Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
File:                     rbmJeP11H5nZqOsq5y08DFUEU6Q.mft (raw, json)
Hash identifier:          NvefbO90GlMZW+CitcxNohqRcgDNK3HsS1XC+A+qhDM=
Subject key identifier:   20:10:91:38:4D:4A:5D:9F:F2:84:21:01:C7:2A:D7:34:90:BC:32:63
Authority key identifier: AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4
Certificate issuer:       /CN=A91DCD09/serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
Certificate serial:       0619
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
Manifest number:          05B8
Signing time:             Mon 20 Apr 2026 16:16:32 +0000
Manifest this update:     Mon 20 Apr 2026 16:16:31 +0000
Manifest next update:     Mon 27 Apr 2026 16:16:31 +0000
Files and hashes:         1: rbmJeP11H5nZqOsq5y08DFUEU6Q.crl (hash: vy++v0/+AMSwviW8IPyOQh5H8F692tezleZPcUQiJNg=)
                          2: 43AB9FC641A311ECA73C8C0EC4F9AE02.roa (hash: /rUJMh30ecAZJtef/1j5fUYrkpMN5VcKfJkxNOsXqME=)
                          3: 0ECA9B023D9F11EC9EC18739C4F9AE02.roa (hash: SB23MH7egYKIQ17nCj+xHe+4JVPIgfw/s/SRgDFUT6Q=)
                          4: CF49BBDAD33811EDAAE97C1BC4F9AE02.roa (hash: CFOJdfAQAwrs7SLJek/PgQnllBP7mK7ufRDP4foqiCw=)
                          5: CE99A9F2D33811EDAAE97C1BC4F9AE02.roa (hash: 4cXqlRer52ZWlIOSKIID7G64udphrDhp88IgkcR8MHE=)
                          6: 5B0ADC308D3A11EC94DEEC7BC4F9AE02.roa (hash: wYx1PeQ/7Fy2cG/DCJNU1b8Uc41NkcD4iMjLyRu1msU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl
                          rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 27 Apr 2026 16:16:30 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1561 (0x619)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DCD09, serialNumber=ADB98978FD751F99D9A8EB2AE72D3C0C550453A4
        Validity
            Not Before: Apr 20 16:16:31 2026 GMT
            Not After : Apr 27 16:16:31 2026 GMT
        Subject: CN=69e6515f-0572
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:ad:cf:0e:0b:a7:96:dc:1e:62:f2:23:7c:
                    cf:f6:b1:9b:af:4d:f4:94:b1:34:d8:aa:bc:83:6b:
                    65:e9:69:18:d6:1f:6d:f1:9e:d4:41:3a:e5:ba:8b:
                    9d:b5:57:fb:34:98:88:0f:26:56:2a:f7:43:be:6a:
                    d1:f5:25:4e:db:22:d5:83:ab:d4:5d:50:06:8c:a9:
                    72:86:61:ff:71:e2:b9:dd:85:f9:ef:2d:b7:a0:a3:
                    ef:33:95:a7:58:19:de:7e:10:1c:a2:c5:ed:19:11:
                    f3:aa:33:02:5a:54:68:38:9f:15:4c:7c:7a:f0:13:
                    02:58:29:9f:5f:26:29:b2:34:56:97:b2:06:f0:d9:
                    4b:2b:d7:84:ac:55:be:b3:b9:24:5a:72:f4:6d:07:
                    65:26:a5:cb:05:8c:e2:d2:ec:1a:e4:7d:30:d2:c9:
                    fd:15:6a:4e:68:8a:63:30:44:1e:4e:52:38:ff:b6:
                    e7:30:32:22:87:48:63:65:ab:2b:81:76:10:20:ee:
                    74:c9:25:e9:94:31:ae:af:01:b5:1c:10:60:08:6b:
                    92:fb:ab:91:58:df:3d:74:92:c7:d3:1a:d7:c1:48:
                    ff:c2:7f:11:9e:0c:ce:79:d7:09:61:2c:9c:e7:49:
                    86:b2:4f:d3:9a:92:0c:bc:89:6c:38:63:fe:e0:01:
                    c1:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:10:91:38:4D:4A:5D:9F:F2:84:21:01:C7:2A:D7:34:90:BC:32:63
            X509v3 Authority Key Identifier:
                keyid:AD:B9:89:78:FD:75:1F:99:D9:A8:EB:2A:E7:2D:3C:0C:55:04:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rbmJeP11H5nZqOsq5y08DFUEU6Q.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DCD09/EAC7EEA0112D11EC8D87057DC4F9AE02/rbmJeP11H5nZqOsq5y08DFUEU6Q.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         aa:9e:5a:f2:f7:88:47:cf:b2:ae:df:b7:27:fa:6b:08:92:77:
         c2:0e:52:6c:72:93:98:2a:25:1c:de:8c:f4:fb:69:cc:2d:49:
         c0:6d:89:b8:7a:cd:94:bb:97:e4:5b:d3:6e:24:c1:6c:93:e1:
         42:43:1c:81:67:08:0b:7f:49:33:6b:0d:72:5b:2e:9e:86:66:
         38:4e:3f:fd:4d:82:3e:a5:48:0a:b0:31:c2:21:9d:d9:33:3b:
         cd:d3:a1:5d:0d:65:b2:8e:9b:4b:86:35:b8:c2:3e:fb:a7:2c:
         cd:47:fc:6e:ac:1e:de:4c:ce:98:5b:1f:bd:e2:cd:fc:5f:6e:
         62:c0:75:c0:e6:a8:9b:24:dd:15:0b:54:0e:98:50:cb:cc:18:
         03:fe:32:04:15:34:c5:55:c6:9d:18:ac:20:ea:f9:1c:ed:0b:
         c6:94:c4:fa:27:e2:94:0c:7c:e3:97:a7:8e:f5:33:77:16:e7:
         35:13:1f:ed:42:46:58:68:af:c3:1f:4c:cf:3d:97:99:aa:53:
         a4:8e:11:6f:52:e0:4a:f0:12:02:1d:e6:68:2d:fe:55:bc:c7:
         e2:07:de:b1:87:c9:9d:58:82:ae:81:9e:9c:d8:73:af:a9:4b:
         bf:fd:42:ad:53:01:58:56:d9:ac:bc:66:57:96:5b:ef:fc:1c:
         fb:ed:46:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 01:43:09 2026 by rpki-client