Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
File:                     Sn0mxMvxZwAkXWf79pULcSkYmTk.mft (raw, json)
Hash identifier:          STJQuyT8dSyHQWdlXyLJLDonY4jP9ySTIWDmwdARnEw=
Subject key identifier:   F8:72:9C:B1:38:08:10:34:1D:6B:D3:A9:C2:FB:B6:BB:21:40:56:70
Authority key identifier: 4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39
Certificate issuer:       /CN=A91839CF/serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
Certificate serial:       011D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
Manifest number:          0115
Signing time:             Mon 11 May 2026 06:01:09 +0000
Manifest this update:     Mon 11 May 2026 06:01:08 +0000
Manifest next update:     Mon 18 May 2026 06:01:08 +0000
Files and hashes:         1: Sn0mxMvxZwAkXWf79pULcSkYmTk.crl (hash: 1e2AF91FJ+OW/V78gl5eAFaNp0h5/GyDGznGMgP1JTc=)
                          2: 305EB30EA98D11EF8C023466C4F9AE02.roa (hash: azt0NOsf2/O8AMbeoL2qikO4x78xhwdxHjV8eUh4zBs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl
                          rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:01:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 285 (0x11d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91839CF, serialNumber=4A7D26C4CBF16700245D67FBF6950B7129189939
        Validity
            Not Before: May 11 06:01:08 2026 GMT
            Not After : May 18 06:01:08 2026 GMT
        Subject: CN=6a0170a5-a729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e8:3d:8b:ce:ba:6e:62:71:31:6e:ee:9e:b8:
                    c8:f6:de:5e:6b:00:bc:2f:b3:e1:75:9b:e9:55:38:
                    02:ff:8a:e6:b4:eb:7e:1c:07:6e:0d:eb:4a:27:94:
                    5a:4f:ab:2b:bd:6f:a0:48:58:42:04:b9:6c:93:a7:
                    9d:27:7f:76:96:12:82:0c:57:dd:46:70:d0:0b:d2:
                    39:2a:0b:45:43:d5:6c:6e:cf:29:1d:20:7b:8d:46:
                    88:c7:7c:a5:d7:48:22:c3:38:08:f6:af:01:65:2e:
                    8b:74:6a:54:33:ad:a6:45:97:92:9b:bf:a2:52:d3:
                    1f:7e:19:bb:4a:a5:f4:d0:f1:5d:7b:38:d2:0a:7a:
                    75:20:79:d3:e4:ab:ff:ef:ee:1b:5d:b4:0c:3e:9f:
                    9e:72:e6:58:ba:fa:af:74:3b:f0:c6:5e:82:36:98:
                    4c:56:84:b6:70:b8:23:59:ca:7e:e0:fd:82:06:72:
                    58:5b:be:18:01:f2:cf:e8:7d:e3:b1:c0:5e:d3:f8:
                    d6:df:4d:97:1d:e7:6b:5f:8f:6d:61:6c:48:66:6d:
                    ea:d5:e6:db:52:4c:47:c4:5a:fe:5c:df:c6:94:83:
                    22:45:21:46:c9:4d:47:8d:75:68:9f:d2:b3:f3:37:
                    0d:51:66:04:b2:d6:d3:0d:84:c1:64:59:52:da:bc:
                    1a:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:72:9C:B1:38:08:10:34:1D:6B:D3:A9:C2:FB:B6:BB:21:40:56:70
            X509v3 Authority Key Identifier:
                keyid:4A:7D:26:C4:CB:F1:67:00:24:5D:67:FB:F6:95:0B:71:29:18:99:39

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sn0mxMvxZwAkXWf79pULcSkYmTk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91839CF/4DF2BE52A98C11EFBA068864C4F9AE02/Sn0mxMvxZwAkXWf79pULcSkYmTk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         72:ac:39:d3:1c:3a:8e:2b:03:af:02:6f:5c:62:f6:c9:15:94:
         fe:64:51:03:cb:85:3b:5d:37:ca:34:7c:43:0e:45:a5:72:6a:
         14:37:e5:07:3d:68:64:92:4f:ae:4a:63:b5:f3:aa:e5:fb:df:
         04:32:20:c6:11:4d:d3:d4:ac:6c:65:9f:67:6a:3e:1c:df:fa:
         9f:7d:dc:60:a0:d1:8a:32:3c:53:95:e0:2e:b3:ef:31:51:ab:
         eb:56:bb:5c:01:af:3f:14:cf:86:d8:13:d3:36:0c:a4:b5:1a:
         1a:50:dc:34:02:85:c1:2d:1f:58:d7:d8:92:16:cb:ed:ff:90:
         cb:72:c3:93:fd:ab:d5:a1:08:3d:cc:59:d0:40:7b:10:ab:a2:
         d4:05:cb:d9:dd:a2:f1:07:7e:ac:94:04:08:20:36:5b:ff:44:
         6a:75:43:55:6f:94:f4:39:e3:57:79:f8:0f:48:fb:9a:a3:1e:
         92:cd:39:35:6c:9b:a2:82:22:a6:dc:d3:30:1e:48:c2:bc:26:
         47:e2:74:f8:ae:09:39:88:fa:a5:44:20:05:d8:d4:08:4a:f6:
         d1:16:dd:d3:aa:5f:27:f7:26:16:3d:2e:a4:62:2f:a0:cc:92:
         d9:f8:05:72:c9:74:97:3a:14:4e:17:ea:27:da:ce:5d:11:77:
         df:e4:26:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:20:47 2026 by rpki-client