Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
File:                     Ad9hVyR3ojDnn48oz91tKDd_Iis.mft (raw, json)
Hash identifier:          in2LjQVVjyLv9Vr/CZf15v7uIemtsUnKd31vx88QSNA=
Subject key identifier:   B5:0D:CC:E7:56:A1:4C:5B:AD:07:5E:53:5F:30:3D:CA:08:0B:85:95
Authority key identifier: 01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B
Certificate issuer:       /CN=A914E5AE/serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
Certificate serial:       05D2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
Manifest number:          05C8
Signing time:             Tue 12 May 2026 23:55:33 +0000
Manifest this update:     Tue 12 May 2026 23:55:32 +0000
Manifest next update:     Tue 19 May 2026 23:55:32 +0000
Files and hashes:         1: Ad9hVyR3ojDnn48oz91tKDd_Iis.crl (hash: MLSxsB3mVCckYBmpdzwUvxYmTILzeNiPqSFQwJU9a9Q=)
                          2: C847114C07D411ECBF875117C4F9AE02.roa (hash: RTJD+7WiiJ9osfnBTe3ZJqaDqHxNHYqplthmyXrSeGU=)
                          3: 0DA7E9A84E5E11F18A6201F7A4833773.roa (hash: 26SsFsizgxWr5/3af4N9JjMHshM9V4wsilE+SXI7ugA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl
                          rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:31:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1490 (0x5d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914E5AE, serialNumber=01DF61572477A230E79F8F28CFDD6D28377F222B
        Validity
            Not Before: May 12 23:55:32 2026 GMT
            Not After : May 19 23:55:32 2026 GMT
        Subject: CN=6a03bdf5-4337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:49:54:f5:0d:c0:a2:6b:13:af:eb:82:d5:f1:
                    e6:5c:fa:46:4d:a7:7b:1d:ce:6f:60:0b:b2:cf:97:
                    19:ce:b6:09:dc:d9:22:83:28:e8:7c:6c:56:9c:39:
                    9d:ee:a5:96:8b:dd:75:11:cb:d9:94:27:1d:48:e4:
                    8f:c2:e8:4f:bd:d4:f4:fb:9a:6d:05:1b:25:c4:65:
                    cf:3a:2b:a5:a3:af:a0:ce:e5:5a:34:e9:38:4d:2d:
                    3f:b7:6c:3c:60:44:86:f3:cb:40:b5:cb:2f:58:c5:
                    07:38:7c:26:b4:ed:5d:7e:72:d2:3e:dd:49:b1:b1:
                    0e:00:ff:90:c8:36:8c:2f:99:47:b7:59:ec:b3:3e:
                    60:88:17:53:98:64:88:51:b6:7d:46:00:db:6c:07:
                    41:c2:55:37:63:05:e5:70:82:cd:c6:cc:97:c2:47:
                    c7:f5:6f:29:e2:ff:4d:6d:31:46:15:3d:a4:35:91:
                    f2:af:86:fd:ef:d7:62:46:10:a0:91:65:7d:20:b0:
                    4d:68:4e:1e:b5:4a:f4:c3:9a:ec:e0:e6:5b:76:d4:
                    d8:d4:d9:75:3f:80:d4:da:a2:15:f1:8a:91:0f:79:
                    6a:ed:3c:a9:37:d5:91:95:73:f4:ee:96:f5:02:bd:
                    5c:6a:2a:22:84:48:9a:c7:f7:19:45:79:89:ed:5e:
                    4c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:0D:CC:E7:56:A1:4C:5B:AD:07:5E:53:5F:30:3D:CA:08:0B:85:95
            X509v3 Authority Key Identifier:
                keyid:01:DF:61:57:24:77:A2:30:E7:9F:8F:28:CF:DD:6D:28:37:7F:22:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ad9hVyR3ojDnn48oz91tKDd_Iis.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914E5AE/46D422F007D211ECAA82B611C4F9AE02/Ad9hVyR3ojDnn48oz91tKDd_Iis.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:51:29:df:8a:30:65:99:36:9d:cb:c8:c8:08:0f:6d:39:d7:
         d8:c3:c8:ab:c1:80:8c:f2:a8:20:02:ed:65:84:c2:65:32:cd:
         66:93:e3:de:1b:47:ce:fa:08:c4:68:ff:6e:0b:9e:02:5d:4c:
         10:ef:61:ef:f3:a5:6f:dd:8d:71:4c:14:ca:d9:d2:11:63:a5:
         ae:67:36:48:82:94:eb:fc:88:b4:e1:bd:7a:4b:c0:d0:31:05:
         8c:a3:45:fc:74:a6:6f:f4:b6:38:b0:a4:9f:d9:de:d3:6d:b3:
         44:c2:ea:72:12:03:cb:71:b8:99:00:07:eb:e0:3c:12:10:ca:
         cb:71:fd:8d:9d:00:a5:45:65:88:dc:9f:27:fe:f8:03:44:34:
         6e:cd:dd:00:e1:1e:09:ec:87:a5:db:a7:82:0c:a9:80:7e:f3:
         d6:da:1d:9a:9d:e6:03:af:46:dd:71:69:b7:56:0c:88:fd:78:
         aa:46:85:22:ca:ab:ab:ee:88:d7:47:e3:fb:e5:dc:1f:0e:a2:
         28:66:89:b0:70:15:a6:86:a5:0e:3e:81:56:42:19:ce:d5:29:
         e8:a5:dc:1d:54:22:d1:ea:5c:7d:9c:21:a5:68:44:e3:33:7f:
         81:62:b2:1a:ff:e7:cf:e7:f3:5b:28:54:2c:00:d1:06:53:9a:
         9e:5c:4f:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:46 2026 by rpki-client