Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
File:                     _80g3KaN5DLyGRt7YzKGvJh-Quw.mft (raw, json)
Hash identifier:          PIQat0RTyJZLxmTqP1qzyztzflk10YfjjfEtqFsCApM=
Subject key identifier:   E4:2D:17:78:57:54:0E:D4:B1:C6:41:CA:7A:B6:23:DD:EF:2B:4A:21
Authority key identifier: FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC
Certificate issuer:       /CN=A9150D27/serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
Certificate serial:       1DBA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
Manifest number:          1D6A
Signing time:             Tue 12 May 2026 16:08:01 +0000
Manifest this update:     Tue 12 May 2026 16:08:01 +0000
Manifest next update:     Tue 19 May 2026 16:08:01 +0000
Files and hashes:         1: _80g3KaN5DLyGRt7YzKGvJh-Quw.crl (hash: KiMWf35cRVn3ZvJFEutF3tQksJ6Cf40kF9evBOMRAvo=)
                          2: 178177F0D35C11E69A0BDB79C4F9AE02.roa (hash: n/gTB6s13nj4xetz9kmUgJFsx1uuTl5Dl+E77IJFwN4=)
                          3: 186E151AD35C11E69A0BDB79C4F9AE02.roa (hash: cWAyzYqC5O+jPUCFavqVibzAeEoOgWWMZB3C1RvuIBs=)
                          4: 335B84084C9611E7B9D8512DC4F9AE02.roa (hash: EU6Bls9JhzMquHgi7kBWPHJD6CubZtnsE/4pW2Mw0IM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl
                          rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:08:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7610 (0x1dba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9150D27, serialNumber=FFCD20DCA68DE432F2191B7B633286BC987E42EC
        Validity
            Not Before: May 12 16:08:01 2026 GMT
            Not After : May 19 16:08:01 2026 GMT
        Subject: CN=6a035061-413b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:78:32:68:aa:4c:72:2e:e1:58:f0:a9:b2:aa:
                    28:7f:d6:e8:ee:9d:59:cb:ea:60:8b:4e:8b:cc:f6:
                    b3:6a:77:ff:aa:7b:f1:b3:58:a0:a8:26:c6:3e:6e:
                    8c:21:0f:f1:c5:8f:c7:c1:9a:f4:3a:c5:dc:7e:52:
                    2c:df:6a:81:e8:aa:4d:95:b2:a2:56:aa:7e:15:d5:
                    4d:78:0c:61:eb:39:d4:f6:37:bf:7f:b4:42:9b:e6:
                    34:76:1f:b1:17:da:42:b2:f2:23:d7:17:93:9c:a4:
                    ab:e4:87:b4:c3:99:a0:af:63:2c:c8:c7:bf:f1:53:
                    4c:5d:55:6c:fe:b1:0d:69:2f:d6:0e:07:19:61:ac:
                    fb:81:22:03:cc:5c:1f:54:4e:b3:30:ae:f6:d8:a3:
                    99:53:99:10:62:40:0b:1c:91:0a:05:98:d2:40:93:
                    b7:8a:f7:23:a7:c6:c2:db:0c:cc:f1:08:79:39:ab:
                    4f:e7:5b:5b:1f:8f:1d:14:ec:61:d2:a4:57:c9:26:
                    2f:85:d8:cf:e0:7d:02:6d:b4:fc:36:66:1c:38:ff:
                    23:dc:fd:57:15:b1:75:3f:eb:3e:f2:ee:b1:68:e2:
                    94:57:40:54:ac:90:80:83:3e:46:2d:76:6c:b9:7d:
                    89:61:ef:8b:03:47:71:a8:d8:cf:bd:2e:72:35:4c:
                    02:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:2D:17:78:57:54:0E:D4:B1:C6:41:CA:7A:B6:23:DD:EF:2B:4A:21
            X509v3 Authority Key Identifier:
                keyid:FF:CD:20:DC:A6:8D:E4:32:F2:19:1B:7B:63:32:86:BC:98:7E:42:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_80g3KaN5DLyGRt7YzKGvJh-Quw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9150D27/2A61CA8AD35911E6B55AFA70C4F9AE02/_80g3KaN5DLyGRt7YzKGvJh-Quw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         73:67:5f:a4:20:5f:99:cf:03:9b:b8:fc:6c:3e:f9:d6:66:d1:
         9d:6b:36:b9:12:b1:b6:b9:11:21:7a:87:28:41:46:2f:d9:86:
         6a:04:c4:23:59:32:11:a6:e4:c0:b3:54:72:9c:9a:3e:fe:65:
         6b:20:f2:ec:59:53:77:ec:df:76:a6:26:07:22:18:e1:6c:da:
         65:65:3b:72:0c:f8:62:75:04:bf:85:ee:83:70:f2:24:c8:e0:
         8e:41:49:ad:93:f2:4f:86:46:6e:45:03:e3:ee:3a:98:82:20:
         2c:2c:6e:29:95:a1:8e:58:a5:db:03:68:40:23:c2:b8:37:68:
         83:42:e0:bd:c2:46:51:e2:f0:ec:8f:cf:aa:aa:5c:af:ab:52:
         3f:5a:00:46:56:db:9f:94:99:8b:e1:f5:a7:00:0e:17:cb:56:
         2f:c6:81:c9:ca:5e:ee:0f:fe:a9:77:d6:81:e0:32:be:9d:cb:
         6b:4a:7e:c9:8b:75:63:6c:10:c8:3f:00:65:94:5d:44:3d:12:
         2c:27:5b:17:3c:6a:4d:36:cc:f8:89:49:be:92:ae:fe:c5:05:
         d3:8f:95:47:01:22:0d:28:33:55:04:96:b1:de:63:28:34:64:
         16:16:7d:61:2f:39:e4:ec:d5:40:88:a7:89:95:79:bf:3b:b6:
         06:7f:cb:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:09:49 2026 by rpki-client