Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
File:                     nFh2OitDfLKSxGQXuNSO32tXAc8.mft (raw, json)
Hash identifier:          F1neVKyCnnd9V2+Ocdd1G9tX8ZnN+zGvE6DbykNFndQ=
Subject key identifier:   D3:0E:E0:7B:41:BA:2A:03:49:4B:7A:F5:1C:77:00:7D:44:02:2B:94
Authority key identifier: 9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF
Certificate issuer:       /CN=A9130683/serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
Certificate serial:       0804
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
Manifest number:          07FA
Signing time:             Tue 12 May 2026 21:18:44 +0000
Manifest this update:     Tue 12 May 2026 21:18:43 +0000
Manifest next update:     Tue 19 May 2026 21:18:43 +0000
Files and hashes:         1: nFh2OitDfLKSxGQXuNSO32tXAc8.crl (hash: 5qh1D+lOmlICQP+DKD9sQKm9Vls/9NGZRkDe9o76j+Q=)
                          2: EEF3557C75A211EBBCD0587BC4F9AE02.roa (hash: pv+Z3nYrrzxoESGY4e/aJmMCDLaqcQjYTIDQwPuKCpI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl
                          rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:18:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2052 (0x804)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9130683, serialNumber=9C58763A2B437CB292C46417B8D48EDF6B5701CF
        Validity
            Not Before: May 12 21:18:43 2026 GMT
            Not After : May 19 21:18:43 2026 GMT
        Subject: CN=6a039934-dbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c8:bd:27:04:a2:2f:e9:14:9e:6f:15:7f:98:
                    35:2f:43:67:65:22:36:26:ab:5b:2b:14:da:cb:cc:
                    a8:b1:3d:17:a8:a1:df:e6:4e:e4:2b:14:a9:bf:cf:
                    04:94:67:f0:56:94:ee:7f:fd:7f:69:a4:ea:64:82:
                    70:4a:67:dd:58:c2:e9:37:37:5a:e4:ac:25:9b:62:
                    5a:dd:6a:6e:43:98:a5:cd:8f:6e:a5:15:6a:4e:64:
                    29:c0:fc:c2:3e:13:4e:f0:32:ed:68:1b:5d:4c:dc:
                    ab:de:82:07:1d:3e:8d:25:be:ff:43:00:b0:42:06:
                    81:82:1d:c2:09:9a:a7:f2:c4:82:19:e7:53:83:63:
                    64:ed:a5:ad:6c:7f:59:6c:d6:c7:76:cd:84:71:73:
                    68:80:44:25:40:57:3b:95:42:5f:7d:c5:2a:14:b9:
                    1f:6f:88:ce:80:b8:7d:df:50:b8:33:38:11:ff:94:
                    68:95:5b:69:aa:78:1b:9f:54:35:db:37:4b:27:9c:
                    b5:b3:ff:4e:1a:63:96:1c:af:e5:3a:32:e3:0f:7a:
                    cf:78:40:85:03:10:aa:cc:e8:ff:17:cc:68:e7:a9:
                    ac:99:03:83:38:df:fc:61:b8:ec:c5:2c:77:66:f2:
                    30:41:53:38:98:7b:62:2b:ea:98:b2:2f:df:bc:49:
                    fe:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:0E:E0:7B:41:BA:2A:03:49:4B:7A:F5:1C:77:00:7D:44:02:2B:94
            X509v3 Authority Key Identifier:
                keyid:9C:58:76:3A:2B:43:7C:B2:92:C4:64:17:B8:D4:8E:DF:6B:57:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nFh2OitDfLKSxGQXuNSO32tXAc8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9130683/53D754FE2A4211EB9C46CD4CC4F9AE02/nFh2OitDfLKSxGQXuNSO32tXAc8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         75:a0:ad:f7:9a:0a:f0:02:34:6f:36:33:66:a5:e5:8e:ff:db:
         19:37:91:dc:23:49:d1:ff:05:88:33:44:dd:3f:57:8d:31:a5:
         23:77:24:25:7c:68:56:ef:6f:18:c4:95:2c:d1:d0:e0:9a:21:
         06:a8:f1:85:35:2d:9a:04:53:52:0b:d6:93:bc:b2:4c:0f:bc:
         6b:1c:aa:24:bd:bd:05:34:d2:ef:b8:78:17:b9:4f:ff:f2:31:
         ea:04:48:b1:dd:90:bc:55:fd:bf:d1:b0:3d:d2:f3:93:d9:6a:
         90:74:c5:05:7e:36:48:c9:51:6d:9d:a9:76:13:19:12:6f:d0:
         6d:81:ee:fe:e3:c5:6e:3d:96:01:d8:89:6f:76:90:39:1b:00:
         d2:29:be:05:c5:28:48:73:f4:55:86:32:bb:a5:ee:df:d0:84:
         6d:21:b9:a3:d6:f3:26:1d:f1:ae:33:99:50:fc:47:4e:63:75:
         da:cf:21:dc:d0:1e:5a:21:d5:08:eb:d8:64:6f:f9:c3:7e:60:
         9f:2b:a3:de:23:ed:5a:4e:b3:d0:14:2c:b0:2b:44:30:96:21:
         6a:05:4a:b9:1b:30:6f:a6:95:a2:e4:6f:06:10:4f:99:52:71:
         fd:c5:e7:f7:c4:54:90:b2:03:e6:8b:fa:2e:fc:93:ad:5f:4a:
         b5:99:4f:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:08:14 2026 by rpki-client