Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
File:                     aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft (raw, json)
Hash identifier:          s84kIUfNRi+400f9A+u1UBSRlsKzCbqexlkUr2n3N4Y=
Subject key identifier:   A7:30:C2:94:6F:2D:AD:A2:6F:B0:D7:FE:F7:ED:02:0D:65:CE:4F:C0
Authority key identifier: 69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9
Certificate issuer:       /CN=A9119333/serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
Certificate serial:       237D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
Manifest number:          2332
Signing time:             Tue 12 May 2026 15:50:24 +0000
Manifest this update:     Tue 12 May 2026 15:50:23 +0000
Manifest next update:     Tue 19 May 2026 15:50:23 +0000
Files and hashes:         1: aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl (hash: Fq7RoqS899FYlW2Whbt7cbN0QAgPhzt3ZHKuUgV/abA=)
                          2: 1AC9199AD3CB11EF84052053C4F9AE02.roa (hash: plwWFq4k0Hgx6vP8bTzqJt9GJIcOt71z9VOfufJhc6Q=)
                          3: DD73806ED3C811EF9D76942FC4F9AE02.roa (hash: EwnErXsu5NYk/vKrNa7Bl73VtntPwcy5vYXbhPAWFt0=)
                          4: 443C3AF2D3F611EFB03C5C14C4F9AE02.roa (hash: kvJG9W7BesVloRiSNTznQQ2Vu/TG695dXNyQ/qNO4G8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl
                          rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:50:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9085 (0x237d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9119333, serialNumber=699E6742567BE7329CC3A786DEB7857E2C2420F9
        Validity
            Not Before: May 12 15:50:23 2026 GMT
            Not After : May 19 15:50:23 2026 GMT
        Subject: CN=6a034c40-6841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:83:b7:58:6d:5f:f3:b2:9b:4e:d9:32:f0:a2:
                    fc:14:58:3f:05:3b:b9:5e:49:15:ca:be:fc:d5:00:
                    8e:02:21:de:7c:7a:4b:fc:37:9c:5c:7f:52:75:c1:
                    7e:b1:61:2a:65:04:9c:48:6b:c4:80:30:9c:93:74:
                    26:be:70:ca:d1:d7:64:15:4b:d3:ac:3f:90:52:3f:
                    e1:23:e3:b9:00:52:c6:47:81:e9:08:9c:4b:1b:a7:
                    87:50:d5:bc:4c:e1:b9:cb:b4:6c:e6:50:53:21:e8:
                    ac:bf:a4:1f:71:17:4f:d7:d2:b8:0f:63:89:2c:02:
                    0f:44:c8:97:9f:cd:01:19:b3:2a:6f:9a:b6:c7:70:
                    76:e7:4f:99:4e:d4:d9:8c:fe:d5:f5:3b:88:38:73:
                    9d:a5:53:64:1a:fe:5d:ca:74:76:73:f9:05:45:f2:
                    cd:fe:7a:b2:9b:76:af:ce:ec:8d:16:e0:ad:bb:40:
                    78:02:f0:af:f2:97:c1:0b:5e:57:e1:a9:fa:42:7c:
                    d5:a6:08:e8:e2:ee:bc:66:42:3d:fa:ea:92:78:6b:
                    fe:d7:4c:db:87:40:ea:e9:85:56:33:98:1a:b1:e4:
                    86:0c:4c:81:d7:53:85:6a:08:d1:b2:a8:32:6a:6f:
                    24:d9:75:69:fd:82:b4:8a:2a:ca:fd:4d:5c:9b:3b:
                    84:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:30:C2:94:6F:2D:AD:A2:6F:B0:D7:FE:F7:ED:02:0D:65:CE:4F:C0
            X509v3 Authority Key Identifier:
                keyid:69:9E:67:42:56:7B:E7:32:9C:C3:A7:86:DE:B7:85:7E:2C:24:20:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aZ5nQlZ75zKcw6eG3reFfiwkIPk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9119333/065DA3BAB84411E5B5357B2FC4F9AE02/aZ5nQlZ75zKcw6eG3reFfiwkIPk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:42:81:eb:12:91:16:27:21:d8:22:4a:49:a5:b0:0e:bf:1c:
         9b:4c:c8:56:75:7f:80:74:3c:a4:9f:51:8d:04:77:6f:98:f0:
         1d:6f:e4:6f:5d:e9:fd:25:26:94:ea:c6:b7:1a:be:65:8d:1e:
         2a:8a:63:fd:42:b8:2b:2f:21:4b:de:19:96:fa:47:ce:06:c6:
         c9:3b:cc:05:87:16:9c:0a:4a:54:42:dc:ed:b0:04:19:d5:45:
         ff:85:08:e2:f1:9a:ca:93:e0:54:7c:ec:77:c0:e8:dc:e8:af:
         c9:02:ef:65:33:93:3f:c4:d3:2d:60:69:76:73:49:3c:c3:77:
         9a:0b:9d:fd:c6:27:75:cb:22:5c:8b:b9:83:8c:01:20:5c:bd:
         67:f0:ec:b1:e7:78:55:a8:07:26:4e:28:f9:1f:d9:bf:3c:cf:
         5c:96:4a:c9:9a:87:c6:e8:5d:4a:ed:77:4a:71:4e:a8:01:7c:
         77:77:29:3a:b5:be:17:83:72:67:70:54:25:4e:f1:3e:90:bd:
         85:e2:a3:cc:1b:61:b1:10:1e:dc:ab:3e:66:25:4f:9a:41:e1:
         b4:f8:80:96:2f:d0:62:76:a0:7f:61:92:5b:c4:32:6e:d9:4a:
         bd:4f:0e:c7:a5:0a:a0:d3:51:2b:46:2b:0c:26:0a:ab:a4:b6:
         e3:ab:67:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:53:08 2026 by rpki-client