Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
File:                     RIvZcaMGqwNjmecW3CIcozj1i1k.mft (raw, json)
Hash identifier:          J2kviZRSbIW4GutWhBjCyLc5GTd517asx5p27rizKnw=
Subject key identifier:   38:84:8F:CC:04:8D:71:A4:4F:A6:4F:86:B9:52:F3:12:6C:E9:CF:DF
Authority key identifier: 44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59
Certificate issuer:       /CN=A91301D5/serialNumber=448BD971A306AB036399E716DC221CA338F58B59
Certificate serial:       15E0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
Manifest number:          1588
Signing time:             Tue 12 May 2026 16:48:49 +0000
Manifest this update:     Tue 12 May 2026 16:48:48 +0000
Manifest next update:     Tue 19 May 2026 16:48:48 +0000
Files and hashes:         1: RIvZcaMGqwNjmecW3CIcozj1i1k.crl (hash: +hTLLe9kaMh4I4hyilBhp/fWT8UwUKJ8CXORJnZRbOs=)
                          2: 7338235CC06011EE882BC34AC4F9AE02.roa (hash: +rqWHU55mXZywL8CIstlBjQ5J8L3aIdxs349BgpUkec=)
                          3: 743770A0C06011EE882BC34AC4F9AE02.roa (hash: OFEYBm648I0e9Wbf7xTKz4rv2oT1O4Q0cFf6EvpbVvU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl
                          rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:48:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5600 (0x15e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91301D5, serialNumber=448BD971A306AB036399E716DC221CA338F58B59
        Validity
            Not Before: May 12 16:48:48 2026 GMT
            Not After : May 19 16:48:48 2026 GMT
        Subject: CN=6a0359f0-a57f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:6b:55:38:75:8e:70:b9:b7:5e:24:63:e5:7e:
                    78:c9:d7:2c:bf:b9:dd:3e:82:a6:6f:4e:64:28:cd:
                    bb:9e:da:13:46:a6:7b:98:ac:d4:7f:24:c4:db:be:
                    fe:92:76:2a:1e:49:dd:10:41:8d:a0:df:12:30:f8:
                    06:51:6b:e3:e9:4e:74:70:74:2d:98:6d:ef:7d:6c:
                    eb:0f:e0:ed:5c:9d:c7:2a:a0:a7:30:3d:8b:17:51:
                    01:66:e4:0d:7f:02:12:da:fa:c4:f8:f3:e3:06:88:
                    03:84:98:a7:2f:f3:db:03:0a:72:6d:cf:0d:94:73:
                    8d:76:7f:d9:21:21:b5:de:73:13:41:20:7a:55:55:
                    e7:e0:89:42:93:f4:95:d8:f3:14:4d:a9:a9:e2:0b:
                    39:14:5c:22:4d:d6:74:da:37:ea:1e:15:d5:12:2f:
                    3c:22:11:e1:13:e4:f3:e5:32:55:67:20:8a:88:c5:
                    1a:58:f0:91:46:ad:91:d1:79:55:42:e3:24:cd:5f:
                    4d:a9:2b:8d:00:58:ce:c0:4b:40:30:33:c3:4a:6a:
                    72:fa:90:28:8f:67:46:58:3e:c5:d1:c8:8d:1f:2e:
                    93:18:d1:e3:ba:d5:43:07:8f:48:81:e0:4f:44:66:
                    f6:be:fb:f7:cb:ab:4b:68:ca:da:c8:af:31:89:e1:
                    96:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:84:8F:CC:04:8D:71:A4:4F:A6:4F:86:B9:52:F3:12:6C:E9:CF:DF
            X509v3 Authority Key Identifier:
                keyid:44:8B:D9:71:A3:06:AB:03:63:99:E7:16:DC:22:1C:A3:38:F5:8B:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/RIvZcaMGqwNjmecW3CIcozj1i1k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91301D5/D4BE00D463E511E8B5CFE41AC4F9AE02/RIvZcaMGqwNjmecW3CIcozj1i1k.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b9:7f:e0:cc:cf:0d:2a:05:e1:2a:3f:b1:07:74:5b:d8:a1:c2:
         c2:b3:6e:6b:d3:c5:5c:bc:33:fa:f6:58:f3:62:9a:1a:50:1a:
         05:34:df:a2:51:5c:f4:e5:19:7b:09:c3:7b:a9:5f:57:c3:51:
         7e:f4:fc:56:89:2e:cf:0d:7f:49:85:b5:ce:41:01:3f:c5:fb:
         b7:54:53:c4:aa:3e:2d:5e:0f:74:82:21:e0:48:ba:58:7c:bf:
         b4:0b:3e:4c:61:6d:fc:f4:d2:24:40:a2:fd:fc:a6:64:03:f4:
         d2:f4:e3:dd:08:2e:19:d0:e5:04:36:1d:34:b3:dc:8e:49:00:
         c8:8a:27:98:d1:ab:c4:5a:38:92:00:0a:d1:30:cb:88:45:a5:
         fc:88:fe:50:fc:d3:a8:54:4a:9d:c8:2a:04:44:30:c7:f5:c6:
         da:35:09:0b:fc:ec:de:b3:a4:7c:52:cc:8b:5b:94:d5:e4:58:
         b5:c3:ab:7e:f1:dc:2a:f9:45:3d:78:8d:2b:4c:f8:79:2b:48:
         c9:d9:14:c2:b9:02:80:be:87:ee:c0:cf:11:bc:fd:cf:82:5a:
         c5:41:06:8e:06:05:97:cd:4e:53:60:6f:d5:74:4c:78:46:11:
         c6:0d:8f:31:6b:4f:ce:71:78:66:90:1c:b5:a6:c2:61:eb:67:
         6e:d2:e4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:18:34 2026 by rpki-client