Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
File:                     bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft (raw, json)
Hash identifier:          2CrEcYX5K1BHQnwBXGdhaLNOAtXIqZYOg8aaO5h2Gao=
Subject key identifier:   26:53:C9:3F:43:D9:09:02:6A:7C:5B:36:A1:8B:3E:59:CC:F4:1F:DC
Authority key identifier: 6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25
Certificate issuer:       /CN=A9155A44/serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
Certificate serial:       033B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
Manifest number:          0336
Signing time:             Mon 11 May 2026 01:06:45 +0000
Manifest this update:     Mon 11 May 2026 01:06:44 +0000
Manifest next update:     Mon 18 May 2026 01:06:44 +0000
Files and hashes:         1: bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl (hash: Jpe1rS/T3MXe+B4V+zLEqQESV7QFGjP3rWIzqfBPoFk=)
                          2: ED947C26088911EDA7D9A84AC4F9AE02.roa (hash: xk01nK+OBQA+N9iJTJFyOHUIgnyXzK+MKBhb3bDCqGA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl
                          rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 01:06:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 827 (0x33b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9155A44, serialNumber=6C9E0C2BFE9F7D1B1DE1D6EF628253AA70892A25
        Validity
            Not Before: May 11 01:06:44 2026 GMT
            Not After : May 18 01:06:44 2026 GMT
        Subject: CN=6a012ba5-e44a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ec:77:c9:d0:35:16:b2:6f:6d:0a:ba:7e:96:
                    9f:dc:f8:9d:32:15:e5:35:6a:0d:fa:91:75:96:66:
                    67:35:92:dc:a3:dd:31:95:36:91:ca:a3:4c:d3:d4:
                    00:e0:5c:f1:cc:9a:14:1f:81:d1:62:09:b2:3b:f0:
                    bb:aa:34:18:4d:a3:e2:fa:bd:fb:47:08:e4:cb:bb:
                    70:7e:eb:e2:07:79:c0:37:b4:d6:ba:75:35:5e:4d:
                    f6:62:ef:42:c4:9d:7b:1f:a7:8a:d4:84:12:19:20:
                    b3:e9:3c:61:ec:19:06:8f:37:90:59:05:92:00:cc:
                    79:d2:9b:8a:f5:57:9b:04:93:7a:f8:53:8d:90:b0:
                    2a:5a:91:eb:53:95:25:ce:8a:11:7d:63:b5:fd:a8:
                    90:49:12:b6:df:74:cb:49:eb:50:93:4c:d7:58:66:
                    b6:68:27:ce:cd:a0:ef:e1:86:1b:b0:68:db:ed:ae:
                    d0:e6:d2:7a:ea:b1:0e:80:29:2e:8c:7f:f0:38:ef:
                    99:d9:44:5d:71:ea:74:ce:4d:fb:cf:ff:08:2f:4a:
                    45:3f:f8:80:97:bf:d7:2a:59:b7:a2:32:b7:81:cc:
                    16:0e:65:d1:7f:47:f0:48:b1:55:c6:ac:cf:a5:ba:
                    c1:51:7e:8a:a7:75:5c:ee:01:0c:5a:e9:9c:5f:60:
                    b6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:53:C9:3F:43:D9:09:02:6A:7C:5B:36:A1:8B:3E:59:CC:F4:1F:DC
            X509v3 Authority Key Identifier:
                keyid:6C:9E:0C:2B:FE:9F:7D:1B:1D:E1:D6:EF:62:82:53:AA:70:89:2A:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9155A44/0EC8E42A088711ED891EE644C4F9AE02/bJ4MK_6ffRsd4dbvYoJTqnCJKiU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1f:65:c5:eb:44:93:11:78:3c:3b:73:be:87:21:39:bf:ff:79:
         ef:67:de:88:90:04:da:b8:50:d3:e8:51:70:a5:0d:13:59:e3:
         49:cf:85:1d:cc:87:2d:71:cf:3d:cd:d2:4e:d0:0c:62:8f:74:
         29:db:8f:e6:31:93:08:8e:71:04:38:eb:cb:09:f1:e2:43:3d:
         83:63:d1:63:f0:d7:75:59:b4:8c:26:ad:4a:22:7d:5e:3d:71:
         af:2b:1e:e2:df:53:72:ee:0f:ce:09:85:10:2e:be:60:c6:ea:
         9c:4b:c7:9f:03:88:45:46:56:ae:e4:d8:e6:11:2f:79:e2:6a:
         ad:e8:00:1f:ef:0c:ca:f5:ef:24:0a:55:00:45:4f:42:4a:60:
         3b:f7:f4:d6:4e:e3:6f:1e:ea:85:e3:67:8b:a4:8f:84:8c:29:
         ad:b1:b2:9f:c6:2c:46:31:23:f4:13:6e:98:04:a0:d1:20:51:
         c6:35:12:47:d3:da:c5:4b:e2:f4:e6:ef:d4:de:fc:27:15:a6:
         b7:36:03:ff:b5:78:56:4b:50:8c:cf:bb:13:6a:eb:84:a7:b5:
         2f:e5:20:47:8d:fc:0a:bc:fe:e8:5d:25:9f:a3:78:0a:98:09:
         b2:06:e8:e4:f2:16:74:87:7b:e6:1a:fb:83:a6:88:d5:de:76:
         36:56:4b:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:57:29 2026 by rpki-client