Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
File:                     4mv29S1wn7Nug3uag0rDrML5tFk.mft (raw, json)
Hash identifier:          xBV837MFku70CclBMNkNVEF5uMvh2c0ywEwPLEFjUWM=
Subject key identifier:   6B:B7:A7:FC:28:EF:C4:E4:A8:7E:94:18:AE:1A:71:09:B9:FA:D5:53
Authority key identifier: E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59
Certificate issuer:       /CN=A91133DE/serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
Certificate serial:       25
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
Manifest number:          23
Signing time:             Wed 13 May 2026 08:59:30 +0000
Manifest this update:     Wed 13 May 2026 08:59:29 +0000
Manifest next update:     Wed 20 May 2026 08:59:29 +0000
Files and hashes:         1: 4mv29S1wn7Nug3uag0rDrML5tFk.crl (hash: VP/9xkt08pyPwdIC2ZitmuE2qGGbuKLjMx5flS/VZvU=)
                          2: 3E65AB521D0311F1B8948CF0043D8C67.roa (hash: sHNfG7PUkGQvb8cZheQ91puxBDfj8TkMgmzZhYPjhpA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl
                          rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91133DE, serialNumber=E26BF6F52D709FB36E837B9A834AC3ACC2F9B459
        Validity
            Not Before: May 13 08:59:29 2026 GMT
            Not After : May 20 08:59:29 2026 GMT
        Subject: CN=6a043d72-cdce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b8:84:47:2d:8f:22:d3:b5:ad:4c:13:5c:b2:
                    a3:69:7a:17:b7:ef:25:24:89:04:20:e3:97:ff:07:
                    5e:37:d1:0a:c4:a8:3c:49:c5:9b:e6:a8:f2:08:30:
                    d0:0e:cb:62:0b:de:7c:7c:17:6d:90:9f:8e:e1:55:
                    00:93:9f:1a:e7:94:e5:2e:d2:be:0c:6d:4d:3a:cd:
                    4d:9e:22:26:e5:3b:08:8f:24:aa:ba:04:43:99:bc:
                    56:a8:bb:ac:2f:99:b1:ef:6c:8e:3d:6d:a0:36:ba:
                    ba:dd:fe:56:59:72:8f:ee:bf:20:37:10:88:66:97:
                    5a:4d:44:81:b3:54:38:ca:2d:18:18:08:5e:05:c2:
                    ec:ee:ef:21:c0:87:1f:5c:50:96:c8:4e:06:dc:db:
                    e7:9e:5a:40:09:65:a5:a8:5a:03:3a:02:66:82:98:
                    87:38:53:de:f3:b8:43:ec:af:83:e2:4f:f3:43:cd:
                    03:02:f1:03:fa:0b:0b:4f:a1:98:b5:ef:4c:8d:aa:
                    4d:12:da:c9:b5:cc:de:4a:a9:c3:4b:ce:96:3a:02:
                    eb:c5:0a:33:36:3d:df:f2:23:01:d5:36:a4:c5:5b:
                    6d:d6:eb:db:2a:05:4a:dd:ae:12:10:0b:6d:ee:11:
                    d8:29:10:27:26:fb:8b:4d:cd:dc:75:fb:cf:c5:03:
                    60:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:B7:A7:FC:28:EF:C4:E4:A8:7E:94:18:AE:1A:71:09:B9:FA:D5:53
            X509v3 Authority Key Identifier:
                keyid:E2:6B:F6:F5:2D:70:9F:B3:6E:83:7B:9A:83:4A:C3:AC:C2:F9:B4:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4mv29S1wn7Nug3uag0rDrML5tFk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91133DE/169A838C1D0211F19BF09361033D8C67/4mv29S1wn7Nug3uag0rDrML5tFk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:7b:5e:93:26:79:f2:97:85:9a:0c:e0:d3:1f:f3:8c:52:c8:
         c7:4f:b0:28:4a:89:31:dc:a1:f8:e5:7d:e9:97:57:44:f9:02:
         2b:fc:25:f4:d2:96:bd:98:04:3f:bb:e4:5b:98:64:07:84:1d:
         dc:4b:d5:62:26:34:cc:34:05:3c:ad:89:94:00:f1:a6:7f:a8:
         6e:ec:3e:17:04:7f:b6:89:ce:05:2c:90:03:0e:f3:5d:1a:6a:
         1c:43:8d:53:25:3d:82:b6:78:b3:d5:d6:87:7b:bb:f6:03:18:
         af:bd:b2:fa:c5:ef:e6:38:b4:88:81:33:73:31:7c:73:da:a8:
         dd:99:3c:0d:ec:a6:ee:a2:9c:d7:db:cd:0e:b1:f6:5f:0d:2c:
         d3:4d:0a:ff:21:81:e0:af:3e:21:56:14:0e:50:77:28:83:c6:
         3e:b8:2a:00:7f:9a:45:e9:0b:da:40:d4:ee:38:5c:0e:bc:fd:
         87:91:f5:5f:b5:c4:1c:1b:31:8f:40:4d:65:fd:53:60:35:d0:
         26:e1:a0:b8:4d:0a:be:2d:f9:bd:ad:28:2f:c3:09:6f:40:a6:
         05:be:90:cd:a5:6e:23:8b:cf:d9:00:53:fb:06:22:4f:63:af:
         6f:4a:31:06:8a:dc:f8:57:c3:0f:a6:b6:fb:2d:f6:8d:b2:fa:
         88:5a:2d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:46 2026 by rpki-client