Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
File:                     1eU68RWZfH-juGVS-V9RFK80Bek.mft (raw, json)
Hash identifier:          zXLO+Wb5TZhqtKrfPRjrShaL9Znkq7Y04k2uLf3BVbc=
Subject key identifier:   1A:B8:F6:6D:42:58:4D:B7:51:6F:76:72:BB:EC:D7:EA:0B:1A:D0:10
Authority key identifier: D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9
Certificate issuer:       /CN=A916D0D2/serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
Certificate serial:       089F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
Manifest number:          0823
Signing time:             Tue 12 May 2026 21:25:10 +0000
Manifest this update:     Tue 12 May 2026 21:25:10 +0000
Manifest next update:     Tue 19 May 2026 21:25:10 +0000
Files and hashes:         1: 1eU68RWZfH-juGVS-V9RFK80Bek.crl (hash: fRsqJ8gdw4hVyFBh2xaKXUOgIYoElHWNeVn8uiL2jGA=)
                          2: 723DE3FCD66A11F0B3A3696C61D3641D.roa (hash: uNl8uI/Y06/jKDpoEQIF2O5Wgby+uee7OgBCJpMQCEM=)
                          3: 26FD4E0C705311EE8723E92AC4F9AE02.roa (hash: oCHezxKbqgIOpUes05U+r9qxPkrF4vvX3lRKLSI9mWE=)
                          4: BBAEFE90D3A111EEB1EBBB1EC4F9AE02.roa (hash: wkz0E3KQK2rolOPmgqS0wEV7h4PEskQ/F1Ta8MRQbyA=)
                          5: 9342050A074C11EEBF09517FC4F9AE02.roa (hash: AFldPYzskKofLD2xIzt86cc8IlYApoOmFnrOgjzA31o=)
                          6: F145A4846C3E11EEA0F26B63C4F9AE02.roa (hash: 7Yjv2D+C4s/JmkOjYex+PzbIpnr1u2qQg3ovSsYkAKA=)
                          7: 77CB8C6CBD9911ED86363B7AC4F9AE02.roa (hash: tJJ3ttdH7S3OYNjDPkqoa0z/UMLsdz/MnlboneFuOes=)
                          8: 113EFAA01CD311F183095B1A353D8C67.roa (hash: TAj7O8xjhTcdQgZnbEQZaQF/AhebpxuKlmmmr8dqDPA=)
                          9: 1B09C20A9CD711EE8D4B0835C4F9AE02.roa (hash: iuCuOVGGw7h8GRcGcuIJ1MRpIK+069nl7NuNXpL0hyk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl
                          rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2207 (0x89f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916D0D2, serialNumber=D5E53AF115997C7FA3B86552F95F5114AF3405E9
        Validity
            Not Before: May 12 21:25:10 2026 GMT
            Not After : May 19 21:25:10 2026 GMT
        Subject: CN=6a039ab6-8183
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7a:f1:2f:a8:e4:fc:71:f3:de:c8:46:5e:26:
                    e1:17:47:22:5c:c8:39:0b:bb:47:e8:8b:3b:3d:32:
                    5a:a9:57:ed:59:d2:56:9e:08:57:48:a1:87:00:b5:
                    c6:2b:1c:67:71:1e:a1:a0:64:f8:1e:31:82:ac:d8:
                    06:e3:69:6d:21:bd:e1:eb:0b:d7:b4:24:a0:6a:63:
                    6f:25:ab:be:9c:57:bf:9b:87:79:38:0d:a6:52:c4:
                    d2:c5:66:ae:58:25:ba:bd:d4:8c:f3:0e:c3:54:51:
                    13:7d:64:7e:b5:6a:c9:a6:a0:ed:38:70:03:f6:80:
                    13:1d:8e:74:b2:b6:e8:36:28:5e:c3:6b:80:76:d7:
                    34:ff:ca:eb:88:b9:22:ae:a5:66:39:ad:03:05:b2:
                    29:8c:2a:77:46:f1:87:07:9f:53:a3:92:8f:1b:14:
                    66:85:14:1e:77:a1:4b:fd:2d:bd:60:53:59:e9:67:
                    d0:fa:51:31:3d:a4:0a:c4:7f:ff:b2:33:7a:0d:4a:
                    97:b6:b5:3e:41:09:e9:87:f7:ab:1b:e5:39:6d:d2:
                    69:f5:5e:62:eb:7a:6e:4f:fd:f3:88:d1:63:42:4e:
                    5a:96:66:15:b4:78:f4:9a:64:a2:af:53:9e:9c:71:
                    9c:e2:17:3f:3e:75:1e:aa:28:42:06:63:77:35:37:
                    de:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B8:F6:6D:42:58:4D:B7:51:6F:76:72:BB:EC:D7:EA:0B:1A:D0:10
            X509v3 Authority Key Identifier:
                keyid:D5:E5:3A:F1:15:99:7C:7F:A3:B8:65:52:F9:5F:51:14:AF:34:05:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/1eU68RWZfH-juGVS-V9RFK80Bek.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916D0D2/5937D43E35AD11EB81EEAD12C4F9AE02/1eU68RWZfH-juGVS-V9RFK80Bek.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:a6:60:ba:a2:05:b1:02:a4:d6:e5:fd:4d:7b:f8:88:4d:16:
         46:8f:53:3e:ce:43:57:42:b4:3e:33:16:91:82:31:25:ca:ba:
         d3:31:13:81:7b:bd:a5:7c:eb:f5:f9:41:7a:71:dd:c9:c3:e6:
         89:6e:c9:94:79:da:29:22:7e:66:17:6c:dd:12:bc:41:8f:69:
         4a:a8:a3:88:f7:cd:27:3a:2d:4d:2f:d4:3e:71:c0:f2:33:92:
         31:9f:d7:0a:f3:0e:01:fb:80:6a:bc:a9:0a:78:e4:75:41:7a:
         37:ea:ee:61:c6:c0:25:e9:22:bc:9f:b0:e7:6c:79:e1:57:78:
         c4:3a:13:d7:0f:d4:00:e7:9e:80:42:48:27:77:87:75:8a:d2:
         3a:5f:c1:13:1b:61:1b:dd:ed:f1:75:d3:53:77:0d:88:b5:cd:
         f6:98:ee:57:3d:56:74:45:e0:43:a0:17:93:2c:46:2b:7c:f9:
         20:8f:1b:ba:40:60:a0:24:71:e2:b8:97:1e:e3:b3:24:00:da:
         d6:fd:c8:25:97:96:e7:3c:69:26:96:25:65:09:d4:d9:0a:22:
         20:41:8c:77:7e:94:e8:e8:90:39:72:ca:7a:ed:1a:09:94:f6:
         6a:f4:da:49:bf:00:47:20:f5:bb:18:7c:4a:c9:9c:06:0e:ce:
         12:2d:0e:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:07:51 2026 by rpki-client