Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
File:                     Vj8ylI68GzkPMqCqPzYUeFr858I.mft (raw, json)
Hash identifier:          dHiLvOUrSfQ0jSj7bna6ZStOLV+/+J9F8jQyrBOBN7Q=
Subject key identifier:   91:D0:05:C2:B1:69:ED:11:49:D4:6F:8E:49:39:E8:EB:67:8B:7F:B9
Authority key identifier: 56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2
Certificate issuer:       /CN=A917AC8C/serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
Certificate serial:       038D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
Manifest number:          0381
Signing time:             Wed 13 May 2026 00:55:16 +0000
Manifest this update:     Wed 13 May 2026 00:55:16 +0000
Manifest next update:     Wed 20 May 2026 00:55:16 +0000
Files and hashes:         1: Vj8ylI68GzkPMqCqPzYUeFr858I.crl (hash: ZaNGzlwpmuFCK/3qKnsg+SnkqI9pvI0y5QLSiE3c/zk=)
                          2: EB756434EBBD11ECB3DAFE39C4F9AE02.roa (hash: FK5fCuILvyoIFzPe0XnaqrZMxWMUwXNRaQN+QFBeZ2c=)
                          3: EA5EB99CEBBD11ECB3DAFE39C4F9AE02.roa (hash: H3rXNLGQKH+kqsDl65goID5SSl1RqTvP0hsRSPAvHF0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl
                          rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:55:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 909 (0x38d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AC8C, serialNumber=563F32948EBC1B390F32A0AA3F3614785AFCE7C2
        Validity
            Not Before: May 13 00:55:16 2026 GMT
            Not After : May 20 00:55:16 2026 GMT
        Subject: CN=6a03cbf4-9dfc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:3a:21:69:40:15:25:7f:2d:bd:d6:e4:07:c6:
                    f9:a3:48:62:3e:9c:61:01:3e:73:d7:7a:2d:9c:d8:
                    99:a8:40:b7:c3:ad:75:6b:79:22:f6:f3:19:c6:dd:
                    d9:9d:c5:06:f9:dc:aa:c0:ba:dc:aa:3f:2f:a8:ac:
                    35:6f:ed:b9:f9:4d:02:89:47:e2:22:dd:5a:d8:28:
                    5b:32:74:ba:c5:47:fb:32:7e:33:6d:79:c5:ca:19:
                    4a:b8:ca:5f:96:a8:30:cc:21:ae:04:21:48:6e:5e:
                    10:ba:5b:a9:92:56:f0:5a:f1:be:4a:92:c0:b5:2c:
                    c0:5a:00:df:94:f6:f6:0e:83:77:ef:e6:3f:71:f9:
                    cf:27:4b:cc:a3:4d:b7:a5:f8:b1:c3:ed:c3:47:84:
                    e1:53:0b:8d:57:12:4f:4c:44:7e:55:d0:15:e9:db:
                    d3:97:55:56:58:4c:33:03:13:14:ae:1e:28:8c:73:
                    5a:92:25:29:3f:3e:f7:28:7c:98:da:ea:63:7f:d2:
                    14:97:3e:4b:8f:82:cc:71:03:5e:7c:b5:02:fa:4c:
                    5f:47:a8:00:0c:ba:81:02:3c:86:f1:aa:7f:3a:9f:
                    83:59:74:c1:dc:43:49:78:f5:6d:6c:3d:d5:45:dc:
                    77:78:bd:63:de:92:10:33:b4:a2:18:6a:20:d3:bf:
                    53:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D0:05:C2:B1:69:ED:11:49:D4:6F:8E:49:39:E8:EB:67:8B:7F:B9
            X509v3 Authority Key Identifier:
                keyid:56:3F:32:94:8E:BC:1B:39:0F:32:A0:AA:3F:36:14:78:5A:FC:E7:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Vj8ylI68GzkPMqCqPzYUeFr858I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AC8C/89966DCAEBB911EC99E5610EC4F9AE02/Vj8ylI68GzkPMqCqPzYUeFr858I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7f:02:0c:48:fd:c3:cb:47:cc:8f:a1:32:88:b9:72:03:e2:ce:
         6a:97:31:03:81:a3:08:7f:61:57:a1:e6:0e:5c:9e:f5:d0:ff:
         47:98:e6:dd:de:68:42:62:ce:5b:21:72:cc:ce:9f:ec:3d:a1:
         37:4a:32:45:5b:60:ef:ce:f7:f8:bb:56:3a:8b:bd:41:05:a1:
         df:00:6a:05:cd:43:9b:46:8a:06:03:15:01:56:ea:76:3c:fd:
         b6:6c:5c:de:97:18:a9:43:6c:6f:98:9c:e4:9e:84:da:95:85:
         dd:b6:6b:3a:8a:00:42:1b:73:89:91:95:5b:7d:50:c3:cc:3d:
         23:9a:1a:d7:3e:c9:2c:33:32:84:91:b7:d0:30:ec:5f:e0:aa:
         24:f9:a5:cd:d8:27:81:b9:de:b4:e7:10:64:6a:e5:0c:f0:eb:
         7c:2a:26:9f:f0:ba:89:4c:70:ec:33:b2:4a:69:6e:c8:3c:62:
         8e:ea:38:70:ab:54:d2:3d:44:f4:da:23:da:ad:cd:c9:da:03:
         dd:64:09:8b:1a:10:61:70:f6:32:a2:2f:d2:e0:88:5a:af:af:
         3d:f9:b8:c3:6b:4d:cb:2a:70:79:69:a2:f0:cf:93:4c:e0:dc:
         c4:dd:8a:dd:0b:5b:50:64:db:8c:55:9a:d9:16:ad:f1:a9:b2:
         ea:f5:2e:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:51:56 2026 by rpki-client