Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
File:                     sQtPQ0P6rissTT3WYGS-km7HTJ8.mft (raw, json)
Hash identifier:          u/2rXK6qQiCB7oct3qiNS8n7rjjvLQmp9zh5PB9kTqk=
Subject key identifier:   8E:0C:BA:BA:A3:7D:57:D4:0D:93:AF:07:B3:FA:1C:F8:00:C3:0B:19
Authority key identifier: B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F
Certificate issuer:       /CN=A915CE2F/serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
Certificate serial:       0293
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
Manifest number:          028C
Signing time:             Wed 13 May 2026 01:53:08 +0000
Manifest this update:     Wed 13 May 2026 01:53:08 +0000
Manifest next update:     Wed 20 May 2026 01:53:08 +0000
Files and hashes:         1: sQtPQ0P6rissTT3WYGS-km7HTJ8.crl (hash: d2TVCaUeislIBI9lwqwM3bJFrrX0RMB21h+qfyMCrzE=)
                          2: 670087C4EEF011ED9C693D31C4F9AE02.roa (hash: 9EODo3VTRqYwzjAsn5kOJ1RRcS5qGi8SpwuOaYpySHc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl
                          rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:53:07 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 659 (0x293)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915CE2F, serialNumber=B10B4F4343FAAE2B2C4D3DD66064BE926EC74C9F
        Validity
            Not Before: May 13 01:53:08 2026 GMT
            Not After : May 20 01:53:08 2026 GMT
        Subject: CN=6a03d984-383c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:63:16:9a:94:d0:d9:29:2b:34:97:cd:cf:ba:
                    d3:4a:67:d7:b6:2d:bf:5f:1a:a8:89:48:87:a6:20:
                    15:97:ac:b7:16:d1:3f:b3:0d:f0:0a:58:81:2e:ee:
                    9f:5a:c2:ae:c8:1e:ff:8a:57:70:cb:e7:e6:a9:7e:
                    7c:11:a0:55:98:38:4a:39:a2:11:64:76:09:03:65:
                    57:a7:c0:67:c2:3c:58:97:86:4b:a3:3c:9d:23:c7:
                    83:28:c1:71:81:ed:19:d8:0b:25:2c:74:0b:0d:c5:
                    65:c4:2c:5a:62:1e:85:29:d7:70:39:38:86:20:5d:
                    eb:d9:1c:ac:ab:27:3e:ff:32:a9:28:ec:8a:55:0b:
                    c2:65:87:56:cc:83:fa:26:7d:90:37:4c:a9:c2:33:
                    ae:74:9d:ba:c1:b0:f8:4a:54:42:8e:e1:2a:07:13:
                    7d:02:7e:ec:fb:e1:6a:4d:24:a7:ad:11:1f:99:8c:
                    85:0a:b5:1b:b7:40:32:66:ad:c4:e4:b0:d4:43:67:
                    3e:f7:7a:f9:99:f6:d9:21:88:b1:59:65:05:6d:13:
                    d2:ce:be:e6:8a:33:47:74:ff:c9:de:4d:f6:82:dd:
                    c5:f3:03:de:43:60:b9:39:05:70:00:0c:e9:62:3d:
                    69:ef:92:74:f9:6b:be:29:f2:9e:96:95:a1:32:a5:
                    6e:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:BA:BA:A3:7D:57:D4:0D:93:AF:07:B3:FA:1C:F8:00:C3:0B:19
            X509v3 Authority Key Identifier:
                keyid:B1:0B:4F:43:43:FA:AE:2B:2C:4D:3D:D6:60:64:BE:92:6E:C7:4C:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sQtPQ0P6rissTT3WYGS-km7HTJ8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915CE2F/0BDEA52870E311EDB577043FC4F9AE02/sQtPQ0P6rissTT3WYGS-km7HTJ8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:e9:d7:a3:ac:da:5f:3e:01:69:ec:c6:cb:b2:f6:e4:f0:
         90:72:35:6f:ee:31:36:e3:1a:67:e3:23:ad:3f:48:ad:4a:08:
         cf:9c:1f:1d:88:9a:7b:c9:97:3b:63:22:00:1d:7c:e0:40:63:
         b3:0c:0d:99:a1:5f:b7:d9:02:a4:24:0d:01:8c:f0:61:28:b2:
         7a:52:7c:07:67:ab:75:7f:77:a6:a5:63:61:83:7b:a7:66:bc:
         55:a7:75:e3:ff:28:76:2c:b8:70:9d:34:f3:76:14:84:65:e4:
         ba:2c:aa:de:12:2b:6a:23:9e:09:69:d0:ea:ce:46:31:df:dc:
         10:1b:53:71:e2:bf:2e:2b:18:48:de:58:c1:a1:08:4a:82:e7:
         00:67:fa:af:c1:d5:95:11:6a:37:7e:60:bc:76:ce:40:6b:67:
         b1:b6:5a:69:31:92:44:87:7f:83:29:13:8d:c9:b7:09:79:bb:
         4e:b9:a5:d9:9d:8d:8e:f8:ca:79:93:9e:6c:3c:02:be:75:7b:
         1a:96:f8:55:bf:7f:30:01:5b:f2:80:3f:e3:ee:7d:11:7a:b2:
         17:cb:b6:f2:d3:ce:02:a4:7b:81:38:73:0c:6f:23:fc:cf:9b:
         74:73:e5:63:7c:82:16:2a:29:7d:d1:23:e1:c2:06:2b:5f:4b:
         de:55:db:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:20:11 2026 by rpki-client