Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
File:                     G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft (raw, json)
Hash identifier:          xSI4W0iGK1MBaAshbKEJVgwqkBc9BlffQCaeG6L0Dkc=
Subject key identifier:   CE:26:AD:DC:FB:38:CC:D8:9F:48:B4:C2:7F:51:58:B4:71:11:2E:67
Authority key identifier: 1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61
Certificate issuer:       /CN=A9168F50/serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
Manifest number:          58
Signing time:             Mon 11 May 2026 08:18:43 +0000
Manifest this update:     Mon 11 May 2026 08:18:43 +0000
Manifest next update:     Mon 18 May 2026 08:18:43 +0000
Files and hashes:         1: G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl (hash: azBGMrkaPNb51GUG5lHPbZ0mAPm9x/jc4T+gvDc7ic8=)
                          2: 8F62775EC9B311F08EBFD366C4F9AE02.roa (hash: IhKjrimtkW5GZgmr5nVxZh5rfh7SBgszAIZRuKiFWrU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl
                          rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:18:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9168F50, serialNumber=1BEA38114E9EE82E4064EB3BF91328086C357B61
        Validity
            Not Before: May 11 08:18:43 2026 GMT
            Not After : May 18 08:18:43 2026 GMT
        Subject: CN=6a0190e3-c5f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:ec:36:c5:f8:22:5f:fa:91:04:dc:1d:07:c0:
                    35:f0:c2:b9:7c:41:47:9e:4f:a5:94:b4:41:4f:fc:
                    43:b4:ca:91:52:ba:af:37:bc:a1:af:11:06:71:37:
                    39:0b:55:79:0e:58:28:04:ac:69:45:6a:0a:da:c9:
                    4d:3b:3e:ba:f5:1d:ac:6e:87:54:c3:63:10:7a:7d:
                    14:0b:da:cd:30:46:5e:4e:60:21:35:9d:0d:5b:e9:
                    8c:2e:79:f2:3c:cd:45:87:77:ee:3c:ea:c9:7c:92:
                    bb:a4:75:f7:c2:10:e0:a3:73:ad:e5:19:61:33:77:
                    0a:42:c2:de:3e:18:70:8a:7b:25:1b:93:70:df:a5:
                    11:ff:92:3e:90:03:20:6b:00:95:a9:cd:94:69:c9:
                    23:d3:34:0c:6c:a7:a7:85:5f:da:b1:54:d6:f1:00:
                    ee:08:8a:31:89:5c:84:3b:7f:0e:d5:eb:e1:24:4b:
                    37:98:a2:ff:07:34:73:57:f6:5b:e2:fc:26:60:12:
                    cc:e9:07:1f:a4:8e:7a:45:82:09:62:a7:c9:f7:a5:
                    30:6d:c1:b5:89:b0:34:e1:b7:c5:01:ec:06:79:1e:
                    72:f8:01:f0:28:cc:96:20:6d:93:44:83:08:f8:88:
                    4f:8a:57:c2:6a:fe:7d:02:7d:5e:48:28:9c:8a:aa:
                    da:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:26:AD:DC:FB:38:CC:D8:9F:48:B4:C2:7F:51:58:B4:71:11:2E:67
            X509v3 Authority Key Identifier:
                keyid:1B:EA:38:11:4E:9E:E8:2E:40:64:EB:3B:F9:13:28:08:6C:35:7B:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/G-o4EU6e6C5AZOs7-RMoCGw1e2E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9168F50/033ECD72C9B311F0AD63FC78C4F9AE02/G-o4EU6e6C5AZOs7-RMoCGw1e2E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1b:45:6e:65:53:1d:61:7e:1f:fb:45:54:c2:fd:28:2f:04:a9:
         a7:7a:63:a8:8f:c4:36:93:b7:9f:bc:a9:d1:07:75:2b:1e:dd:
         e1:79:ce:f1:09:38:a8:09:97:d8:e7:fa:7c:6b:7c:f3:e1:cb:
         1a:6f:e2:45:78:f8:65:ca:24:df:63:51:ab:2e:19:42:55:85:
         34:45:a9:0a:2e:f5:0f:ff:1d:77:2d:3c:db:12:b7:57:27:78:
         a4:49:b2:8f:18:b2:27:da:29:17:68:fd:0e:76:8a:3f:5c:8e:
         a0:74:6d:12:e7:71:50:54:cc:21:26:31:53:5d:86:b9:c6:82:
         fb:28:1f:62:88:d9:01:b1:ba:84:f1:9d:f5:0e:16:a1:43:00:
         4b:8b:4b:ed:50:54:91:bc:2f:5c:75:bc:1f:2e:fa:05:3d:11:
         73:ce:07:9e:e4:93:65:e2:2c:7a:08:cc:68:5c:8e:c2:38:af:
         c5:a2:ed:43:f6:97:85:7e:e8:0b:a9:ad:cf:f7:78:7e:84:c2:
         b0:00:90:56:52:6f:b0:a0:da:73:80:90:1d:92:52:f3:1b:85:
         20:f9:27:9c:50:f4:33:cb:25:b4:12:13:cd:a8:ac:48:46:9a:
         54:cc:81:40:56:50:8e:d1:ff:86:c4:cd:c3:89:c8:87:5c:3f:
         38:da:ce:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:46:36 2026 by rpki-client