Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
File:                     0UdMHaQ5s05IfCjCRynmh-CUfXM.mft (raw, json)
Hash identifier:          /ed9m2o1WloBYMXHSCooYI7JBxJ4gZWqC6ia9v9a2K0=
Subject key identifier:   A8:D4:40:D0:D1:7D:E3:94:B3:14:24:C7:54:4F:A7:6D:AF:8B:37:6D
Authority key identifier: D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73
Certificate issuer:       /CN=A91840A8/serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
Certificate serial:       0700
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
Manifest number:          06E0
Signing time:             Sun 10 May 2026 22:21:48 +0000
Manifest this update:     Sun 10 May 2026 22:21:47 +0000
Manifest next update:     Sun 17 May 2026 22:21:47 +0000
Files and hashes:         1: 0UdMHaQ5s05IfCjCRynmh-CUfXM.crl (hash: n9b/IC8JZBNVGw3cc+44Kb1Yop1tZAMWTgwuEswz/+0=)
                          2: AB4B141CA24211ED92C4107BC4F9AE02.roa (hash: UEUSncbvcRYXE+6AzGdqUvKwJ/u7rXG3RrB+0He5Cnw=)
                          3: E9FB74DCE57711ECBC483554C4F9AE02.roa (hash: L6hABI5kNyEHBTZ/cEYXuskG1lk2aNB/iJZmFIuNgZo=)
                          4: DD7CA58EA23F11EDBCDB6D73C4F9AE02.roa (hash: zINjF4ccyquuyzSHiME1Sbg1fPnikG9YaVLVGBtBtKw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl
                          rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 22:21:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1792 (0x700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91840A8, serialNumber=D1474C1DA439B34E487C28C24729E687E0947D73
        Validity
            Not Before: May 10 22:21:47 2026 GMT
            Not After : May 17 22:21:47 2026 GMT
        Subject: CN=6a0104fc-f784
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:cd:cc:aa:53:a8:81:4a:bc:59:15:cb:04:d6:
                    93:de:c7:04:00:57:ba:dd:e4:92:e3:db:a9:bd:cc:
                    21:81:ee:d0:13:c1:cd:fa:3f:1c:0b:d2:0d:9c:be:
                    38:b2:10:24:ae:62:60:a2:51:b2:29:7c:8e:e5:da:
                    82:ee:10:5a:fe:f0:2c:41:b7:d6:fc:da:96:bd:78:
                    d2:2b:38:10:4f:91:76:53:26:5a:f4:f5:21:47:de:
                    34:a1:21:92:4e:41:ac:93:b1:f7:25:58:49:5e:b4:
                    9c:50:af:02:f3:60:d3:95:3a:dc:6a:cd:ac:45:b6:
                    54:b0:e7:37:98:aa:6a:78:5e:a7:33:c4:92:e2:53:
                    49:5d:95:68:4e:5a:77:97:dc:94:09:77:3c:3e:da:
                    5f:10:27:50:34:1a:71:5e:f1:85:d0:a9:31:ba:e4:
                    c5:c2:8e:b0:fb:23:54:8d:f5:b5:7c:88:ca:e9:f9:
                    1e:68:52:9e:65:a5:ad:8c:30:1a:4c:85:05:2f:50:
                    de:86:83:57:de:cd:81:81:8f:32:d9:29:af:30:cd:
                    84:ca:7a:87:f4:2e:99:2c:1c:63:15:e5:69:74:4c:
                    75:e4:be:b2:1e:b7:f7:d3:ff:c1:44:d9:23:7c:8b:
                    f2:e5:c1:48:c1:2a:ce:9c:e9:6a:3f:42:74:ea:c4:
                    0e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:D4:40:D0:D1:7D:E3:94:B3:14:24:C7:54:4F:A7:6D:AF:8B:37:6D
            X509v3 Authority Key Identifier:
                keyid:D1:47:4C:1D:A4:39:B3:4E:48:7C:28:C2:47:29:E6:87:E0:94:7D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0UdMHaQ5s05IfCjCRynmh-CUfXM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91840A8/70C2EB7AA19611EB8200CF09C4F9AE02/0UdMHaQ5s05IfCjCRynmh-CUfXM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a1:ee:60:01:11:38:21:c7:5d:41:38:5f:8c:16:e7:17:e8:23:
         59:d9:8b:7d:ca:23:c5:33:c7:f6:c4:f0:fc:83:66:57:ae:c3:
         ee:b9:55:6a:e6:71:27:d9:a2:26:9d:cb:33:a0:a4:a7:ad:ac:
         e9:8b:44:4d:f6:45:8a:88:90:83:1f:60:94:6d:78:c3:56:16:
         3e:dd:1a:aa:d7:83:9c:fc:39:f5:7f:58:04:43:db:56:a3:6d:
         8a:aa:dc:0e:95:29:c4:6e:7c:0e:d1:0c:6d:8a:bf:86:9a:d0:
         41:8d:75:d4:05:01:8d:ef:e9:4e:ca:a9:8a:7f:b4:c9:46:0e:
         84:43:46:7d:de:85:ed:08:48:1e:2c:1b:46:6b:e3:d4:60:04:
         7c:d6:fb:aa:9e:f2:15:1f:43:41:82:f6:54:6f:e1:96:1f:4f:
         3e:41:ed:15:07:a8:cb:1e:ca:93:79:e5:11:96:d7:23:d8:de:
         d2:3f:9c:c0:32:af:83:c6:cd:ef:49:4f:80:a3:f9:cf:76:56:
         b8:e3:8d:54:79:0f:4d:e4:c1:af:03:20:51:00:c9:d1:11:62:
         a4:73:c7:10:ce:9c:a4:2e:d2:a7:0d:b5:9e:9a:7f:dc:f7:e5:
         b9:6a:7d:e5:16:10:e6:0e:c0:eb:2d:0d:ca:f9:bf:12:2e:e3:
         9b:29:39:82
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBwAwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
ODQwQTgxMTAvBgNVBAUTKEQxNDc0QzFEQTQzOUIzNEU0ODdDMjhDMjQ3MjlFNjg3
RTA5NDdENzMwHhcNMjYwNTEwMjIyMTQ3WhcNMjYwNTE3MjIyMTQ3WjAYMRYwFAYD
VQQDEw02YTAxMDRmYy1mNzg0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAjM3MqlOogUq8WRXLBNaT3scEAFe63eSS49upvcwhge7QE8HN+j8cC9INnL44
shAkrmJgolGyKXyO5dqC7hBa/vAsQbfW/NqWvXjSKzgQT5F2UyZa9PUhR940oSGS
TkGsk7H3JVhJXrScUK8C82DTlTrcas2sRbZUsOc3mKpqeF6nM8SS4lNJXZVoTlp3
l9yUCXc8PtpfECdQNBpxXvGF0KkxuuTFwo6w+yNUjfW1fIjK6fkeaFKeZaWtjDAa
TIUFL1DehoNX3s2BgY8y2SmvMM2EynqH9C6ZLBxjFeVpdEx15L6yHrf30//BRNkj
fIvy5cFIwSrOnOlqP0J06sQOcwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKjUQNDR
feOUsxQkx1RPp22vizdtMB8GA1UdIwQYMBaAFNFHTB2kObNOSHwowkcp5ofglH1z
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4NDBBOC83MEMyRUI3QUEx
OTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMwNUlmQ2pDUnlubWgtQ1Vm
WE0uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzBVZE1IYVE1czA1SWZDakNSeW5taC1DVWZYTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4
NDBBOC83MEMyRUI3QUExOTYxMUVCODIwMENGMDlDNEY5QUUwMi8wVWRNSGFRNXMw
NUlmQ2pDUnlubWgtQ1VmWE0ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAoe5gARE4IcddQThfjBbnF+gjWdmLfcojxTPH9sTw/INmV67D7rlVauZxJ9mi
Jp3LM6Ckp62s6YtETfZFioiQgx9glG14w1YWPt0aqteDnPw59X9YBEPbVqNtiqrc
DpUpxG58DtEMbYq/hprQQY111AUBje/pTsqpin+0yUYOhENGfd6F7QhIHiwbRmvj
1GAEfNb7qp7yFR9DQYL2VG/hlh9PPkHtFQeoyx7Kk3nlEZbXI9je0j+cwDKvg8bN
70lPgKP5z3ZWuOONVHkPTeTBrwMgUQDJ0RFipHPHEM6cpC7Spw21npp/3PfluWp9
5RYQ5g7A6y0Nyvm/Ei7jmyk5gg==
-----END CERTIFICATE-----
Generated at Tue May 12 22:31:31 2026 by rpki-client