Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
File:                     mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft (raw, json)
Hash identifier:          oToRvdhrc/c0rYe9hLmlF5HA61DV9nuEveRIGM/igCI=
Subject key identifier:   1D:BA:7A:85:23:DE:0D:2F:53:BB:DB:B9:4B:F0:3B:59:33:74:47:48
Authority key identifier: 99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A
Certificate issuer:       /CN=A9167B50/serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
Certificate serial:       35CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
Manifest number:          3580
Signing time:             Tue 12 May 2026 14:41:40 +0000
Manifest this update:     Tue 12 May 2026 14:41:40 +0000
Manifest next update:     Tue 19 May 2026 14:41:40 +0000
Files and hashes:         1: mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl (hash: BTzfavSIFXmXJnJXk7+Gj4/ipBz33rx7xnEPooLuPVY=)
                          2: 9322B46CAEB111EA8EFC2878C4F9AE02.roa (hash: yTJcTl5edJ4kNv98CPAK/m1H2g/dq/a73IywMpJw5X0=)
                          3: B35C646A52E211EAAF44AE23C4F9AE02.roa (hash: Pbz8SUu4Fa6QitdUmbJG9+WkFTgMMNMW+GHyYn+iC2M=)
                          4: 31745126CD1811EC917CB819C4F9AE02.roa (hash: G8AuTu7DkmkKWVjhwU/vCSBI+wvMCkDDSTrsyLfGoH0=)
                          5: 925D8646772A11EBAE8A8181C4F9AE02.roa (hash: GHAiy1U9rxwuTHVrOO4W5yr6dZrHk1J4DMJnsgMqY/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl
                          rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:41:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13770 (0x35ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9167B50, serialNumber=991B3F17084F76F12F9F0509D597F0FFECA04B4A
        Validity
            Not Before: May 12 14:41:40 2026 GMT
            Not After : May 19 14:41:40 2026 GMT
        Subject: CN=6a033c24-0c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:01:de:07:1e:fa:91:3d:73:1a:eb:af:e5:6c:
                    b9:77:4c:91:40:42:7f:6c:1d:d6:e6:9a:6b:b5:ba:
                    bc:e8:f0:73:bb:e1:20:0b:4b:af:30:29:cc:19:0a:
                    8b:81:96:08:a8:b9:3e:2e:2b:04:0d:21:6c:8e:fd:
                    9e:64:bd:47:45:5f:c8:fa:11:ef:36:b6:ad:ea:f6:
                    97:20:fd:ed:96:50:47:ae:c3:1e:0c:65:04:e5:8e:
                    7f:76:d7:7e:71:9d:72:61:20:30:96:f5:f6:9c:dd:
                    43:44:e6:9c:29:53:87:f4:3f:31:fe:5e:b1:35:48:
                    50:bf:41:22:eb:c7:45:44:c6:55:fa:25:17:e6:a5:
                    77:05:09:c6:f0:63:b6:2d:6f:42:7a:d9:8b:87:53:
                    c9:cd:96:02:83:1c:5f:c4:7f:2a:2a:41:3a:78:7b:
                    47:23:57:2b:7a:c3:c7:97:57:e0:ee:75:5a:eb:c2:
                    f4:ad:89:ac:20:0e:0b:86:31:13:fd:6b:eb:43:55:
                    63:b3:e9:df:f1:14:69:c2:2c:12:e5:02:05:50:42:
                    06:73:d0:60:41:f3:3e:62:96:a1:7b:a2:8c:fc:f3:
                    3e:a3:29:e1:09:c3:38:8a:e9:f6:27:a8:d0:8d:c3:
                    2b:c8:d8:46:f0:fa:65:25:35:a9:db:c2:45:6a:00:
                    c2:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:BA:7A:85:23:DE:0D:2F:53:BB:DB:B9:4B:F0:3B:59:33:74:47:48
            X509v3 Authority Key Identifier:
                keyid:99:1B:3F:17:08:4F:76:F1:2F:9F:05:09:D5:97:F0:FF:EC:A0:4B:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9167B50/9D1305C81D8F11E2A02BCDEE08B02CD2/mRs_FwhPdvEvnwUJ1Zfw_-ygS0o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:6a:72:14:62:00:ef:a8:17:dc:3b:49:c2:32:f1:6e:96:45:
         4a:c0:93:98:ea:68:a7:6e:fd:4d:04:bb:01:da:0c:5f:01:39:
         0e:94:ab:8e:4b:53:f1:9d:dd:42:d9:ee:c2:07:bf:b3:a5:c0:
         ea:2b:d4:85:ce:60:a0:6e:81:90:13:11:e9:7e:69:ed:7b:55:
         6c:4b:b7:b1:ed:8a:8c:b6:39:35:a2:84:74:41:10:fc:94:7b:
         35:47:50:82:fd:7f:b1:de:4b:85:e2:e5:e5:e8:d4:9e:00:9f:
         29:e3:b2:ed:ad:1b:ec:19:67:87:bf:72:e2:79:ed:40:29:52:
         9b:4d:14:6f:9e:28:57:76:90:8f:65:d0:24:5b:27:b0:0e:19:
         75:9c:3b:81:64:30:6e:ac:1a:5e:32:a2:c1:a5:e6:e6:d8:38:
         f7:d2:f6:87:8c:5f:a0:34:04:cd:7e:de:88:6d:19:dc:74:ff:
         d5:f2:0a:bb:a6:1c:12:91:98:cc:af:d8:ae:08:28:41:87:b1:
         93:b9:77:79:47:9d:3b:98:bb:b5:fc:b7:2f:f4:49:ad:16:2f:
         5e:aa:a2:a1:d8:80:dc:f5:c1:83:1f:96:d7:43:e6:f2:7b:94:
         34:24:d7:54:7d:30:e8:dd:bb:e3:cb:52:59:bc:3d:94:20:10:
         44:b2:c9:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:05:31 2026 by rpki-client