Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
File:                     L996avkE3yzUfmXMwMnFzL8jmOU.mft (raw, json)
Hash identifier:          +k9kPPtZIkA0oX0M/bQh3KAVZbBvHX/VpB+OobKdWEY=
Subject key identifier:   DD:37:87:63:06:5C:3F:BD:00:74:DC:3A:A0:0E:4B:85:69:43:E3:B4
Authority key identifier: 2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5
Certificate issuer:       /CN=A91273D6/serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
Certificate serial:       0863
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
Manifest number:          085A
Signing time:             Tue 12 May 2026 20:53:15 +0000
Manifest this update:     Tue 12 May 2026 20:53:14 +0000
Manifest next update:     Tue 19 May 2026 20:53:14 +0000
Files and hashes:         1: L996avkE3yzUfmXMwMnFzL8jmOU.crl (hash: qiaEyqA8U0YUIulow8iyKsC9IWBfuSXKPQ5vIbmfRP0=)
                          2: C1B1AEC6051111EBBA2CAF5CC4F9AE02.roa (hash: FbDgkdDDZMbNMRMdVxYm9VIX+tjPFoWLYLBx+uGl7CM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl
                          rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:53:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91273D6, serialNumber=2FDF7A6AF904DF2CD47E65CCC0C9C5CCBF2398E5
        Validity
            Not Before: May 12 20:53:14 2026 GMT
            Not After : May 19 20:53:14 2026 GMT
        Subject: CN=6a03933b-b373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:9e:ac:06:c5:16:76:7e:59:9d:d6:36:80:21:
                    76:9a:9d:61:fb:4e:4a:62:82:30:1f:04:ee:7e:56:
                    4f:17:d4:95:e1:51:c8:c7:ee:9b:13:be:c8:59:1b:
                    cd:ce:5c:68:c5:81:bc:80:46:65:6b:c5:0b:70:e6:
                    93:91:6f:7c:8c:d0:9e:e4:5a:f7:0b:78:30:e5:7e:
                    32:8d:57:e7:9d:be:1f:94:d1:2b:55:98:c7:4b:11:
                    9b:5d:e6:80:64:ed:d2:65:d9:b9:85:c4:f4:c0:0b:
                    7b:95:2b:ea:0e:d4:92:43:ed:68:d6:d0:b2:b2:ee:
                    37:44:96:ca:b3:68:80:58:8f:50:66:85:2b:07:12:
                    93:c8:11:f5:d5:d4:51:ef:f5:e1:4e:15:4f:3c:14:
                    bb:bb:74:cb:c2:e7:c9:1c:ca:11:f9:8f:3c:98:b4:
                    a0:26:1c:4b:c7:55:1c:5e:39:10:27:f0:d3:49:2b:
                    ca:3a:e8:6f:57:a5:94:44:be:bc:09:34:4b:8f:88:
                    55:ad:dd:47:6a:88:3c:38:c1:9a:91:a3:7e:63:1e:
                    1f:3a:9c:20:09:4d:42:37:5b:c7:c2:c8:42:87:98:
                    4b:52:6b:f7:25:b1:6a:6a:2d:43:39:40:e4:2f:0e:
                    04:ba:59:a3:a2:0b:7c:3c:b8:8c:86:cf:37:71:5a:
                    60:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:37:87:63:06:5C:3F:BD:00:74:DC:3A:A0:0E:4B:85:69:43:E3:B4
            X509v3 Authority Key Identifier:
                keyid:2F:DF:7A:6A:F9:04:DF:2C:D4:7E:65:CC:C0:C9:C5:CC:BF:23:98:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/L996avkE3yzUfmXMwMnFzL8jmOU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91273D6/139E1244051011EB80E3175BC4F9AE02/L996avkE3yzUfmXMwMnFzL8jmOU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:a4:06:87:93:85:0b:7d:f9:5e:5c:a8:aa:68:d0:10:4f:
         ac:c9:e2:33:06:7e:41:be:54:90:4c:4c:86:76:17:f3:47:9f:
         f8:35:65:6f:81:27:f5:07:aa:d0:f3:5c:d1:1a:37:cc:1e:dd:
         05:2f:ea:78:25:ad:55:81:3f:1c:a7:3c:26:8c:84:06:d9:90:
         39:17:aa:f7:14:2b:c8:ff:d4:2b:d3:99:65:d9:85:fd:46:03:
         b5:fb:8a:68:f6:34:4a:26:18:f0:00:61:b6:06:0b:f7:30:30:
         6f:dc:00:0f:34:a6:b2:da:ee:ab:6e:28:0b:b9:96:90:4d:d0:
         df:da:8d:e5:f5:33:8d:ce:15:23:0f:68:7b:6a:54:d5:9d:a5:
         37:58:94:46:59:a4:14:ce:38:5a:42:43:d0:d7:09:bb:2a:1d:
         1f:39:d2:fa:99:3c:7c:8d:5d:85:e0:49:57:3c:11:8a:01:b4:
         d2:44:bd:8a:3e:24:a6:b0:2c:3f:ae:64:01:37:d7:c5:8b:43:
         87:ef:6d:57:da:2b:06:fb:73:b2:c8:3d:0a:b9:49:fe:64:94:
         d9:b1:14:30:8d:f6:b4:bf:0f:c9:be:c9:36:f8:41:b8:69:a9:
         9a:04:db:2c:2a:bd:18:9c:f0:58:1f:a7:1c:a8:3c:6b:8c:79:
         62:1c:ec:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:39:05 2026 by rpki-client