Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
File:                     DHYrLJAks0yYhILx1x10mufcSus.mft (raw, json)
Hash identifier:          Ry39bcXaSTtLcZR/a3jI6AhTwcPYgE0ZFdE7dMFIspw=
Subject key identifier:   95:36:C9:83:CC:6C:29:53:C5:07:BB:2C:6E:1C:29:45:F7:79:8E:8C
Authority key identifier: 0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB
Certificate issuer:       /CN=A91348C9/serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
Certificate serial:       01D0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
Manifest number:          01AE
Signing time:             Wed 13 May 2026 04:14:47 +0000
Manifest this update:     Wed 13 May 2026 04:14:47 +0000
Manifest next update:     Wed 20 May 2026 04:14:47 +0000
Files and hashes:         1: DHYrLJAks0yYhILx1x10mufcSus.crl (hash: o9xineUD6u2AFIDXsfunMHB7FVFiDLufcd4FPqdxFjg=)
                          2: 9B6126AEE1D811EF881A2765C4F9AE02.roa (hash: phsa0aOE8eqCOpQqL6MkEfoEn022+mvXBZ0Y/k/Gb6A=)
                          3: F278C026892911EFB08D7746C4F9AE02.roa (hash: wlRisXvx0zTP/TvUTz15M4hS2Jw5htErhvvetPP2grU=)
                          4: F8B24A3C127911F09BCB8B7AC4F9AE02.roa (hash: 1cBkJAATgAnAWpkL5ephYU2tTfXe7A7jghvap9dsu7Q=)
                          5: 79F7221E892911EF896D1145C4F9AE02.roa (hash: 4HsEjdA6ll0rAi2M5nFxa1SGJVN7pNCKPiFzJN7imik=)
                          6: 5D31D17ACE9811EE9392467BC4F9AE02.roa (hash: z+lohyQaMeb0DYcM3/qn4iEQ+VpTj1TLsiVBPUy6pZk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl
                          rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:14:46 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91348C9, serialNumber=0C762B2C9024B34C988482F1D71D749AE7DC4AEB
        Validity
            Not Before: May 13 04:14:47 2026 GMT
            Not After : May 20 04:14:47 2026 GMT
        Subject: CN=6a03fab7-1934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:39:84:57:62:44:eb:30:4c:c5:36:b9:60:7b:
                    15:22:8e:21:9c:6f:3e:6c:6c:d9:85:47:fd:6c:3d:
                    48:58:ea:07:1f:c3:67:5c:a1:5b:2c:cb:d1:e8:6f:
                    31:91:ab:f3:62:a0:81:f6:40:b9:5b:f6:c1:6d:8a:
                    54:ce:4f:fa:e4:79:9b:4e:d9:da:d8:5a:c6:84:f0:
                    3e:8e:d4:09:32:2c:c4:33:9f:ab:b7:4d:7b:e2:9a:
                    ef:37:61:5a:1c:ea:06:58:b0:97:71:bb:4e:09:9a:
                    4c:5b:fc:82:48:bc:29:05:95:a4:df:77:b9:40:76:
                    dd:3a:2e:31:44:26:6a:1f:13:39:0c:64:7e:63:55:
                    63:80:49:d8:e2:d4:6a:6d:15:87:5d:09:4c:c9:60:
                    2a:29:9a:47:d2:37:f6:58:61:b0:b3:9a:cc:5a:9c:
                    c2:ea:7d:4f:2b:ef:73:56:ff:f5:bc:3d:97:e0:7c:
                    e5:63:ca:ac:18:a1:b2:35:25:a4:81:82:43:5e:a2:
                    83:b0:97:08:0a:b9:a8:3d:8b:01:f5:8c:a4:f0:75:
                    18:2b:9e:77:2c:bf:6a:56:46:15:f3:f5:1b:61:d3:
                    3e:56:82:a0:3c:93:16:d0:77:ad:d3:39:5e:d3:4b:
                    08:25:f0:d3:d8:99:a6:8a:61:cd:7f:0c:fc:ca:d3:
                    13:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:36:C9:83:CC:6C:29:53:C5:07:BB:2C:6E:1C:29:45:F7:79:8E:8C
            X509v3 Authority Key Identifier:
                keyid:0C:76:2B:2C:90:24:B3:4C:98:84:82:F1:D7:1D:74:9A:E7:DC:4A:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DHYrLJAks0yYhILx1x10mufcSus.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91348C9/CFC10E0ACE9711EE923F0470C4F9AE02/DHYrLJAks0yYhILx1x10mufcSus.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:d3:33:f8:8d:95:7f:24:5d:48:29:10:16:f1:a5:53:1d:
         e4:a1:27:5e:76:de:90:89:7a:80:22:22:c2:93:b0:50:95:45:
         67:4f:ac:a5:ff:d7:c6:ea:c5:ad:93:8c:69:10:5c:2f:bc:e3:
         c8:49:d2:2e:c3:bd:f8:9d:69:07:e1:ea:a2:4a:62:24:30:0a:
         d2:e8:27:65:04:8a:c8:e0:9e:83:b4:e8:69:e0:fe:65:87:35:
         26:54:34:bb:f3:97:5f:b8:2f:77:ea:78:ba:45:3d:78:ab:a8:
         f5:af:73:3c:09:3c:d8:f5:81:ae:03:4d:22:99:2d:62:a4:30:
         60:1a:02:a7:0b:d0:96:95:e8:be:cb:3a:db:b3:4d:46:eb:d5:
         5b:ef:37:59:88:20:e5:65:34:c6:c3:6d:89:5a:13:f7:ea:e3:
         7b:4e:f0:69:97:9d:d4:db:94:03:f5:ef:55:3c:5e:63:e2:9b:
         6c:71:0a:01:44:e0:21:7b:98:22:46:54:df:30:87:a4:39:27:
         b2:1f:c1:89:b0:6f:9e:f6:cf:33:9c:30:2c:c0:b0:26:82:e0:
         54:93:b9:8e:26:32:fe:82:4a:dc:02:53:0a:2c:0c:e0:dd:ea:
         82:7a:34:fe:e6:d0:98:98:f3:76:95:a7:be:17:e3:c2:8f:46:
         ba:ef:9b:9d
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzQ4QzkxMTAvBgNVBAUTKDBDNzYyQjJDOTAyNEIzNEM5ODg0ODJGMUQ3MUQ3NDlB
RTdEQzRBRUIwHhcNMjYwNTEzMDQxNDQ3WhcNMjYwNTIwMDQxNDQ3WjAYMRYwFAYD
VQQDEw02YTAzZmFiNy0xOTM0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxTmEV2JE6zBMxTa5YHsVIo4hnG8+bGzZhUf9bD1IWOoHH8NnXKFbLMvR6G8x
kavzYqCB9kC5W/bBbYpUzk/65HmbTtna2FrGhPA+jtQJMizEM5+rt0174prvN2Fa
HOoGWLCXcbtOCZpMW/yCSLwpBZWk33e5QHbdOi4xRCZqHxM5DGR+Y1VjgEnY4tRq
bRWHXQlMyWAqKZpH0jf2WGGws5rMWpzC6n1PK+9zVv/1vD2X4HzlY8qsGKGyNSWk
gYJDXqKDsJcICrmoPYsB9Yyk8HUYK553LL9qVkYV8/UbYdM+VoKgPJMW0Het0zle
00sIJfDT2JmmimHNfwz8ytMTLQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJU2yYPM
bClTxQe7LG4cKUX3eY6MMB8GA1UdIwQYMBaAFAx2KyyQJLNMmISC8dcddJrn3Err
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNDhDOS9DRkMxMEUwQUNF
OTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3MweVloSUx4MXgxMG11ZmNT
dXMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0RIWXJMSkFrczB5WWhJTHgxeDEwbXVmY1N1cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
NDhDOS9DRkMxMEUwQUNFOTcxMUVFOTIzRjA0NzBDNEY5QUUwMi9ESFlyTEpBa3Mw
eVloSUx4MXgxMG11ZmNTdXMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAZRrTM/iNlX8kXUgpEBbxpVMd5KEnXnbekIl6gCIiwpOwUJVFZ0+spf/XxurF
rZOMaRBcL7zjyEnSLsO9+J1pB+HqokpiJDAK0ugnZQSKyOCeg7ToaeD+ZYc1JlQ0
u/OXX7gvd+p4ukU9eKuo9a9zPAk82PWBrgNNIpktYqQwYBoCpwvQlpXovss627NN
RuvVW+83WYgg5WU0xsNtiVoT9+rje07waZed1NuUA/XvVTxeY+KbbHEKAUTgIXuY
IkZU3zCHpDknsh/BibBvnvbPM5wwLMCwJoLgVJO5jiYy/oJK3AJTCiwM4N3qgno0
/ubQmJjzdpWnvhfjwo9Guu+bnQ==
-----END CERTIFICATE-----
Generated at Wed May 13 07:51:36 2026 by rpki-client