Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
File:                     grMfodzgxL8vZjl3hqbAjkfGuP4.mft (raw, json)
Hash identifier:          SnDUcKeuHn2PVJDt7yWDZmuXdAvFVvdhWS+gsy6VEM0=
Subject key identifier:   B2:16:1C:7C:04:F5:87:97:D8:02:D9:63:51:58:0E:3A:3C:95:99:72
Authority key identifier: 82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE
Certificate issuer:       /CN=A91294F7/serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
Certificate serial:       05E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
Manifest number:          05D9
Signing time:             Tue 12 May 2026 23:06:50 +0000
Manifest this update:     Tue 12 May 2026 23:06:49 +0000
Manifest next update:     Tue 19 May 2026 23:06:49 +0000
Files and hashes:         1: grMfodzgxL8vZjl3hqbAjkfGuP4.crl (hash: 2k6hGRT+oCwEmJxknka3lJK5LjrMX1IgcwStLem2i5g=)
                          2: F7307C08FFCA11EB93268E6DC4F9AE02.roa (hash: T+BAMElZYCx7kGTbdasdTT95R9yeWdnx6k5VpkPYG2I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl
                          rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:06:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1504 (0x5e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91294F7, serialNumber=82B31FA1DCE0C4BF2F66397786A6C08E47C6B8FE
        Validity
            Not Before: May 12 23:06:49 2026 GMT
            Not After : May 19 23:06:49 2026 GMT
        Subject: CN=6a03b28a-759a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:60:c5:ae:44:fa:a2:86:9a:f0:80:f9:a8:cb:
                    0c:ee:f4:93:36:65:c7:c2:3d:1d:ef:39:7b:7b:01:
                    60:44:04:45:e6:4a:49:b2:41:0d:a2:5b:87:95:30:
                    d4:1a:6a:6d:46:d1:05:ef:f5:df:0d:3b:44:fc:71:
                    61:5a:88:e6:89:8e:0b:fc:cd:16:0a:57:51:ee:e0:
                    b3:d0:9c:2d:71:37:cc:40:5f:bd:1d:d5:78:7a:5f:
                    fc:48:be:ad:1a:0f:f5:45:ef:91:30:41:c6:61:bd:
                    db:47:4c:7e:88:f3:aa:10:a7:1c:c7:cb:e5:1f:45:
                    09:1a:5f:a6:5d:33:02:10:a4:98:0e:67:4a:66:67:
                    48:58:2e:61:98:5f:61:b8:32:c7:a0:16:93:ad:04:
                    3d:33:cd:47:8e:ab:03:31:ff:82:eb:b2:97:20:fd:
                    92:70:6d:b4:20:20:34:6e:12:91:c0:ba:e7:66:9f:
                    e9:0f:11:bc:f4:87:0b:26:ba:27:2c:39:49:2c:ab:
                    29:0a:a5:d7:c5:11:9e:55:af:01:64:20:5e:59:a4:
                    7a:e1:5d:3e:52:92:ec:44:ba:1c:68:34:22:7c:e2:
                    8a:5c:5f:48:1a:6e:e7:fc:6d:33:a9:e5:6f:88:d6:
                    51:f0:37:4d:30:15:2f:e8:a1:a1:60:b7:b3:24:d8:
                    5d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:16:1C:7C:04:F5:87:97:D8:02:D9:63:51:58:0E:3A:3C:95:99:72
            X509v3 Authority Key Identifier:
                keyid:82:B3:1F:A1:DC:E0:C4:BF:2F:66:39:77:86:A6:C0:8E:47:C6:B8:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/grMfodzgxL8vZjl3hqbAjkfGuP4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91294F7/59FF05AAFFC811EBA8A4A057C4F9AE02/grMfodzgxL8vZjl3hqbAjkfGuP4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bf:c4:a9:5e:36:5a:75:cb:e9:b4:fd:40:e8:24:dd:2a:37:9c:
         b0:6e:6c:b1:dd:65:9d:6a:41:61:a4:80:cd:82:99:cc:c7:07:
         1f:69:16:7f:56:76:77:bf:b4:e6:1e:de:46:3e:f1:ce:38:f8:
         20:8a:b5:de:60:ed:f9:ce:d6:af:ac:b9:05:74:f8:a6:e8:ed:
         9e:3c:64:c6:01:d2:10:cf:ad:1f:86:1a:c9:71:7b:ac:e9:eb:
         85:ff:6d:78:53:b6:46:ec:7f:c5:e7:1e:24:98:d4:4a:4a:e6:
         cb:c7:e2:e7:77:de:54:7b:a3:4b:34:d2:4a:8b:68:d6:b1:03:
         df:9c:74:45:4d:b5:8a:57:a7:5f:b7:99:48:6d:50:9a:e3:d1:
         bf:54:a8:f5:c7:7b:3e:43:d5:8a:dd:63:c1:99:37:05:6d:d0:
         f2:63:75:02:72:b9:b1:81:59:45:cf:26:0a:4f:32:4a:b5:f3:
         69:20:30:66:d0:63:67:17:53:08:28:f1:b5:41:1b:5d:1f:be:
         86:77:4a:57:ee:67:e6:4a:f9:6c:14:fa:ce:2c:ce:c7:3b:d2:
         ef:c9:f0:42:ca:38:6e:23:b0:ae:f3:7d:22:08:f8:55:0c:d8:
         32:0f:aa:99:53:99:d5:4d:83:7a:c8:78:26:4b:a3:d8:91:9a:
         33:4b:03:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:05:27 2026 by rpki-client