Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
File:                     _Ern2eP0GafSBKVMedHz76mn1sg.mft (raw, json)
Hash identifier:          NkLPnH94AwNhNFUgE3gXtLm547e5PTTlIvrU+AmYoiI=
Subject key identifier:   A0:00:BA:79:87:FC:BB:A4:96:5D:D4:B0:88:77:18:55:AE:00:FB:A1
Authority key identifier: FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8
Certificate issuer:       /CN=A91262F0/serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
Certificate serial:       0272
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
Manifest number:          0268
Signing time:             Mon 11 May 2026 02:08:46 +0000
Manifest this update:     Mon 11 May 2026 02:08:46 +0000
Manifest next update:     Mon 18 May 2026 02:08:46 +0000
Files and hashes:         1: _Ern2eP0GafSBKVMedHz76mn1sg.crl (hash: mIZ1kQ5+HKgcxQdmu08ziFRjHxn/+j8giUiAELQ03QY=)
                          2: 8E412748A33311EDA2CB2420C4F9AE02.roa (hash: 8ooMgmV7Ud+S1xspsx7qZBXNFAFm0OtpaMWTTHwLKP0=)
                          3: 05BD1998108D11F197077311333D8C67.roa (hash: ZxF538zON35iTObIR2PUbabLdiG79qM6J447o9x0f0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl
                          rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:08:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 626 (0x272)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91262F0, serialNumber=FC4AE7D9E3F419A7D204A54C79D1F3EFA9A7D6C8
        Validity
            Not Before: May 11 02:08:46 2026 GMT
            Not After : May 18 02:08:46 2026 GMT
        Subject: CN=6a013a2e-6db9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:77:cc:77:6f:56:ca:e6:8c:6e:5e:08:83:46:
                    f6:76:f7:b1:f7:02:11:b4:cd:66:ad:1d:01:16:49:
                    1a:34:e7:a5:4f:14:3c:69:7a:a4:38:5a:85:57:87:
                    57:f7:e8:78:f7:9c:65:0d:7c:37:96:26:18:99:66:
                    23:b4:ab:11:a1:7a:7d:91:ec:1c:ff:c2:7e:0f:76:
                    c3:d0:76:f0:03:b7:d3:1d:72:fe:a5:45:5b:32:65:
                    13:62:f8:ea:2f:b0:d2:a9:d1:bb:f0:f6:6d:c7:11:
                    dd:77:1e:5a:58:fb:bd:f3:14:f6:fe:76:29:4d:b6:
                    7a:23:13:a0:47:ac:06:db:cf:c1:f4:31:b5:fe:f1:
                    80:23:21:4e:a3:71:df:9d:54:5d:4c:f6:09:f7:15:
                    04:73:49:40:ff:e7:82:f1:7e:34:88:83:0f:4d:5a:
                    3d:c9:e5:be:86:46:ef:c1:7b:e1:e7:65:7d:c4:09:
                    12:3b:00:51:21:fe:53:8a:14:19:5a:ba:45:4a:3f:
                    ce:8f:24:7b:a2:8b:8b:b1:a2:09:fc:e6:d0:8b:e8:
                    ed:79:4b:d3:61:ca:7e:14:89:34:29:dc:9d:35:02:
                    8c:0c:76:09:67:7a:01:2b:37:db:5a:9c:63:5a:3d:
                    22:83:98:fd:a8:01:37:5d:32:40:3c:19:ee:3a:55:
                    6e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:00:BA:79:87:FC:BB:A4:96:5D:D4:B0:88:77:18:55:AE:00:FB:A1
            X509v3 Authority Key Identifier:
                keyid:FC:4A:E7:D9:E3:F4:19:A7:D2:04:A5:4C:79:D1:F3:EF:A9:A7:D6:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_Ern2eP0GafSBKVMedHz76mn1sg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91262F0/33AD0A62A30C11EDB3388C0CC4F9AE02/_Ern2eP0GafSBKVMedHz76mn1sg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bd:73:23:fb:4d:50:a9:70:63:cb:24:7f:7c:01:09:b4:dd:33:
         ef:a7:5b:06:58:51:a7:90:36:8f:92:99:7e:1f:8c:98:7b:90:
         8d:0a:da:b3:71:a5:ad:09:48:b6:97:6b:10:cd:1e:4f:62:9f:
         e3:67:31:3c:76:24:ee:47:d9:a9:82:9f:36:1d:6a:25:e1:16:
         10:3d:7c:a0:8c:33:91:8c:91:d4:db:b0:aa:95:da:94:2a:56:
         d5:44:0c:8d:1d:5f:93:dd:78:fe:51:10:99:7b:74:b7:d5:a3:
         78:58:e9:1d:c4:58:08:3d:0c:ab:90:66:7f:7f:d2:53:7d:7b:
         24:70:25:69:2a:65:5c:ff:33:87:5f:62:81:5a:7b:e9:68:64:
         9e:ed:26:d8:18:64:cb:a9:c6:90:ea:35:69:33:bc:bf:7d:8f:
         e0:ef:dc:f0:e6:67:e5:25:7f:14:60:22:6d:19:ef:4e:38:6e:
         11:48:83:4d:af:f6:3c:82:8b:71:3e:60:73:af:2d:29:74:8e:
         c8:bc:34:a9:02:05:e6:f3:db:3a:aa:3b:05:09:f8:3e:30:ce:
         4d:20:28:ee:8b:56:c5:5a:79:a6:be:17:c6:e7:ee:62:c7:5f:
         69:0a:f2:c9:9f:04:83:e9:a0:54:c3:49:b2:d8:61:2c:08:11:
         0f:30:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:13:14 2026 by rpki-client