
                          2: 73E253FC76D011EDBAECD665C4F9AE02.roa (hash: P5W/HtK4kYY99pZQGqCLFlxhulp8kHcGK4SUQtwdoQA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl
                          rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 01:52:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CC28E, serialNumber=9BF69658E6C0FEA2EA08E3A7FDD2ADCACA133949
        Validity
            Not Before: May 21 01:52:02 2026 GMT
            Not After : May 28 01:52:02 2026 GMT
        Subject: CN=6a0e6542-ba5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:f2:0f:f3:b4:03:0e:67:b5:e5:ca:b1:be:91:
                    ea:b7:4b:60:ea:b9:db:8f:82:f2:fd:85:2f:1c:72:
                    3f:a9:d5:dd:b0:36:90:4c:4e:07:fc:17:3d:f1:27:
                    6d:ed:05:f7:7d:1e:48:1d:dc:22:97:1d:4b:fb:2e:
                    31:01:c6:a6:aa:3e:3b:dd:e9:f5:d0:d6:f1:23:29:
                    3d:9a:b5:6d:2b:de:52:2f:0c:68:22:bf:70:75:eb:
                    8c:99:de:aa:5e:3b:71:08:7b:ce:5a:2e:57:5c:28:
                    fe:00:e2:01:09:b7:ef:41:4d:83:bd:86:4e:26:d7:
                    43:c6:b0:48:24:2c:4e:b2:a1:36:42:02:4e:2b:db:
                    7e:15:eb:5f:09:ec:db:fa:4d:72:f8:5b:1d:d1:ca:
                    cf:d0:60:1c:e7:e8:4c:75:79:d1:a4:70:e9:f3:d7:
                    99:55:89:87:17:34:49:7b:72:7d:e3:e9:b2:68:d3:
                    b3:2c:5a:9c:84:fe:1d:2b:1a:ac:d9:fb:c9:21:74:
                    32:ea:0c:c4:79:04:09:3b:3e:41:e5:7d:f8:3a:0b:
                    21:cf:95:d6:3d:10:5f:f1:ac:18:11:a8:4a:fc:a4:
                    ad:18:cd:00:35:ab:69:07:71:36:36:57:89:d1:fb:
                    fd:ea:53:0b:74:52:bf:d1:1a:df:be:84:58:b6:b6:
                    07:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:0C:70:1C:17:AC:B3:8C:48:19:9B:67:E8:5C:DF:93:64:BE:9B:0E
            X509v3 Authority Key Identifier:
                keyid:9B:F6:96:58:E6:C0:FE:A2:EA:08:E3:A7:FD:D2:AD:CA:CA:13:39:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m_aWWObA_qLqCOOn_dKtysoTOUk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CC28E/B5CA896876CD11ED8DC63A64C4F9AE02/m_aWWObA_qLqCOOn_dKtysoTOUk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:58:be:30:51:79:6c:18:2e:e6:65:fb:07:5f:d2:8c:1a:93:
         20:bf:82:d9:ee:ba:cd:d7:74:a0:97:d5:5f:87:86:42:65:fd:
         80:ae:57:e8:c6:d5:8f:ee:46:fe:5c:53:90:5f:69:2c:96:04:
         06:92:e0:ed:91:fc:e0:74:fa:41:a0:64:68:c4:1e:7b:52:ca:
         c8:a6:6a:a1:8b:7e:40:46:a6:fa:31:63:98:05:f0:a0:18:2d:
         f3:ee:f9:8d:2e:4a:c4:95:4b:c4:45:25:74:46:92:3a:74:6a:
         91:1e:47:da:4d:6c:db:2f:f7:2a:cc:6b:34:0c:eb:62:8f:34:
         13:f0:6b:e2:b8:54:e2:ab:5a:2c:f6:c5:4a:88:e4:a8:ed:3d:
         23:4d:a6:4d:ec:b1:ef:dd:7e:75:31:1c:9c:51:89:d0:a1:db:
         7f:0e:4e:b9:15:e0:ba:0d:c5:05:76:9f:b3:16:fe:0a:94:ee:
         10:d6:f9:96:8d:f5:5d:c4:e5:80:ab:f1:85:49:54:1e:a0:c3:
         b5:ec:05:4f:0d:ec:9b:43:de:17:3e:c2:6f:4d:e3:0f:15:57:
         a4:88:34:5e:5d:57:f7:e9:37:56:15:82:10:77:d2:bd:87:39:
         e8:34:1c:55:1d:1c:d2:cd:3c:9e:3c:1e:d0:e7:75:ef:42:af:
         2a:c9:bd:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:39 2026 by rpki-client