Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
File:                     AZcEvn5KzguhIRSzKOsCBxHvTq8.mft (raw, json)
Hash identifier:          LKkncDSi7R77bMABH8rnckoI21hk/qcrN/+7PFXOa68=
Subject key identifier:   EF:17:BF:35:5C:87:86:68:41:C7:B0:7F:AC:D7:66:42:DB:68:AA:45
Authority key identifier: 01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF
Certificate issuer:       /CN=A91728E2/serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
Certificate serial:       02A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
Manifest number:          02A0
Signing time:             Wed 13 May 2026 01:40:20 +0000
Manifest this update:     Wed 13 May 2026 01:40:20 +0000
Manifest next update:     Wed 20 May 2026 01:40:20 +0000
Files and hashes:         1: AZcEvn5KzguhIRSzKOsCBxHvTq8.crl (hash: hhmfai/LMamqLRJw4fAj8J7YExnSGdt6zZyxodt5/7E=)
                          2: 85AEBA76504C11ED829F7D24C4F9AE02.roa (hash: LRYq0mPrjweqGJPSdcgLlt3nrjlK6fosCT9C7fklNuQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl
                          rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:40:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 679 (0x2a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91728E2, serialNumber=019704BE7E4ACE0BA12114B328EB020711EF4EAF
        Validity
            Not Before: May 13 01:40:20 2026 GMT
            Not After : May 20 01:40:20 2026 GMT
        Subject: CN=6a03d684-3e89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:43:66:fe:80:87:fa:12:a9:b6:20:91:b2:fc:
                    40:dd:e5:15:21:b0:dd:75:af:34:6f:bc:67:5d:50:
                    db:22:28:4c:81:7b:27:97:83:66:9a:ce:9d:72:c4:
                    11:1d:dd:6a:d0:9d:51:c2:b5:52:80:4f:04:c7:b7:
                    69:93:31:8e:e2:d8:b6:2c:f5:02:c8:ce:ac:60:8e:
                    7a:74:7d:c1:41:81:cb:48:96:2d:51:32:3b:ad:72:
                    e2:f8:ae:9a:7f:c8:02:06:82:df:54:21:0c:7e:67:
                    14:74:2f:0a:28:cf:40:e0:d0:42:15:e4:86:01:d9:
                    dc:83:8c:bb:14:10:2b:9d:2e:d3:72:b7:ab:d6:9d:
                    c6:2d:09:ec:13:10:0c:0d:c6:51:02:76:19:d3:c8:
                    a5:1d:e6:a2:a6:9d:28:35:d8:ec:4a:f9:fb:42:0d:
                    87:b1:13:9d:0e:c2:71:03:66:19:c5:fc:bd:a7:fb:
                    78:7e:cd:07:71:d0:fd:48:de:51:16:d5:a8:36:f5:
                    32:fd:c7:d5:4f:04:fd:7d:c3:8f:e8:a5:00:68:9d:
                    d8:91:a5:be:c8:bb:bf:97:57:72:ec:90:9c:1d:b7:
                    2e:a0:31:54:a6:3f:27:7f:60:d1:30:88:eb:b1:c5:
                    b9:13:0d:4a:09:05:49:36:69:94:6f:c0:59:cc:65:
                    19:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:17:BF:35:5C:87:86:68:41:C7:B0:7F:AC:D7:66:42:DB:68:AA:45
            X509v3 Authority Key Identifier:
                keyid:01:97:04:BE:7E:4A:CE:0B:A1:21:14:B3:28:EB:02:07:11:EF:4E:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AZcEvn5KzguhIRSzKOsCBxHvTq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91728E2/97013A4E504011ED8AECAA6FC4F9AE02/AZcEvn5KzguhIRSzKOsCBxHvTq8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         29:1c:a4:7d:ca:70:31:a8:75:72:89:4a:3a:a1:14:be:c2:a8:
         82:d5:ba:e3:4c:ac:39:5b:b9:94:3d:b9:a3:44:2a:ce:5b:68:
         dd:3b:0a:5f:e1:ab:57:6e:cd:5d:36:f7:0e:d7:58:30:e2:a3:
         4b:0f:a9:59:45:61:05:aa:e1:df:4b:97:45:35:19:89:c4:06:
         9a:f5:31:32:20:ec:20:8f:f7:af:39:0b:4c:8e:7d:d0:4f:9f:
         e3:87:db:f8:6d:02:4d:9d:04:dd:0d:cf:c4:b6:93:ac:23:b1:
         45:b7:29:18:42:d8:a9:2c:7a:9d:f8:56:ec:c9:bc:ec:99:a1:
         05:15:b8:a3:5a:87:b2:a8:c6:3d:59:e1:54:08:70:ea:48:30:
         58:99:6d:66:8e:b7:03:2f:e8:9f:c8:73:d7:71:07:14:a4:75:
         66:b9:05:3e:c5:55:82:02:98:84:62:c9:39:0c:26:c9:81:bb:
         c7:2d:b0:80:e7:68:cc:bc:fd:13:ef:a5:6c:45:99:e1:5e:4f:
         cd:08:d6:dd:d4:90:34:db:7e:83:7a:4f:b6:3e:0b:13:89:70:
         80:28:53:34:4e:e4:b0:b1:20:72:88:c5:ae:9c:07:2c:83:6e:
         31:9e:45:b1:4f:3f:19:9f:29:6b:94:32:d9:f8:11:c6:2f:d6:
         61:a1:ee:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 21:35:35 2026 by rpki-client