Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
File:                     9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft (raw, json)
Hash identifier:          GvmiXDEVtLiiWi/Y8CF1xnLBQ2lHQIOkWke5/08nRpA=
Subject key identifier:   A3:2B:92:73:D4:55:5B:9D:93:9D:49:C9:44:B1:BF:A2:7C:F7:4F:23
Authority key identifier: F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E
Certificate issuer:       /CN=A916EBBB/serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
Certificate serial:       0CC3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
Manifest number:          0CB8
Signing time:             Tue 12 May 2026 18:31:15 +0000
Manifest this update:     Tue 12 May 2026 18:31:15 +0000
Manifest next update:     Tue 19 May 2026 18:31:15 +0000
Files and hashes:         1: 9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl (hash: jMY4sn+pHObFMlH88AHPIngPhEPHzxUlhfqSKCcfI7k=)
                          2: F7ABC66A114211EA8A4B0685C4F9AE02.roa (hash: 0Hmli8aWk0dgV3lUCCWGP1GJukUHiPUwNOV3a1obzec=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl
                          rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:31:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3267 (0xcc3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A916EBBB, serialNumber=F654E241C144618ABA319DABACBDEA48C4F3C74E
        Validity
            Not Before: May 12 18:31:15 2026 GMT
            Not After : May 19 18:31:15 2026 GMT
        Subject: CN=6a0371f3-06af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4f:ee:a6:48:bd:ba:b7:94:65:20:97:0d:78:
                    c5:e1:59:7a:3f:9d:4f:c0:68:2e:0a:d2:b8:03:4f:
                    68:54:e3:fb:56:84:91:59:5a:13:92:b0:5f:02:d9:
                    eb:a6:a6:8c:eb:60:a1:18:40:46:5e:5b:9d:b2:23:
                    cf:17:00:51:e7:08:d6:51:70:84:b0:46:91:04:44:
                    a5:e1:75:9c:6e:cb:e1:05:12:9c:45:80:e9:d5:cb:
                    5b:ea:58:03:8f:63:24:d5:00:2e:ec:a6:79:72:94:
                    1e:33:82:9d:e9:17:38:78:20:60:f7:fa:f4:c2:0d:
                    d1:4e:58:71:08:e2:bb:a1:a2:75:e0:c9:90:d1:a0:
                    bf:be:eb:62:44:85:ac:1f:9c:23:db:1d:ac:08:b1:
                    b0:6b:9a:c8:63:bf:ed:28:82:a9:ed:5d:33:37:b2:
                    a8:60:43:c2:8c:ab:12:12:3e:5f:7b:70:fd:77:f5:
                    78:10:1b:23:e5:3c:61:52:89:b8:b0:8a:48:b3:d9:
                    5b:b3:67:41:65:70:c7:14:0f:b7:9f:6d:ba:11:0b:
                    e4:a1:d7:da:9e:cd:8b:72:5b:b6:b3:57:0c:e2:68:
                    15:a9:48:3c:aa:61:73:2f:03:e0:a7:53:1e:4f:65:
                    23:1d:ea:38:6b:d1:27:e2:e6:7f:8a:a3:0f:f2:3c:
                    08:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:2B:92:73:D4:55:5B:9D:93:9D:49:C9:44:B1:BF:A2:7C:F7:4F:23
            X509v3 Authority Key Identifier:
                keyid:F6:54:E2:41:C1:44:61:8A:BA:31:9D:AB:AC:BD:EA:48:C4:F3:C7:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9lTiQcFEYYq6MZ2rrL3qSMTzx04.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A916EBBB/9348271E114111EA83A49282C4F9AE02/9lTiQcFEYYq6MZ2rrL3qSMTzx04.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:ce:d9:6f:bf:6d:44:55:cf:ed:f8:67:d6:49:e8:c6:a2:d4:
         1e:eb:de:1d:7e:6a:01:92:30:91:35:db:de:12:4b:85:9e:af:
         ec:a8:b5:ab:61:71:0e:3f:75:70:80:98:15:a7:f6:54:f8:4d:
         4f:ac:9f:0c:04:d2:56:bc:09:6e:72:cd:76:8a:4a:b0:ee:4d:
         a0:8f:d9:75:30:5c:17:d7:5b:9f:24:01:d1:37:4d:3b:1a:e4:
         a8:91:76:bd:fc:8a:63:dc:ef:af:1d:49:41:6a:50:24:ba:f8:
         5b:91:04:56:9c:10:e4:c5:b9:82:31:82:b4:44:a0:c1:f6:aa:
         50:06:6e:da:54:03:f5:e6:8d:b6:da:3a:16:30:9c:18:57:5f:
         e7:ad:01:e9:94:43:79:2d:b1:0d:60:87:63:d3:b5:7a:5f:d1:
         50:78:39:1b:4f:fa:e5:6b:36:72:4f:a1:a0:aa:37:ea:61:6e:
         79:fe:e7:71:45:a3:91:e3:5f:f1:bc:c1:07:24:35:da:8e:40:
         bf:7f:05:0a:83:53:a3:f2:de:55:32:60:eb:11:19:a4:71:c7:
         fb:e4:e3:e8:44:84:5f:7e:be:2f:16:f4:4f:68:43:bc:87:21:
         f4:56:60:cb:80:a2:c7:14:d2:e5:24:cd:ba:1b:c6:4f:26:c1:
         d2:6f:19:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:40:24 2026 by rpki-client