Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
File:                     u6vT8W4QD9nJXUdIhOTanLb6do0.mft (raw, json)
Hash identifier:          fZNE+ko7yTwbEbRxlgpUSZsplVBgi3gE2XbBtladWl4=
Subject key identifier:   1A:43:40:52:9B:7C:61:F2:E3:0B:1B:32:A9:0F:6C:B8:0D:D0:10:DB
Authority key identifier: BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D
Certificate issuer:       /CN=A91886E3/serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
Certificate serial:       0299
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
Manifest number:          028D
Signing time:             Wed 13 May 2026 01:47:57 +0000
Manifest this update:     Wed 13 May 2026 01:47:57 +0000
Manifest next update:     Wed 20 May 2026 01:47:57 +0000
Files and hashes:         1: u6vT8W4QD9nJXUdIhOTanLb6do0.crl (hash: itT6UyCJqCsuOhaU6e4mlpvNOirdKYd5H95HC8OnKa8=)
                          2: 61141C1671AC11EDAA89DE61C4F9AE02.roa (hash: onPZDg24JU1SAnJ+1qdctr4Q+6RG244WKpPI60NUB8Y=)
                          3: 60820A4271AC11EDAA89DE61C4F9AE02.roa (hash: AF+OSPPeJ/k4cpuI6pm2/IpiY0n6OFKaOYlrZAsamTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl
                          rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:47:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 665 (0x299)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91886E3, serialNumber=BBABD3F16E100FD9C95D474884E4DA9CB6FA768D
        Validity
            Not Before: May 13 01:47:57 2026 GMT
            Not After : May 20 01:47:57 2026 GMT
        Subject: CN=6a03d84d-02aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9b:f2:a1:50:c1:e5:c3:c9:3b:a0:46:c7:78:
                    3b:57:92:78:7b:7a:da:25:08:df:e3:ae:12:cf:e0:
                    a9:ad:2c:65:0a:48:6e:c4:82:6c:9f:68:c5:19:7e:
                    fc:f2:5f:59:03:67:ff:94:b2:22:fa:65:26:04:a6:
                    7f:e1:92:69:c2:3c:45:4d:0a:6c:55:50:ee:6f:f1:
                    2b:e3:d9:e6:b9:1d:fa:7a:ee:5b:37:cd:3e:c1:01:
                    86:99:08:f8:af:ad:b8:79:7d:9c:fb:57:97:d5:b3:
                    a7:21:0a:b9:25:b2:a9:98:0d:50:3a:20:3d:14:07:
                    7b:9a:63:a2:12:5d:df:c7:d6:4d:ba:e5:78:8b:95:
                    71:51:40:cf:c9:78:80:2f:f5:f8:e2:09:15:13:fb:
                    cf:f1:98:7e:8e:99:0b:e6:1f:1f:12:0d:f6:9d:56:
                    88:5e:8d:69:c9:23:6a:3b:2b:c2:87:da:94:21:90:
                    91:04:11:e0:7b:bf:b8:0e:f5:d6:21:8e:a9:a3:cb:
                    74:8f:db:a1:77:88:6d:6b:2d:15:0a:ea:31:82:4b:
                    ba:6e:ee:1d:c3:2c:b2:c9:d2:15:75:eb:07:04:ef:
                    71:86:f4:00:d0:0d:b7:99:33:d6:4b:62:e3:e9:75:
                    20:68:95:0c:07:7a:8a:8b:90:fd:1d:35:b2:19:f9:
                    63:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:43:40:52:9B:7C:61:F2:E3:0B:1B:32:A9:0F:6C:B8:0D:D0:10:DB
            X509v3 Authority Key Identifier:
                keyid:BB:AB:D3:F1:6E:10:0F:D9:C9:5D:47:48:84:E4:DA:9C:B6:FA:76:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u6vT8W4QD9nJXUdIhOTanLb6do0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91886E3/1247B860669211ED82BE7133C4F9AE02/u6vT8W4QD9nJXUdIhOTanLb6do0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         06:23:e6:d3:ec:6a:7e:54:f3:ee:7c:e4:78:8a:20:62:0f:be:
         db:92:94:e7:15:10:29:0f:39:c0:4c:a7:65:8e:52:23:11:f5:
         aa:38:1d:e8:bd:d4:c9:c6:d4:7e:09:ee:f8:1f:c2:19:ea:ab:
         0c:17:58:82:9c:4f:08:df:92:f8:a9:ca:0d:ea:00:c3:b2:6d:
         d7:9d:bc:1f:4e:e0:f3:5d:44:bc:c8:9d:29:a9:bd:16:27:f4:
         1f:14:71:cb:4b:8e:a4:4b:d4:ca:69:03:77:de:76:ce:8d:67:
         2f:d6:5c:69:1b:b1:bc:ce:41:23:57:f1:45:86:75:08:ab:75:
         a5:5c:4b:7c:a4:51:71:47:42:5f:77:fb:70:f6:64:b1:e7:21:
         d9:c3:bd:8a:84:64:26:c2:b2:67:15:6c:16:1a:2c:c1:00:33:
         5d:4a:df:3d:13:0c:4a:1a:7a:31:7b:f1:00:4f:97:4e:ae:3d:
         17:74:8a:d7:79:38:03:3f:28:e7:62:6f:43:0b:5f:0b:4a:0e:
         12:23:67:ad:fc:8e:9c:2f:af:27:87:2d:4b:3c:fa:99:81:69:
         24:07:7f:a7:7a:80:c3:b3:cc:10:88:99:9c:2a:4e:c8:da:7c:
         24:89:b1:4c:59:78:10:f9:c1:9e:0d:64:fc:f3:d7:81:c4:0c:
         21:6e:8b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:21:08 2026 by rpki-client