Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
File:                     kaNAPNs-fi5T9OZhBZESgyz5-M4.mft (raw, json)
Hash identifier:          HfkzexomQ46iRFLH10J/txshUbrkAZ9eXXp5Iy14hSM=
Subject key identifier:   D0:DE:15:D4:DF:34:C2:FD:B7:EB:28:D7:6D:E7:51:3A:31:FE:00:1C
Authority key identifier: 91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE
Certificate issuer:       /CN=A9188D0F/serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE
Certificate serial:       1E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
Manifest number:          1D
Signing time:             Wed 13 May 2026 09:03:48 +0000
Manifest this update:     Wed 13 May 2026 09:03:47 +0000
Manifest next update:     Wed 20 May 2026 09:03:47 +0000
Files and hashes:         1: kaNAPNs-fi5T9OZhBZESgyz5-M4.crl (hash: lxM83U3DGrC4DcPO6f7cWrUaaM975BF1huX5ip3sf5Y=)
                          2: 40244FE624D011F1874701DAA9833773.roa (hash: BvmoKK2bVrC8ISg+I54hyLICIuNcMLRT4N3gcv8pi4A=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl
                          rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:03:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188D0F, serialNumber=91A3403CDB3E7E2E53F4E661059112832CF9F8CE
        Validity
            Not Before: May 13 09:03:47 2026 GMT
            Not After : May 20 09:03:47 2026 GMT
        Subject: CN=6a043e74-8239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:18:16:3a:12:bd:03:43:36:8a:6e:3d:bd:cd:
                    e1:ec:28:9b:07:10:9a:9c:54:c9:7d:b0:eb:43:1d:
                    db:e0:8e:4c:87:5d:8b:23:ef:ae:6e:70:d0:b0:ab:
                    02:8e:c9:36:6d:73:a3:77:55:8b:d8:2f:2f:3d:c4:
                    42:8d:45:af:e7:d8:a9:da:0d:ab:7c:0f:27:a2:33:
                    a6:9a:54:d9:db:66:e2:ed:22:e0:5f:72:39:3a:bc:
                    e0:56:db:9b:96:74:ef:db:76:13:69:ab:2c:b0:cf:
                    cb:31:65:06:63:6d:63:d3:fe:2a:ca:b0:8c:2d:ec:
                    71:91:ea:2e:5f:a3:af:8e:d3:c4:1b:c4:6e:49:9f:
                    21:dc:c5:7d:44:77:94:ea:b3:f3:b9:16:51:8a:e0:
                    10:90:6b:2f:26:ee:25:46:48:47:e2:81:5c:3e:98:
                    bf:c6:3f:53:de:36:39:84:0d:bd:02:c0:8f:72:73:
                    61:79:d3:bf:7f:3b:23:09:90:5a:ae:23:f7:bf:d2:
                    52:b8:8b:26:f8:d8:58:5b:00:35:7b:a5:ca:38:42:
                    00:a7:d0:90:de:6e:c5:06:fb:f6:7b:7f:ed:6d:fa:
                    78:52:ba:ab:01:3f:70:86:ed:6a:64:02:ae:4a:5b:
                    35:28:92:70:61:4e:fb:ae:e9:66:c4:2c:36:af:23:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:DE:15:D4:DF:34:C2:FD:B7:EB:28:D7:6D:E7:51:3A:31:FE:00:1C
            X509v3 Authority Key Identifier:
                keyid:91:A3:40:3C:DB:3E:7E:2E:53:F4:E6:61:05:91:12:83:2C:F9:F8:CE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/kaNAPNs-fi5T9OZhBZESgyz5-M4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188D0F/F359CF9224CF11F1B02C88C1A9833773/kaNAPNs-fi5T9OZhBZESgyz5-M4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:1f:83:86:e1:7f:d8:b6:0c:2f:3a:d6:3e:62:27:69:f5:22:
         bd:f1:a4:ec:c0:5c:6a:01:bc:89:ee:54:3e:c2:ad:40:16:8c:
         5a:56:c2:6d:5b:e3:64:8c:78:27:fe:fd:58:4f:c6:a5:f3:9a:
         95:b7:4c:99:f5:7b:8b:74:8b:2a:cb:c9:7d:c4:51:5a:e1:c1:
         6d:f4:cb:13:a3:fb:17:d2:0d:ee:a5:af:f2:22:88:7a:a7:a5:
         b8:9e:a8:3a:4d:a6:25:ae:8b:7f:2e:8a:2a:9f:6c:7e:a7:8e:
         60:fd:f9:7d:ef:06:ec:1d:cd:61:56:4e:3e:76:a7:e8:7d:ce:
         2f:d3:07:7f:b9:b7:fc:ab:22:07:af:22:fd:b9:e8:21:49:41:
         2b:fa:98:06:42:3f:4d:7e:f6:ad:63:89:d6:bb:6b:0f:30:1e:
         77:27:b7:93:4a:2e:0a:88:47:ad:b8:3f:bc:cd:83:48:b3:5b:
         1f:95:96:36:0f:9e:24:97:8f:04:a2:36:5c:06:6c:39:c1:f5:
         23:12:cd:b1:1a:9c:c2:c4:05:3a:c7:35:e6:c6:8d:8b:39:1c:
         a5:2a:90:a6:ce:90:b7:18:d6:a9:f6:18:fe:7f:0b:51:86:8f:
         f1:0b:4a:b1:cf:29:a1:60:b9:d0:0e:97:e8:22:5c:fd:64:2f:
         72:3e:53:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:23 2026 by rpki-client