Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          pzD8f/gn8l8RfFUKL9ItHv+LCamqXAmWgx5h5JwbpQU=
Subject key identifier:   34:8C:40:90:BD:65:9D:9C:83:33:72:FC:35:4B:83:A7:8B:A8:A8:9F
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       050A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04B3
Signing time:             Wed 13 May 2026 00:08:55 +0000
Manifest this update:     Wed 13 May 2026 00:08:54 +0000
Manifest next update:     Wed 20 May 2026 00:08:54 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: WLBsMtGPgltXOi4THxPoKUFuW1YfRMmh82dm41z+1ck=)
                          2: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          3: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
                          4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          5: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
                          6: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          7: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          8: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          9: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          10: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:08:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1290 (0x50a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: May 13 00:08:54 2026 GMT
            Not After : May 20 00:08:54 2026 GMT
        Subject: CN=6a03c117-c718
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6c:a9:e8:aa:ed:58:8e:62:99:dd:3c:38:42:
                    d7:20:0a:83:c0:c0:78:16:67:3a:1b:cd:53:39:35:
                    39:82:35:1b:bb:d1:8a:b3:d2:3e:77:dd:80:77:50:
                    c0:85:30:0f:ec:cb:e2:3d:61:10:9e:39:21:ed:74:
                    24:8b:6a:89:5a:03:dc:c0:1b:10:96:fe:e8:1f:17:
                    74:8c:5b:7a:27:8c:23:23:8c:0d:d8:6b:85:ae:c3:
                    bb:14:37:0b:4a:de:db:6c:cc:f6:c6:68:0a:e3:c0:
                    4a:00:56:19:30:ff:6b:11:84:56:44:a7:23:af:ef:
                    75:78:48:51:1b:13:a4:33:11:a5:fb:74:51:61:4a:
                    a4:1b:6d:f9:9c:f1:3e:df:73:41:5e:f8:2a:ea:24:
                    ce:67:ca:a6:8a:4e:ed:40:b6:87:43:c6:87:d2:58:
                    9f:54:c2:53:66:3d:e0:b6:b5:26:84:3c:ce:51:0d:
                    22:cd:c9:c5:67:70:cc:76:b1:82:07:ed:e0:a2:5c:
                    7a:c4:ef:0f:95:40:bb:c6:a9:e8:c1:49:60:13:04:
                    df:8e:13:15:1d:d9:66:78:fb:e9:14:15:44:9a:d6:
                    9a:51:92:fd:8b:e6:74:9f:7a:73:db:72:e0:07:22:
                    d8:0f:72:60:e6:9c:04:ed:c2:a9:32:86:5c:25:8d:
                    40:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:8C:40:90:BD:65:9D:9C:83:33:72:FC:35:4B:83:A7:8B:A8:A8:9F
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         be:8f:fe:5b:bb:48:ce:9d:e9:c7:37:f0:cb:26:45:bd:29:47:
         d9:92:28:44:f3:ac:a2:66:f5:3c:62:4b:7f:4b:d8:ee:55:8e:
         23:f2:35:cd:25:d3:5b:44:af:8d:8c:30:c9:ed:f3:b1:38:82:
         56:6c:4b:ff:d3:f7:51:63:9f:ed:95:c6:d7:20:05:b8:4b:00:
         41:ab:f1:e5:8e:7c:e1:b9:65:36:7c:e2:53:61:3f:22:78:77:
         f0:5b:60:8c:07:33:d7:ad:09:84:7b:0f:57:19:b3:56:16:2e:
         d5:6b:3f:59:48:87:c3:a8:55:01:d4:aa:9e:0a:58:d5:b5:fc:
         d9:58:ea:99:a1:7b:98:70:d4:f7:79:14:07:d4:a2:66:c5:14:
         af:1f:da:39:0c:f6:f3:e2:be:6e:d5:a1:7a:56:ea:ef:01:94:
         82:ff:ea:a0:70:10:8e:53:6e:14:da:20:b7:73:a8:73:bb:ac:
         b1:82:02:3a:10:39:d2:11:b7:8d:ad:50:e0:2f:47:69:83:63:
         1e:a2:d1:ef:db:a2:da:f2:76:aa:f3:ad:bf:7e:3c:ec:f4:87:
         56:51:3d:6d:da:6f:74:1f:78:46:db:a7:f8:cc:ff:fb:56:82:
         d2:74:f4:1c:ca:d5:4a:b4:c4:43:83:53:31:98:c2:67:8f:56:
         82:66:b1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:02:05 2026 by rpki-client