Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
File:                     Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft (raw, json)
Hash identifier:          KE03oo9XaIA7Crq/Ofy4t6oIpM5u9REtz2hfAoa9dxE=
Subject key identifier:   6A:8F:5A:9F:56:D0:AA:F4:09:1E:6D:D3:E3:15:60:A7:88:DB:82:48
Authority key identifier: 49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF
Certificate issuer:       /CN=A91947C4/serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
Certificate serial:       01F2
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
Manifest number:          01ED
Signing time:             Wed 13 May 2026 03:26:20 +0000
Manifest this update:     Wed 13 May 2026 03:26:20 +0000
Manifest next update:     Wed 20 May 2026 03:26:20 +0000
Files and hashes:         1: Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl (hash: OoGexXdbNuq0hpz/LBxyIvy0JWhC6uSl0GHXrJ9RPcg=)
                          2: 08181C0C646D11EE82448758C4F9AE02.roa (hash: XpOJLqrrUhEc7ebQkkMofYS8+Tg7b9rkq4W6zmxVycM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl
                          rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 498 (0x1f2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91947C4, serialNumber=49DB61FF03C5516795CF78509EA37A060F4547BF
        Validity
            Not Before: May 13 03:26:20 2026 GMT
            Not After : May 20 03:26:20 2026 GMT
        Subject: CN=6a03ef5c-2bd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:e5:04:02:44:a6:bf:ab:65:0d:a0:6a:9f:16:
                    0a:d4:44:ce:d6:de:92:11:d9:a3:ca:1b:ff:9f:2d:
                    9c:d0:61:e0:14:3a:e7:b6:97:b7:05:c1:15:8e:53:
                    16:a6:7b:98:32:e8:f3:69:6c:7c:c4:c8:50:e7:d6:
                    3e:af:e9:82:61:4f:46:6e:53:79:ad:d8:69:41:3a:
                    d6:8f:a3:14:8b:95:be:35:95:18:49:ac:5e:e4:69:
                    a8:57:16:16:e9:77:ef:5e:ee:33:11:75:28:11:db:
                    40:78:5e:50:02:96:77:4e:2e:87:03:8f:90:29:8a:
                    86:f9:a4:d9:a6:eb:c6:5c:79:20:06:29:3c:56:71:
                    a5:73:f9:86:9c:8b:3a:3e:a4:2e:29:da:80:51:60:
                    83:55:3b:ed:dc:93:b6:b5:f2:ba:14:92:c7:c4:b2:
                    90:66:30:a8:c5:18:97:22:74:25:93:dd:ba:1f:e6:
                    76:61:38:74:90:23:95:d4:70:9e:97:f3:f0:e5:fb:
                    0f:7d:12:38:69:73:78:23:d7:47:51:5a:50:33:fb:
                    eb:7b:75:46:7a:b0:46:2a:a5:1d:fd:f7:f9:b9:87:
                    16:73:89:f5:62:16:4a:53:38:1c:e2:c9:a8:58:32:
                    ab:63:5c:7f:78:08:3a:df:7b:ed:c7:54:1e:0b:0f:
                    e0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:8F:5A:9F:56:D0:AA:F4:09:1E:6D:D3:E3:15:60:A7:88:DB:82:48
            X509v3 Authority Key Identifier:
                keyid:49:DB:61:FF:03:C5:51:67:95:CF:78:50:9E:A3:7A:06:0F:45:47:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Sdth_wPFUWeVz3hQnqN6Bg9FR78.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91947C4/595BE82C635B11EE884CAD4FC4F9AE02/Sdth_wPFUWeVz3hQnqN6Bg9FR78.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3c:e4:38:c8:3f:23:e9:f5:42:94:0f:05:33:b7:0c:99:54:55:
         23:69:d7:0d:6f:dc:d9:0c:9c:ab:c2:a7:59:ef:60:95:93:30:
         5d:a1:6f:4d:f0:5f:49:a2:f8:f8:74:d9:0d:25:e5:4e:c8:ee:
         02:3a:9d:e3:a9:23:70:3b:43:5c:7c:1e:15:f8:26:2c:f8:8c:
         d7:81:3f:98:fc:9d:db:7c:c8:ab:b4:44:29:fe:6d:e1:02:b0:
         18:82:ff:0d:30:86:97:f4:29:3f:02:dc:a4:40:e5:40:c0:6c:
         ad:87:5f:88:6f:13:f8:48:d5:d0:b1:d0:92:ee:db:30:62:9e:
         b0:8c:58:e2:9b:5f:10:72:79:8d:0f:f7:95:02:aa:8d:95:b3:
         49:0b:12:4c:27:9b:0e:61:db:7b:40:6a:fc:2a:36:b8:53:64:
         a2:bb:f5:1b:30:97:80:2b:28:fc:91:ea:5c:1b:22:46:22:5e:
         a7:05:94:49:87:e5:c6:f1:06:8d:6b:76:8b:61:6d:dd:c5:8e:
         53:f5:dd:ba:1b:95:00:cc:fa:84:ff:58:eb:37:73:ca:b4:2e:
         fe:0c:02:9f:86:e4:02:2e:2f:b6:09:41:21:55:27:93:a0:20:
         ae:b8:e2:c3:06:ca:0f:fa:da:c4:30:f6:1d:37:c3:7c:95:ac:
         f9:32:9e:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:21:13 2026 by rpki-client