Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
File:                     CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft (raw, json)
Hash identifier:          0LnHTIhb4rY67ZXGqeuQK3TYxAaKPbfsTsHjUjbcGV0=
Subject key identifier:   2E:10:9B:1A:57:77:DD:33:50:C9:69:0C:21:19:5C:12:EC:90:5C:F6
Authority key identifier: 09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E
Certificate issuer:       /CN=A91F17AA/serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
Certificate serial:       0297
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
Manifest number:          0240
Signing time:             Sun 03 May 2026 03:30:15 +0000
Manifest this update:     Sun 03 May 2026 03:30:14 +0000
Manifest next update:     Sun 10 May 2026 03:30:14 +0000
Files and hashes:         1: CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl (hash: ST9ijl9fgXRW4sBNHRY3NQnPf4zlGD4WujvumoSKLKI=)
                          2: 935296A6558B11F0BB2DB436C4F9AE02.roa (hash: oQTNR8UezgQA4tGlsLZvjgGgLBz+VcjntBI8Klr+/KA=)
                          3: 94BE094C7D0B11F0BC79D46DC4F9AE02.roa (hash: NEX3aRxV1Dqk6McmWh2C+0AJV5eYo9XBed68fWDSotg=)
                          4: D0F8C1B2558E11F0AA71D85AC4F9AE02.roa (hash: 4xwuTIhwlGL5yXXna5at0wbo22dMaJaAc9+Xfqmd1Y8=)
                          5: DA6883FC0F8611F0955A002EC4F9AE02.roa (hash: vftcQ5vmTURf7Bgrq+lkXEdW/3ZqSPsCNqTs8qbLsJs=)
                          6: BACC6D0A4F7411F0A8124536C4F9AE02.roa (hash: /aJrSzZ6U1lc2HAZFype6jc3RKjfbA/DfLGY0OrC9MU=)
                          7: E07CB68455A211F0B55F5674C4F9AE02.roa (hash: HGRofWCBztru2v6NUmwkl0HXWbLS28Izp3PDhbuMMv0=)
                          8: FBB6EA4E558B11F082FD5637C4F9AE02.roa (hash: 2FcVuaRaySm31VN4owwphmbBRzz94dcrhBnFrd+vqjo=)
                          9: 063FA6B25B2811F09B9A3A54C4F9AE02.roa (hash: COnh5OBflDrTiNerSPEVrAoEkIl/6x/Vx+xkw8ZayhI=)
                          10: F88F98EA55A211F0978C8774C4F9AE02.roa (hash: 1RLy8hwgWzmLWf1HsKCN7QGvSAK8fTD8LT1ZMd/TIQU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl
                          rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 09 May 2026 22:28:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 663 (0x297)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F17AA, serialNumber=0947051EFA50429215750A48BC031ADA926EF66E
        Validity
            Not Before: May  3 03:30:14 2026 GMT
            Not After : May 10 03:30:14 2026 GMT
        Subject: CN=69f6c147-80fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:64:fe:0d:3e:71:4d:7d:88:a4:f6:72:a4:12:
                    5b:9d:be:e8:c1:d6:e6:7f:be:00:48:fb:47:2c:44:
                    18:8b:bc:81:b9:ad:0c:d2:cc:36:69:15:6a:1c:7e:
                    f5:85:2a:3b:9d:5e:41:c2:37:cd:43:5d:be:4a:98:
                    0a:dd:82:f4:d2:34:ca:3e:09:49:53:01:82:bf:0d:
                    ba:7f:34:be:a4:e2:ff:03:6f:16:c7:22:79:9c:90:
                    2f:92:43:64:09:51:a0:a5:ac:8c:5f:79:73:e6:8a:
                    0a:82:f0:c8:3d:e8:bc:4f:38:5e:ed:43:71:ee:d6:
                    97:6e:18:62:ed:d6:2d:ca:21:51:b3:85:18:40:ee:
                    b1:4b:26:4c:a8:d7:0b:2a:0c:ba:97:02:0d:2d:28:
                    77:d7:db:7c:e4:37:af:0f:38:73:fc:a7:b1:0e:d5:
                    e1:53:60:16:9a:12:fa:33:58:52:84:d0:5c:c3:f6:
                    51:ef:26:dc:34:de:da:7e:9d:22:b6:24:71:0c:fc:
                    d2:00:c0:6d:51:b2:ac:11:b0:50:12:35:10:bb:46:
                    dc:f3:64:51:9e:ac:e8:9c:de:6d:d3:bd:c2:ee:27:
                    a6:64:f0:ab:1f:ab:4e:d9:e2:ab:c8:fd:aa:1e:4b:
                    53:62:f7:4d:70:54:05:86:09:35:e6:0c:53:21:0f:
                    bb:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:10:9B:1A:57:77:DD:33:50:C9:69:0C:21:19:5C:12:EC:90:5C:F6
            X509v3 Authority Key Identifier:
                keyid:09:47:05:1E:FA:50:42:92:15:75:0A:48:BC:03:1A:DA:92:6E:F6:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CUcFHvpQQpIVdQpIvAMa2pJu9m4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F17AA/41F0F97E52B811EE8E43000DC4F9AE02/CUcFHvpQQpIVdQpIvAMa2pJu9m4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         79:21:9b:28:fa:ac:38:b0:29:92:7c:39:40:eb:c3:50:eb:62:
         23:e0:f8:4a:5e:28:3e:3a:af:f7:7e:be:44:ff:53:60:3c:59:
         5a:d4:b8:b8:03:96:b1:0c:56:f2:2b:13:57:70:a7:c3:16:2b:
         b6:a1:93:5f:4a:8f:e2:a8:3f:9a:41:9d:5a:04:49:74:55:69:
         16:e8:62:00:47:da:3b:5f:e3:65:dd:2f:a2:2f:a3:c8:db:01:
         ee:f4:a9:19:6d:6c:66:73:18:b6:1e:ef:62:1f:0c:0a:45:22:
         14:86:58:e5:c1:ff:ec:7b:7c:86:74:50:0f:e1:01:37:fb:4e:
         32:5b:0f:ad:ed:f1:29:c3:80:5b:47:e4:99:68:fd:52:3c:e6:
         d4:52:bd:cb:34:a4:31:1e:d5:aa:3f:44:09:b4:4e:c7:8a:d4:
         22:83:91:22:02:36:c3:cc:50:e8:76:cc:36:f3:f4:98:05:5f:
         a7:cc:b5:e0:b6:54:66:f7:bd:17:47:9d:9e:96:aa:bc:70:f3:
         1c:b0:94:4c:74:2f:50:28:bb:c1:7d:f8:10:60:0f:be:fc:df:
         fa:b5:90:3d:56:94:d6:84:54:c5:9e:9d:7d:16:dc:bf:7f:57:
         19:10:77:13:98:2a:d1:88:26:31:79:00:23:f2:e8:0d:de:c3:
         df:2a:24:46
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICApcwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RjE3QUExMTAvBgNVBAUTKDA5NDcwNTFFRkE1MDQyOTIxNTc1MEE0OEJDMDMxQURB
OTI2RUY2NkUwHhcNMjYwNTAzMDMzMDE0WhcNMjYwNTEwMDMzMDE0WjAYMRYwFAYD
VQQDEw02OWY2YzE0Ny04MGZhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4mT+DT5xTX2IpPZypBJbnb7owdbmf74ASPtHLEQYi7yBua0M0sw2aRVqHH71
hSo7nV5BwjfNQ12+SpgK3YL00jTKPglJUwGCvw26fzS+pOL/A28WxyJ5nJAvkkNk
CVGgpayMX3lz5ooKgvDIPei8Tzhe7UNx7taXbhhi7dYtyiFRs4UYQO6xSyZMqNcL
Kgy6lwINLSh319t85DevDzhz/KexDtXhU2AWmhL6M1hShNBcw/ZR7ybcNN7afp0i
tiRxDPzSAMBtUbKsEbBQEjUQu0bc82RRnqzonN5t073C7iemZPCrH6tO2eKryP2q
HktTYvdNcFQFhgk15gxTIQ+7gwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFC4QmxpX
d90zUMlpDCEZXBLskFz2MB8GA1UdIwQYMBaAFAlHBR76UEKSFXUKSLwDGtqSbvZu
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGMTdBQS80MUYwRjk3RTUy
QjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFwSVZkUXBJdkFNYTJwSnU5
bTQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0NVY0ZIdnBRUXBJVmRRcEl2QU1hMnBKdTltNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG
MTdBQS80MUYwRjk3RTUyQjgxMUVFOEU0MzAwMERDNEY5QUUwMi9DVWNGSHZwUVFw
SVZkUXBJdkFNYTJwSnU5bTQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAeSGbKPqsOLApknw5QOvDUOtiI+D4Sl4oPjqv936+RP9TYDxZWtS4uAOWsQxW
8isTV3CnwxYrtqGTX0qP4qg/mkGdWgRJdFVpFuhiAEfaO1/jZd0voi+jyNsB7vSp
GW1sZnMYth7vYh8MCkUiFIZY5cH/7Ht8hnRQD+EBN/tOMlsPre3xKcOAW0fkmWj9
Ujzm1FK9yzSkMR7Vqj9ECbROx4rUIoORIgI2w8xQ6HbMNvP0mAVfp8y14LZUZve9
F0ednpaqvHDzHLCUTHQvUCi7wX34EGAPvvzf+rWQPVaU1oRUxZ6dfRbcv39XGRB3
E5gq0YgmMXkAI/LoDd7D3yokRg==
-----END CERTIFICATE-----
Generated at Sun May 3 19:23:10 2026 by rpki-client