Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
File:                     cTo2dI_ipynplVRz-lxAACOqIH0.mft (raw, json)
Hash identifier:          qbek5YmWk6QbWKsMGI06zEzFkg4vr1vkFT0jJWTvM0I=
Subject key identifier:   43:11:3E:95:14:BF:01:F9:9D:D0:F2:7B:D1:EF:E7:F9:22:BC:5B:1F
Authority key identifier: 71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D
Certificate issuer:       /CN=A91812BE/serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
Certificate serial:       1C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
Manifest number:          1B
Signing time:             Mon 11 May 2026 09:08:46 +0000
Manifest this update:     Mon 11 May 2026 09:08:45 +0000
Manifest next update:     Mon 18 May 2026 09:08:45 +0000
Files and hashes:         1: cTo2dI_ipynplVRz-lxAACOqIH0.crl (hash: wagQDbsbFhguTLvqvSwPYR8rwR6c4iotZGITvYpPvPQ=)
                          2: EFED2132264C11F1BA49400EA1833773.roa (hash: IHm6ka0JJFCAmNqKc7swMLutMt30cesKv/ExBV+fuNs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl
                          rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:08:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91812BE, serialNumber=713A36748FE2A729E9955473FA5C400023AA207D
        Validity
            Not Before: May 11 09:08:45 2026 GMT
            Not After : May 18 09:08:45 2026 GMT
        Subject: CN=6a019c9e-6595
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:40:f2:8e:18:d2:a5:09:25:9c:8b:fe:23:24:
                    b7:56:4a:aa:13:d1:26:f5:ce:86:4e:84:89:2b:9a:
                    38:87:9e:f3:d3:8a:8e:78:db:bd:d2:34:e5:cf:50:
                    ab:2f:8e:67:84:12:05:0a:ae:58:8b:e1:32:42:64:
                    5f:7b:cc:4d:43:c3:08:09:ca:e1:d8:f0:07:e3:9b:
                    ad:2c:27:b7:13:0c:26:e2:64:0d:ff:85:5a:89:39:
                    93:9d:3f:56:1f:3d:32:c2:22:23:ec:e2:a8:10:db:
                    f0:99:cc:29:39:23:b1:62:9b:85:30:9f:dd:a4:d6:
                    66:7f:ae:53:66:29:e5:c5:55:b5:20:1b:dd:0f:a2:
                    f4:af:89:c7:33:2b:2f:a8:72:b8:1e:39:43:57:f3:
                    0c:b9:fa:c5:53:ba:f0:53:6c:91:7e:54:c9:b2:7c:
                    8a:1f:38:db:87:f9:0e:1c:f9:a7:2f:0f:24:cd:79:
                    f5:db:92:85:b5:27:af:bf:89:3f:fc:35:8b:f1:cf:
                    a0:42:a9:b6:95:d8:98:02:1b:fd:02:9c:65:85:1a:
                    ca:91:11:12:23:73:f9:33:20:80:4a:a9:03:05:51:
                    d1:af:81:9e:b0:01:cb:c7:ca:0e:06:78:3d:d9:15:
                    02:30:69:81:21:dd:65:34:55:1f:e8:88:be:e0:a9:
                    ac:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:11:3E:95:14:BF:01:F9:9D:D0:F2:7B:D1:EF:E7:F9:22:BC:5B:1F
            X509v3 Authority Key Identifier:
                keyid:71:3A:36:74:8F:E2:A7:29:E9:95:54:73:FA:5C:40:00:23:AA:20:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/cTo2dI_ipynplVRz-lxAACOqIH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91812BE/97ADDC0C264A11F186710DC69F833773/cTo2dI_ipynplVRz-lxAACOqIH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         24:92:db:ed:d7:bb:1c:95:9f:64:ed:7b:d1:cd:eb:25:39:2f:
         53:5f:2e:24:b0:a2:ca:a2:97:39:6e:55:17:9a:52:06:5f:77:
         8c:f7:c3:e3:db:fd:e7:03:a2:3a:02:f6:4c:97:b2:84:91:c9:
         fa:a5:32:9f:70:50:71:2a:6c:2a:c5:8a:b5:9f:41:a3:05:e7:
         08:b0:f4:b9:f7:24:50:e9:39:90:05:0b:00:45:31:13:e9:c5:
         ac:b4:f5:0f:a3:70:65:2c:bf:0b:14:fe:73:ed:90:72:0e:16:
         02:fa:9d:dc:be:70:bf:54:5e:be:b5:6f:21:46:ea:49:1e:5e:
         6c:b6:78:c3:6e:46:9b:37:61:82:49:e4:53:f4:d2:c7:de:8a:
         09:a5:bf:11:13:a7:75:64:5e:6e:9a:a1:bb:7c:ee:84:fd:3d:
         58:18:71:bb:7f:15:f2:9b:d5:23:7f:d8:43:96:a9:13:c4:02:
         ab:ca:e6:fd:c7:9c:77:50:c6:b1:71:81:aa:5c:7a:0f:35:96:
         68:c6:af:f2:24:f4:de:d3:d8:ad:8e:de:a9:80:11:cf:2f:6b:
         a0:6a:bb:65:79:65:c2:5b:08:f4:43:7a:22:a7:e1:8b:40:64:
         da:34:0c:79:b9:b0:a6:b4:4f:3d:60:91:8d:77:be:5a:fa:12:
         41:05:13:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:22:02 2026 by rpki-client