Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
File:                     cZYTj9n8jHj-hDolPLBICtzFfw0.mft (raw, json)
Hash identifier:          mW5G0M249/Ip5m9EgWaGRn/PUB0IUglbQDnoRnLIfDU=
Subject key identifier:   7C:F8:AC:C0:EF:78:94:E9:24:22:27:CD:DC:47:FF:AB:31:F0:76:1E
Authority key identifier: 71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D
Certificate issuer:       /CN=A91D5590/serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
Certificate serial:       0887
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
Manifest number:          0877
Signing time:             Sat 16 May 2026 20:39:42 +0000
Manifest this update:     Sat 16 May 2026 20:39:41 +0000
Manifest next update:     Sat 23 May 2026 20:39:41 +0000
Files and hashes:         1: cZYTj9n8jHj-hDolPLBICtzFfw0.crl (hash: eNBYgJTvBHXQIMeDijoBiJS0pMQZAlW13WkYKa0H5tw=)
                          2: 986F0854F7C611EA8B23C30CC4F9AE02.roa (hash: aHXBmA0NtyR13VuTHpIm+ZaiBP/Di2n0/CwGR7lCYqI=)
                          3: 9920D2E6F7C611EA8B23C30CC4F9AE02.roa (hash: 5RUGr84S9u/MYGYJzdR1/AUpkucviMpdR/eHj0IncTw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl
                          rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 23 May 2026 14:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2183 (0x887)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D5590, serialNumber=7196138FD9FC8C78FE843A253CB0480ADCC57F0D
        Validity
            Not Before: May 16 20:39:41 2026 GMT
            Not After : May 23 20:39:41 2026 GMT
        Subject: CN=6a08d60e-9da5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:fb:08:71:e9:c9:e1:6b:98:da:31:bd:60:27:
                    cd:42:ec:7f:c9:ec:96:82:13:bb:c8:5b:71:3c:fd:
                    7c:46:b7:bb:0e:e8:be:e5:35:be:25:4e:f7:3d:df:
                    3b:46:e4:98:ad:82:0d:4b:cd:c9:4c:de:08:4d:02:
                    95:6c:5a:55:c2:09:53:40:3c:e3:ec:15:7e:2e:06:
                    24:2a:6f:63:62:07:94:44:e7:69:7b:c4:b9:79:30:
                    67:d5:f9:a9:6d:d6:89:86:3e:2e:04:fe:03:e6:9a:
                    b3:ca:53:fe:5c:37:ad:eb:f0:c5:29:1c:32:f5:71:
                    43:66:9a:e2:af:f7:32:e1:aa:76:9d:df:dd:51:00:
                    4a:e9:d6:1d:78:76:68:ea:69:7f:cc:97:eb:9c:e6:
                    d8:dc:b5:6e:09:30:30:6b:d0:15:12:1c:39:2c:1d:
                    e3:74:e5:eb:66:e9:a8:37:aa:05:2b:c6:a0:02:0b:
                    c6:52:9d:78:ff:d5:95:5f:c8:47:a7:82:f6:e1:e5:
                    a8:5a:ef:5d:0e:64:f1:51:ba:4e:ca:19:4d:3a:24:
                    94:79:13:3c:ac:ea:79:73:2c:f5:33:d3:56:c6:95:
                    ab:c6:bd:5c:f6:31:cc:24:ef:f9:7e:7c:73:46:ef:
                    94:96:e0:bb:27:02:fd:14:cd:8c:f1:de:21:b9:9c:
                    c2:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:F8:AC:C0:EF:78:94:E9:24:22:27:CD:DC:47:FF:AB:31:F0:76:1E
            X509v3 Authority Key Identifier:
                keyid:71:96:13:8F:D9:FC:8C:78:FE:84:3A:25:3C:B0:48:0A:DC:C5:7F:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cZYTj9n8jHj-hDolPLBICtzFfw0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D5590/A895249EF7C511EA871C000CC4F9AE02/cZYTj9n8jHj-hDolPLBICtzFfw0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         19:43:9f:ec:96:69:d1:33:09:8b:48:a7:86:c8:97:4d:39:cf:
         bf:cf:2f:a3:a3:70:76:fa:2a:3b:e0:20:02:68:e5:fb:82:af:
         43:b3:4e:bd:15:18:3e:52:aa:f6:ba:ff:cb:0f:dd:43:92:c8:
         30:21:07:f9:66:8a:c7:30:04:55:76:85:98:a7:f6:38:0b:f4:
         f4:69:22:b6:cf:21:0d:f8:dd:5e:b6:21:75:3c:69:de:eb:fd:
         36:70:ae:06:64:a9:2d:6d:2d:26:56:7a:a1:4a:18:b5:a3:d3:
         8d:99:d5:2f:24:a1:d6:31:b7:62:fb:60:0e:3b:d5:f0:66:ed:
         ed:ed:15:c8:7d:76:be:e7:af:37:01:8f:9e:12:04:04:6b:c5:
         ff:08:82:00:f3:2e:03:46:b6:97:51:b3:ad:45:fe:95:f7:c8:
         7f:21:2e:4e:b1:83:7b:99:d7:e3:4b:4b:1e:da:cd:a1:ee:d6:
         8e:d4:1e:cd:ea:fa:14:d2:54:ae:36:45:b9:92:3b:88:0a:6b:
         af:73:f7:6b:cf:27:fa:48:ec:3a:96:73:78:2e:70:33:8e:60:
         7b:5a:55:98:12:7b:64:82:7d:70:f3:e4:d9:a4:24:b3:72:0b:
         4d:9e:bc:4d:b8:2c:4d:77:d1:50:23:0e:56:53:32:45:07:ca:
         b8:93:f2:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 17 03:45:42 2026 by rpki-client