Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
File:                     sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft (raw, json)
Hash identifier:          NKA8YuTqeA6Gi4Vskj4fGz3ZniRJQb4cfpB+lHs8dnU=
Subject key identifier:   6B:11:2C:77:A5:6E:C2:64:92:31:85:C7:A6:A4:65:C0:9D:8C:59:CA
Authority key identifier: B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2
Certificate issuer:       /CN=A913BF1E/serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
Certificate serial:       1030
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
Manifest number:          1012
Signing time:             Tue 12 May 2026 17:29:13 +0000
Manifest this update:     Tue 12 May 2026 17:29:13 +0000
Manifest next update:     Tue 19 May 2026 17:29:13 +0000
Files and hashes:         1: sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl (hash: SVxnkPGIYc8FRf06IVTgwweN/DGEYASrDrDnFZJyKyE=)
                          2: 8EF29168D1ED11F08D3A6B3CC4F9AE02.roa (hash: 4Xje0XiJFLxR2quCCNpe0kCvsRqAV/JFhxiHtPkeXUk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl
                          rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:29:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4144 (0x1030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913BF1E, serialNumber=B14B2EE5C5ED736AB736B2553586759AFCDEC3E2
        Validity
            Not Before: May 12 17:29:13 2026 GMT
            Not After : May 19 17:29:13 2026 GMT
        Subject: CN=6a036369-ce60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fb:d0:b8:85:6c:c6:61:41:20:28:6f:da:36:
                    36:6f:c5:41:53:0b:7c:a2:5a:9b:23:1b:23:70:f4:
                    42:44:23:ca:a8:1a:f0:8d:01:64:0f:88:97:a1:0a:
                    87:9a:67:4c:d3:4e:73:a6:b4:45:e2:16:f5:7a:6b:
                    41:03:dc:e4:67:c3:1e:77:5e:90:b6:ee:b2:f7:77:
                    70:20:5a:86:71:35:6f:d0:10:bc:35:1a:cd:c1:bd:
                    9d:c8:3e:5f:fa:7b:77:fb:9c:c2:44:52:24:c1:f6:
                    93:70:40:eb:c4:f7:8a:fd:4a:68:5f:d0:16:6c:c7:
                    78:6c:da:b5:76:81:ee:cd:d8:79:b3:c4:c6:70:df:
                    a5:37:9e:f4:12:fe:3d:8b:e4:38:aa:5c:5d:2f:d6:
                    65:60:55:2b:28:9c:f4:5b:9f:6e:1f:2b:79:6b:15:
                    28:6e:e8:bb:a4:a6:b8:1f:1a:ab:22:bb:f1:b3:cc:
                    ae:eb:53:68:ca:19:56:38:de:8e:c6:a4:14:14:22:
                    c9:84:33:38:65:91:36:99:7b:45:a7:89:0c:39:0a:
                    0e:22:61:f7:e6:7c:06:1d:c3:43:1d:f7:e1:ff:5b:
                    0a:be:fa:d4:6f:fc:bb:98:c3:0a:25:fd:c1:aa:63:
                    03:de:86:74:10:a5:56:63:a0:87:df:36:1b:a2:71:
                    c7:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:11:2C:77:A5:6E:C2:64:92:31:85:C7:A6:A4:65:C0:9D:8C:59:CA
            X509v3 Authority Key Identifier:
                keyid:B1:4B:2E:E5:C5:ED:73:6A:B7:36:B2:55:35:86:75:9A:FC:DE:C3:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sUsu5cXtc2q3NrJVNYZ1mvzew-I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913BF1E/DBB2BF666E6F11E9AA017C33C4F9AE02/sUsu5cXtc2q3NrJVNYZ1mvzew-I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:e1:38:ca:e3:88:35:21:bd:a0:02:30:f2:ad:88:99:ad:79:
         9c:23:d8:fa:99:ec:bd:3c:2f:0f:46:a5:35:d6:68:36:25:93:
         ce:23:b2:4a:fd:be:a9:11:a2:5a:16:f5:86:a8:2a:41:54:a2:
         70:4d:2a:b7:37:d0:b1:67:64:cb:5b:49:17:bf:1a:1e:2d:57:
         87:07:73:a0:53:8a:1c:41:e2:61:eb:6a:72:10:dc:89:22:91:
         91:bd:d6:2b:4c:bf:42:a0:93:8d:5a:5f:4a:dd:5d:48:84:c9:
         c3:61:3d:47:a6:d6:02:d2:9d:45:7b:4a:cf:e3:b5:ed:66:dd:
         86:f8:23:35:9b:56:14:b5:63:0f:13:fd:44:ba:bf:b5:d3:43:
         1c:8b:b4:81:22:0e:7d:15:c3:2d:eb:c5:7f:a0:3e:48:1c:a8:
         64:8c:9c:bf:3d:af:e1:cb:96:de:bb:20:85:72:ab:a7:13:32:
         7f:62:0a:10:de:20:60:6d:0e:d7:d4:c6:75:46:65:17:58:19:
         f6:71:93:be:2b:47:e7:3d:46:c6:f0:05:3a:e7:8f:04:af:7a:
         d5:d3:7c:a8:8c:48:52:de:42:52:05:98:87:85:38:7f:e1:7c:
         4b:29:21:1d:cb:7b:3b:c3:1d:72:f1:7e:6d:54:da:f3:9f:00:
         65:03:6a:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:44 2026 by rpki-client