Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
File:                     t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft (raw, json)
Hash identifier:          nG+nLV5sSdUkXxa6+GI1cLmTLqh9HI56OIKrYzsLVUc=
Subject key identifier:   DA:FE:FF:63:C5:20:3D:18:9B:71:95:7C:85:53:8E:9E:53:B9:4C:3E
Authority key identifier: B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44
Certificate issuer:       /CN=A918897A/serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
Manifest number:          01B5
Signing time:             Fri 15 May 2026 03:59:30 +0000
Manifest this update:     Fri 15 May 2026 03:59:29 +0000
Manifest next update:     Fri 22 May 2026 03:59:29 +0000
Files and hashes:         1: t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl (hash: w06Op6XI/Br2A39jvYohgHfuHFKIECBvxgP/ypAR9LM=)
                          2: 18F9209CB55411EEAD96E873C4F9AE02.roa (hash: tVWZ+z7y79vt8dbGtT960HBGJ8r1XqQlEdw77RKXe1Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl
                          rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 03:59:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918897A, serialNumber=B7FA51215BB5C1EF88EAE15F034313D1B71B8D44
        Validity
            Not Before: May 15 03:59:29 2026 GMT
            Not After : May 22 03:59:29 2026 GMT
        Subject: CN=6a069a21-0360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:95:f7:39:b9:b2:9a:97:19:78:2e:24:50:86:
                    1b:b1:08:87:5f:b1:b0:b7:ca:c1:ae:60:d3:ad:36:
                    03:2b:80:7f:fd:4d:fa:f1:aa:b4:ca:bc:c0:51:4a:
                    3b:9f:1a:ea:1f:16:d5:87:7b:79:7e:17:0f:02:5b:
                    a6:1b:ef:2a:20:13:04:53:e4:3f:df:42:10:7a:c1:
                    b8:fb:d5:78:fb:b8:81:35:50:fa:77:2a:36:8f:7a:
                    c7:52:2c:eb:8a:2d:0f:4c:28:a9:de:29:31:a3:58:
                    20:be:3b:4f:64:a7:a6:86:65:40:37:16:52:aa:ff:
                    2f:84:87:36:04:fb:fc:fb:e1:e3:cd:78:e7:25:93:
                    8a:9f:16:c8:df:dc:67:a9:5f:b8:a1:60:94:db:2e:
                    a0:5d:73:d5:19:f8:db:43:da:3a:92:be:c8:f5:88:
                    39:da:3e:dc:c3:b7:ad:8e:32:7e:b2:7e:77:de:3d:
                    a9:02:6a:16:58:93:31:30:23:41:52:38:5d:0d:cd:
                    12:55:56:0f:3d:d4:ae:39:52:76:00:26:64:26:3b:
                    05:58:dc:85:f8:e7:80:ca:1d:b1:5f:23:33:d6:98:
                    ee:31:08:e9:ce:fa:2e:f2:d8:06:05:43:4c:6a:ad:
                    25:fc:5d:2e:80:2b:51:6b:d5:0a:3b:69:15:37:ce:
                    54:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:FE:FF:63:C5:20:3D:18:9B:71:95:7C:85:53:8E:9E:53:B9:4C:3E
            X509v3 Authority Key Identifier:
                keyid:B7:FA:51:21:5B:B5:C1:EF:88:EA:E1:5F:03:43:13:D1:B7:1B:8D:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t_pRIVu1we-I6uFfA0MT0bcbjUQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918897A/533E2462B55111EEBB4C573BC4F9AE02/t_pRIVu1we-I6uFfA0MT0bcbjUQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:a7:35:ea:dc:28:b9:28:07:f1:74:83:a3:c4:53:bf:36:
         e7:4e:2f:a7:b2:9b:39:67:2d:7f:b5:55:54:91:21:c4:d2:3b:
         b2:3c:f5:2d:64:23:5b:f2:c6:83:ae:e3:e2:78:f8:51:08:d6:
         10:16:9c:18:d5:5e:8f:08:ae:93:73:aa:96:8c:52:7f:14:b8:
         57:f3:67:0c:98:12:84:be:0c:a3:52:4a:4f:9b:f8:f9:73:c9:
         6b:5c:f2:a8:88:19:1c:6b:56:43:f4:91:b9:1a:71:ad:4e:75:
         db:cc:1c:05:d2:5e:77:3e:1d:18:37:e8:46:85:67:ea:4e:cc:
         cd:23:e1:39:98:bf:fa:a5:d5:e6:7e:7b:fe:f1:1d:80:dd:e1:
         cb:ac:01:91:09:2e:ba:19:d7:13:a6:11:d9:92:d5:b6:34:30:
         0b:e8:95:4b:f3:b1:91:88:69:c5:7c:37:e7:00:8a:79:92:c1:
         7e:8a:07:1d:07:17:9f:a3:4d:40:a1:73:7d:41:76:f0:13:ae:
         bd:66:60:f7:f9:bc:bb:16:34:e9:d4:64:93:a8:d5:d9:59:a2:
         33:15:69:6a:d7:b1:76:73:68:66:39:7d:c1:78:ee:46:2a:b7:
         c8:5c:dd:9a:ec:20:69:6b:68:38:e7:97:3e:41:7f:dd:78:db:
         20:f1:2b:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 15 12:45:09 2026 by rpki-client