Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
File:                     A0iYvB-xsaJGF6zZvIMq6D6vni0.mft (raw, json)
Hash identifier:          XqVSu7ylSHt+h0Cj+LajPF1wQRE76xLZ9+y/nKfNC2A=
Subject key identifier:   BF:32:5E:44:89:9E:70:6F:FF:65:91:12:FE:A3:86:06:DB:F5:41:3E
Authority key identifier: 03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D
Certificate issuer:       /CN=A918D727/serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
Certificate serial:       020A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
Manifest number:          0205
Signing time:             Wed 13 May 2026 03:08:18 +0000
Manifest this update:     Wed 13 May 2026 03:08:17 +0000
Manifest next update:     Wed 20 May 2026 03:08:17 +0000
Files and hashes:         1: A0iYvB-xsaJGF6zZvIMq6D6vni0.crl (hash: pkVJKdaiL5QcVn2wzd3rJzuFkSTt1M/bFEq2OhBUsEg=)
                          2: A7E3DAB237FB11EEBB03FD6CC4F9AE02.roa (hash: 9g+cXzlenM5QdNB0vC6zwv+Sc4F3maBeP/ANCVxlI0k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl
                          rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:08:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 522 (0x20a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A918D727, serialNumber=034898BC1FB1B1A24617ACD9BC832AE83EAF9E2D
        Validity
            Not Before: May 13 03:08:17 2026 GMT
            Not After : May 20 03:08:17 2026 GMT
        Subject: CN=6a03eb22-deaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:92:b9:fd:eb:2e:24:ae:4a:d5:83:06:43:13:
                    68:4a:eb:52:a2:a9:f3:0c:67:ab:81:27:00:bf:67:
                    eb:11:56:fa:ad:95:93:de:68:ae:a7:af:b2:e0:3f:
                    3c:b3:f4:08:d8:4c:ff:74:e1:3a:fc:2b:10:86:0b:
                    b3:36:26:a7:66:a9:fd:0e:2f:3e:7e:e0:0b:ea:58:
                    be:53:f3:0c:d1:4f:92:f3:49:87:6b:4a:5c:31:26:
                    0b:80:29:35:15:cc:af:dd:2c:9c:b5:72:39:c4:e2:
                    37:30:8d:3f:b5:af:91:de:c0:9d:14:ad:4f:b7:bd:
                    48:47:20:6f:52:f0:24:26:a0:c2:13:80:99:1e:54:
                    bc:74:44:d7:70:6a:17:3b:2e:f8:01:56:50:62:f3:
                    61:c1:e7:5a:2a:3a:32:ad:d4:61:d8:ad:3a:b9:66:
                    47:59:60:04:6b:40:c3:d7:d5:9e:81:b6:93:61:b1:
                    a6:97:54:f9:c0:18:0c:06:3b:52:e1:9e:a3:59:91:
                    0a:93:0d:42:0c:57:f0:00:51:af:52:46:6e:11:89:
                    4e:31:92:d0:b8:d8:9f:84:f4:b1:2f:58:ad:2c:2f:
                    28:d9:bd:ca:3f:78:da:26:b9:39:71:2d:29:70:04:
                    2f:b3:48:0b:8d:f2:2a:4d:64:1c:8f:c0:df:1c:69:
                    fc:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:32:5E:44:89:9E:70:6F:FF:65:91:12:FE:A3:86:06:DB:F5:41:3E
            X509v3 Authority Key Identifier:
                keyid:03:48:98:BC:1F:B1:B1:A2:46:17:AC:D9:BC:83:2A:E8:3E:AF:9E:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A0iYvB-xsaJGF6zZvIMq6D6vni0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918D727/4798FB0637FB11EEB4296D3DC4F9AE02/A0iYvB-xsaJGF6zZvIMq6D6vni0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:64:6d:53:7f:09:df:fc:dd:0f:c1:30:11:ee:9e:1e:c0:e7:
         21:a2:cf:ad:78:80:1a:7d:d6:9e:4b:91:cc:90:d1:3b:27:e3:
         d6:31:7d:25:56:b8:6b:b7:2e:3b:b6:b6:30:dd:c9:8b:82:72:
         0d:7e:b5:1e:b8:94:67:c2:57:d2:a9:bb:1d:27:83:ba:ce:e0:
         50:fb:16:f8:6b:37:ca:f9:cd:64:f1:06:d7:d5:c0:8a:4d:cc:
         23:c6:61:8b:a5:90:82:dd:fb:fe:a5:71:c3:3d:79:de:06:17:
         c3:95:80:97:49:65:de:54:89:af:b8:13:cd:1b:e8:3e:2b:8f:
         be:e6:89:2a:71:bd:b4:e8:93:dd:7b:e7:c5:99:7e:73:9c:64:
         c5:c5:29:93:6b:12:c9:ce:18:cc:2f:60:de:14:08:0f:7d:10:
         29:2d:ec:3b:77:ed:1f:d5:86:39:36:85:b7:e0:36:e9:33:b6:
         70:32:db:c7:9d:8a:56:e4:0b:62:be:cc:ad:55:1d:24:ad:76:
         b4:8c:ef:79:25:ee:04:91:ec:0a:5b:ce:7f:48:3e:f5:f2:2f:
         d9:be:32:31:63:71:8e:0c:b0:72:69:4e:78:f9:cd:8a:c7:40:
         a4:bd:ac:52:db:36:d6:c2:c3:8b:eb:d1:1a:0a:db:8e:23:11:
         d7:92:8a:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:16:54 2026 by rpki-client