Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
File:                     8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft (raw, json)
Hash identifier:          JZOzdjBarnnxS16eIOAyra7ZMm6xNZox5kHrDvPnXZM=
Subject key identifier:   21:75:34:CA:51:E4:E9:C2:47:E6:3C:D3:C0:9D:82:61:7E:42:CB:09
Authority key identifier: F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A
Certificate issuer:       /CN=A91709F5/serialNumber=F12895792117E90703A0020F4F359831DB2F937A
Certificate serial:       F3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
Manifest number:          F0
Signing time:             Mon 11 May 2026 06:27:41 +0000
Manifest this update:     Mon 11 May 2026 06:27:40 +0000
Manifest next update:     Mon 18 May 2026 06:27:40 +0000
Files and hashes:         1: 8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl (hash: 2mHUCs0aCC9mzjbmn2Ncm8Uv5uPFjBCufq9o7gjtdXk=)
                          2: A42925E8DFDA11EFB5E94125C4F9AE02.roa (hash: OFV7TAeYTwMYk3v0VLj9doRdmglLiVsQ3XZ6eBJ4Cug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl
                          rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:27:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 243 (0xf3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91709F5, serialNumber=F12895792117E90703A0020F4F359831DB2F937A
        Validity
            Not Before: May 11 06:27:40 2026 GMT
            Not After : May 18 06:27:40 2026 GMT
        Subject: CN=6a0176dc-f76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:61:e8:e8:36:0c:da:0e:30:87:e0:af:20:1c:
                    f5:df:35:db:03:30:16:ab:8e:ca:dd:1e:87:a9:15:
                    e4:2a:74:fd:73:5a:4b:dd:43:68:fa:b6:56:9c:cc:
                    d7:95:cf:ec:8d:2b:86:6a:14:6b:b3:32:16:9a:0e:
                    4f:07:65:38:3d:cb:a8:83:d6:78:8f:c9:51:92:ec:
                    37:9d:4f:43:ac:ef:ce:c2:a5:56:0f:63:25:e6:de:
                    63:82:50:98:95:c7:34:ea:2e:cd:54:42:17:f6:68:
                    1d:3f:7a:af:98:2a:55:5a:16:ac:70:1e:3b:91:21:
                    55:8f:9c:a0:b1:5c:f0:38:ba:0b:2b:22:09:fa:ff:
                    cc:5a:58:20:b0:56:22:ce:d5:3b:5d:59:47:37:76:
                    0e:38:11:57:c0:89:d7:dd:ef:7b:a9:a0:c7:25:80:
                    55:26:3b:0b:29:5d:cd:89:2b:89:58:80:73:3e:bc:
                    3a:ae:6c:f6:4d:34:7d:88:48:8e:20:77:a6:a6:4b:
                    41:6a:94:4e:8f:70:03:58:9a:9e:73:9d:2c:ad:78:
                    e0:f2:a6:d5:9d:df:9b:40:42:39:4e:5e:7f:b0:15:
                    cc:e2:50:39:e6:ac:2b:d9:f1:c1:d2:76:ff:d0:0c:
                    0a:0f:69:f8:fc:4f:3d:6e:4b:ac:42:22:0a:32:af:
                    70:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:75:34:CA:51:E4:E9:C2:47:E6:3C:D3:C0:9D:82:61:7E:42:CB:09
            X509v3 Authority Key Identifier:
                keyid:F1:28:95:79:21:17:E9:07:03:A0:02:0F:4F:35:98:31:DB:2F:93:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8SiVeSEX6QcDoAIPTzWYMdsvk3o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91709F5/3283E7D4DFDA11EF8B478624C4F9AE02/8SiVeSEX6QcDoAIPTzWYMdsvk3o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         51:bb:2a:03:8e:d0:e8:13:c4:5f:08:d5:17:bd:f6:71:8f:37:
         0f:c6:77:e4:6f:67:57:61:f3:47:17:7b:f5:22:15:5c:8b:02:
         d3:c1:88:3d:15:1a:e7:b3:79:f2:79:f2:b4:8b:51:fb:8c:30:
         bb:d3:e2:9a:bf:26:bf:36:6d:04:d6:4d:64:7f:5b:50:e7:bc:
         04:b6:e1:22:e2:e3:6e:a1:34:17:b4:12:ee:3e:4e:80:92:58:
         d0:af:c7:0f:31:d5:b6:27:e2:c1:5d:5e:77:2e:9a:bc:4e:11:
         53:e1:b0:70:dd:57:5f:5f:0b:9e:5f:9f:8b:4c:06:5c:c5:61:
         c7:39:3a:aa:f5:88:15:39:25:7e:54:81:88:31:e2:41:4c:b0:
         eb:94:55:6b:5f:46:03:e6:8c:79:e4:30:a1:8f:88:8b:06:e1:
         3b:3d:4b:f7:ea:cd:70:c4:8b:2d:a5:f8:92:7d:78:82:3c:25:
         a0:bb:47:48:42:09:cb:60:f5:b1:93:29:e7:af:00:61:99:36:
         41:7d:2f:79:02:e4:8d:de:4f:e6:81:06:2b:28:5e:b3:ee:01:
         48:64:43:41:b2:8a:7c:f9:b7:3b:0f:da:a8:e5:19:84:65:ff:
         35:f0:de:7a:83:b8:26:8c:ea:c0:76:21:df:0d:05:88:64:d6:
         82:27:34:b4
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAPMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NzA5RjUxMTAvBgNVBAUTKEYxMjg5NTc5MjExN0U5MDcwM0EwMDIwRjRGMzU5ODMx
REIyRjkzN0EwHhcNMjYwNTExMDYyNzQwWhcNMjYwNTE4MDYyNzQwWjAYMRYwFAYD
VQQDEw02YTAxNzZkYy1mNzZjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvWHo6DYM2g4wh+CvIBz13zXbAzAWq47K3R6HqRXkKnT9c1pL3UNo+rZWnMzX
lc/sjSuGahRrszIWmg5PB2U4Pcuog9Z4j8lRkuw3nU9DrO/OwqVWD2Ml5t5jglCY
lcc06i7NVEIX9mgdP3qvmCpVWhascB47kSFVj5ygsVzwOLoLKyIJ+v/MWlggsFYi
ztU7XVlHN3YOOBFXwInX3e97qaDHJYBVJjsLKV3NiSuJWIBzPrw6rmz2TTR9iEiO
IHempktBapROj3ADWJqec50srXjg8qbVnd+bQEI5Tl5/sBXM4lA55qwr2fHB0nb/
0AwKD2n4/E89bkusQiIKMq9wmQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCF1NMpR
5OnCR+Y808CdgmF+QssJMB8GA1UdIwQYMBaAFPEolXkhF+kHA6ACD081mDHbL5N6
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3MDlGNS8zMjgzRTdENERG
REExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZRY0RvQUlQVHpXWU1kc3Zr
M28uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyLzhTaVZlU0VYNlFjRG9BSVBUeldZTWRzdmszby5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
MDlGNS8zMjgzRTdENERGREExMUVGOEI0Nzg2MjRDNEY5QUUwMi84U2lWZVNFWDZR
Y0RvQUlQVHpXWU1kc3ZrM28ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAUbsqA47Q6BPEXwjVF732cY83D8Z35G9nV2HzRxd79SIVXIsC08GIPRUa57N5
8nnytItR+4wwu9Pimr8mvzZtBNZNZH9bUOe8BLbhIuLjbqE0F7QS7j5OgJJY0K/H
DzHVtifiwV1edy6avE4RU+GwcN1XX18Lnl+fi0wGXMVhxzk6qvWIFTklflSBiDHi
QUyw65RVa19GA+aMeeQwoY+IiwbhOz1L9+rNcMSLLaX4kn14gjwloLtHSEIJy2D1
sZMp568AYZk2QX0veQLkjd5P5oEGKyhes+4BSGRDQbKKfPm3Ow/aqOUZhGX/NfDe
eoO4JozqwHYh3w0FiGTWgic0tA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:31:07 2026 by rpki-client