Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
File:                     838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft (raw, json)
Hash identifier:          CJjm1c0NVjo459+tNDEnZNvSe3nGXS8fdcTdSeT3tik=
Subject key identifier:   BB:EE:02:D5:9E:AE:D4:3A:1E:8A:62:55:6D:A1:87:03:24:CA:63:46
Authority key identifier: F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC
Certificate issuer:       /CN=A913DD87/serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
Certificate serial:       012E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
Manifest number:          0124
Signing time:             Wed 13 May 2026 05:51:27 +0000
Manifest this update:     Wed 13 May 2026 05:51:26 +0000
Manifest next update:     Wed 20 May 2026 05:51:26 +0000
Files and hashes:         1: 838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl (hash: DG19QXhFaptGJeHrCmrKiry0yeCfAC+495pSEGIMAxI=)
                          2: 10B69CB69A7811EFB88E9513C4F9AE02.roa (hash: zuURI07gyd5WQyCkPGGbwO63XybgzHMpUpLwoLd6OuY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl
                          rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:51:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 302 (0x12e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A913DD87, serialNumber=F37F234F3A87D18FCC6713E4510678CA0561C2FC
        Validity
            Not Before: May 13 05:51:26 2026 GMT
            Not After : May 20 05:51:26 2026 GMT
        Subject: CN=6a04115f-4953
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:8e:d9:d4:a1:eb:5d:44:16:f9:ac:7c:71:d9:
                    3b:81:5e:ef:82:d6:50:a5:d7:95:40:a7:f1:21:d6:
                    27:01:21:2a:0f:7e:1c:2e:ab:df:e9:40:5b:d0:bd:
                    7c:68:a4:f3:bf:8f:ec:6a:f3:e5:c5:b4:87:aa:fd:
                    03:a6:4b:56:f9:c5:48:22:3f:58:c8:d6:b5:0e:1c:
                    b5:30:22:34:f6:f8:ce:2c:5d:9c:2a:9e:7a:5c:95:
                    5e:22:73:7e:7d:aa:bf:91:8d:cd:81:bd:a1:91:8a:
                    43:fd:a0:ed:88:88:3d:97:e4:7f:fc:1d:4d:7b:0a:
                    78:2e:b2:af:d9:7a:1a:07:dc:df:9f:84:35:8d:dd:
                    9e:69:99:82:e3:18:92:7e:54:fc:33:ed:db:e1:08:
                    50:96:64:64:26:31:15:54:d6:30:9e:c2:ff:73:4a:
                    45:53:7a:63:b8:56:d5:2f:a7:47:b7:45:91:89:37:
                    fd:d5:42:61:ea:eb:8d:06:60:34:2f:85:7f:94:3e:
                    5f:d1:8b:88:dc:d5:e0:40:c1:ec:48:0f:ad:07:fa:
                    b6:d9:e1:c8:a2:3f:d2:c2:6f:eb:b5:82:23:ab:1d:
                    e1:b3:9e:73:8f:b9:a1:6d:1f:ec:a1:f9:1a:e0:6a:
                    3c:c6:bf:6a:2e:89:76:52:8a:56:55:12:9b:5b:41:
                    cb:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:EE:02:D5:9E:AE:D4:3A:1E:8A:62:55:6D:A1:87:03:24:CA:63:46
            X509v3 Authority Key Identifier:
                keyid:F3:7F:23:4F:3A:87:D1:8F:CC:67:13:E4:51:06:78:CA:05:61:C2:FC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/838jTzqH0Y_MZxPkUQZ4ygVhwvw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A913DD87/EC56B72097E811EF8E32903AC4F9AE02/838jTzqH0Y_MZxPkUQZ4ygVhwvw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         49:8c:e0:f7:58:cd:65:83:5f:52:a1:53:77:cc:0b:44:76:d1:
         2a:e8:c9:ce:3b:c5:47:79:b8:2e:16:df:9e:02:c8:6e:4a:ce:
         65:52:75:f1:bf:5d:18:57:e9:27:58:f9:2f:05:c9:88:8d:4b:
         81:54:e2:b5:70:8f:f4:fd:e3:0a:87:28:bf:07:30:d9:00:9e:
         98:82:08:13:bf:91:0b:28:b7:69:3c:ea:3d:23:d4:17:f4:ce:
         3b:2c:61:5f:82:82:ea:14:fb:fb:76:9c:a0:e9:7f:f9:0e:63:
         b9:be:8a:a1:f8:e3:47:11:2c:b5:1e:d7:9a:44:eb:82:c6:64:
         e0:ae:b4:2c:cd:de:04:8d:2f:80:57:df:11:67:7a:db:12:fd:
         3a:55:4b:b8:a0:2c:85:1e:e6:5f:3d:ab:d7:5f:d9:81:e0:d4:
         fd:a9:8c:15:c6:d2:eb:25:8d:8b:df:fc:c5:8e:f5:c2:12:b9:
         52:6a:d2:49:5a:e8:fa:dc:3a:1b:57:80:ea:f8:5d:84:4f:7a:
         15:06:85:54:25:f1:93:9b:b7:5b:5e:5b:13:e4:04:5a:df:da:
         f2:e6:52:b2:72:9f:72:d4:32:66:18:a6:c5:d9:6f:5f:33:5f:
         7d:2e:8a:ab:e1:b0:ca:65:de:9f:3b:67:c2:5e:9a:25:f6:87:
         52:9f:be:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:29:23 2026 by rpki-client