Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
File:                     5Acguik7ryW8Chd4xlzw0uDzUWA.mft (raw, json)
Hash identifier:          b6y1c2fKOBe6BJ2f1CF/ZetuviKciP0dIbrE1zMdzc4=
Subject key identifier:   60:82:4E:A4:FD:F5:E1:9F:2A:85:03:8B:57:BB:7F:50:CA:60:1A:26
Authority key identifier: E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60
Certificate issuer:       /CN=A91EF35B/serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
Certificate serial:       053A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
Manifest number:          0517
Signing time:             Wed 20 May 2026 23:44:03 +0000
Manifest this update:     Wed 20 May 2026 23:44:02 +0000
Manifest next update:     Wed 27 May 2026 23:44:02 +0000
Files and hashes:         1: 5Acguik7ryW8Chd4xlzw0uDzUWA.crl (hash: rklfo/TMpFfNTtc+ZvvmZMcvB86cqfM1fhOqPV7eQb4=)
                          2: 859B9868927E11EEB878AA50C4F9AE02.roa (hash: 5J7CzgrvflqW9BGF3n+IzmtymCRc3tioYfzZLWn2Gwg=)
                          3: 0BFA0C9C927E11EEA47AD74FC4F9AE02.roa (hash: NkFkxkOiqlXqHj2ZsxeLdI/sqTYxi3Y/LDVm73PK/X8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl
                          rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 23:44:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1338 (0x53a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF35B, serialNumber=E40720BA293BAF25BC0A1778C65CF0D2E0F35160
        Validity
            Not Before: May 20 23:44:02 2026 GMT
            Not After : May 27 23:44:02 2026 GMT
        Subject: CN=6a0e4743-7808
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8f:95:5a:6b:fd:7d:f8:91:38:5d:ac:e4:a0:
                    99:e2:17:d5:ff:21:44:35:da:85:1a:27:e6:5d:3d:
                    b4:9e:26:19:fd:4f:15:b5:83:71:e5:85:05:69:0c:
                    9b:57:04:6b:ab:ab:a0:6a:4c:16:58:dc:ee:2d:aa:
                    1d:79:48:3b:13:46:33:30:87:95:37:c7:9e:ce:92:
                    b5:d9:63:ab:b6:04:e5:a9:43:31:dc:ff:2d:81:20:
                    ce:0d:be:45:23:e5:71:c7:1a:ae:84:72:b8:d5:7b:
                    ec:34:3f:60:29:f6:4a:0b:e3:cc:41:89:0e:3a:6f:
                    5e:33:ac:54:f5:46:b2:d4:8b:fa:82:b6:ca:c1:83:
                    ce:7c:cd:ee:74:41:a0:7d:4e:23:07:97:2f:8d:db:
                    08:da:8b:57:da:07:f1:55:27:7e:92:92:f0:f5:34:
                    fa:d4:b7:85:7e:ef:dd:64:c2:c4:f1:25:c8:e8:73:
                    23:f5:d1:0a:52:90:3b:90:18:5b:a6:99:75:44:6c:
                    69:b2:39:4a:6d:f2:63:02:60:14:e5:88:e8:69:5f:
                    f5:30:1d:3e:d8:38:4c:ea:03:5b:d2:5c:2c:0e:30:
                    be:e2:c5:2c:29:99:04:62:69:5d:85:6f:4b:f7:6c:
                    f6:5e:c9:68:c4:d6:71:44:d3:a5:ff:98:50:17:64:
                    c7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:82:4E:A4:FD:F5:E1:9F:2A:85:03:8B:57:BB:7F:50:CA:60:1A:26
            X509v3 Authority Key Identifier:
                keyid:E4:07:20:BA:29:3B:AF:25:BC:0A:17:78:C6:5C:F0:D2:E0:F3:51:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Acguik7ryW8Chd4xlzw0uDzUWA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF35B/E010158A564E11EC85885914C4F9AE02/5Acguik7ryW8Chd4xlzw0uDzUWA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7a:58:64:5e:04:30:e8:a2:fe:ff:73:2d:93:e3:6d:5f:d2:08:
         15:68:96:9e:b8:ea:73:9e:eb:0e:13:1b:d5:88:9c:ff:98:03:
         ed:b8:52:ee:a3:90:a6:fd:5e:31:9c:ad:ea:b0:5b:63:26:d7:
         48:06:22:a2:88:de:b9:e1:a1:bc:d7:5c:e8:8f:0a:71:9c:02:
         45:65:94:5c:1e:b9:ed:7c:bb:2a:da:62:a4:ff:56:02:13:72:
         71:58:45:46:8a:dc:1c:41:fc:ca:8c:f6:e1:7b:4a:4d:21:5c:
         f4:91:10:1e:b0:b2:39:97:d9:98:9d:0e:a7:05:48:97:92:e9:
         f0:1d:b5:42:a4:ca:61:6c:be:8e:4a:fa:83:e5:4c:da:ca:6d:
         5f:21:35:d8:5e:dc:9d:63:23:29:0f:6b:91:15:a0:b0:70:f6:
         9f:2b:a8:69:2a:ea:4e:8a:20:8a:ca:56:83:41:d8:f4:51:10:
         63:4e:74:22:c8:a6:f4:a3:11:e7:f3:62:73:15:df:8a:19:7c:
         75:af:07:cb:bb:10:aa:86:c5:c9:17:e1:c7:26:5c:35:e2:a6:
         71:3f:42:bb:a0:16:cb:a0:6f:53:af:93:ec:73:c3:49:89:f0:
         f0:be:3a:62:29:8b:a8:4b:e9:30:1a:0c:04:94:88:e0:29:0d:
         54:ba:74:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 11:05:16 2026 by rpki-client