Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
File:                     489F-AUQY7vbMX_dFREyqUAE_Vs.mft (raw, json)
Hash identifier:          h5JdhINciA6AHHp9rNNyzc2J/s6M7bazYQifDi8G7OU=
Subject key identifier:   DC:ED:90:F6:A6:61:2D:0D:0D:B8:3B:4A:D5:BC:87:95:E5:57:EC:A8
Authority key identifier: E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B
Certificate issuer:       /CN=A9197202/serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
Certificate serial:       0393
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
Manifest number:          037A
Signing time:             Mon 11 May 2026 00:57:21 +0000
Manifest this update:     Mon 11 May 2026 00:57:20 +0000
Manifest next update:     Mon 18 May 2026 00:57:20 +0000
Files and hashes:         1: 489F-AUQY7vbMX_dFREyqUAE_Vs.crl (hash: DKVPNbpGWhQkKvAXIy0QECa8UQANoesxD5hweZlwOHI=)
                          2: 920E981CCAAA11ED8371524CC4F9AE02.roa (hash: fkyJKn8Oh+03JayycchiXNnOyFPcVFyNkr5e5TiQlCU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl
                          rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:57:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 915 (0x393)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9197202, serialNumber=E3CF45F8051063BBDB317FDD151132A94004FD5B
        Validity
            Not Before: May 11 00:57:20 2026 GMT
            Not After : May 18 00:57:20 2026 GMT
        Subject: CN=6a012971-98a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:36:c7:b7:ab:75:60:9c:73:00:e7:af:00:e7:
                    6f:55:08:36:11:a1:62:eb:8a:6a:76:3c:56:cf:5b:
                    ab:45:a2:02:76:51:f9:6d:f4:e9:43:8b:41:8a:a3:
                    9a:99:a6:16:1d:d3:8f:f2:ed:5a:8e:60:47:0a:2a:
                    0b:a3:03:d0:85:c5:45:bc:76:73:34:fd:3f:00:a2:
                    6a:f2:4e:71:72:ff:d0:6a:10:ae:97:06:1e:a3:ab:
                    70:28:55:bb:fd:0a:c4:b1:20:e9:af:66:bb:bc:35:
                    6d:8f:32:4d:61:07:5a:bb:5a:04:5c:69:fc:9e:07:
                    21:45:ec:a3:9c:8d:7d:a2:a9:26:17:40:56:70:47:
                    86:be:2a:25:d3:b2:44:fc:2c:c3:fa:8f:9d:33:90:
                    74:69:d0:b9:9f:87:2c:9c:24:4a:3f:12:fd:72:40:
                    3e:c4:de:b3:a3:dd:6c:98:08:58:b2:2d:c6:91:87:
                    ab:67:37:d4:24:96:85:62:8e:46:ec:1f:65:9c:26:
                    68:71:07:0d:59:b0:84:93:74:63:f3:32:2b:30:e1:
                    3d:c0:47:a3:30:31:19:43:71:06:79:fc:ba:16:9b:
                    d0:51:0b:80:3d:11:6e:b2:77:f9:ff:d3:c1:f6:9b:
                    b1:06:f1:ce:23:01:34:f0:df:5c:15:eb:09:57:c1:
                    cb:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:ED:90:F6:A6:61:2D:0D:0D:B8:3B:4A:D5:BC:87:95:E5:57:EC:A8
            X509v3 Authority Key Identifier:
                keyid:E3:CF:45:F8:05:10:63:BB:DB:31:7F:DD:15:11:32:A9:40:04:FD:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/489F-AUQY7vbMX_dFREyqUAE_Vs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9197202/0AFECA70F70811EC9849F35EC4F9AE02/489F-AUQY7vbMX_dFREyqUAE_Vs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         69:75:a9:91:0b:dc:5c:5a:78:00:21:a5:01:50:0a:a7:d0:44:
         68:1a:7b:7b:24:36:d6:3c:4f:9f:07:d0:90:ec:1c:1f:b6:49:
         0d:2c:12:b1:ee:97:dc:9f:fd:46:fc:c4:cc:08:79:5d:5e:23:
         6e:44:34:22:10:a1:ee:fa:15:7a:0a:90:4e:55:47:07:25:fe:
         66:e4:57:f3:86:71:06:0c:8c:ed:31:6f:cb:cb:5c:ce:46:8f:
         1e:e3:98:b9:ea:f0:eb:05:dd:fd:ee:09:87:2d:42:31:2e:8b:
         18:df:57:f8:10:63:dc:18:1c:87:fa:a9:65:09:00:54:e2:1f:
         d8:db:01:a5:d4:5b:fd:e7:10:19:2b:2d:43:cc:eb:f2:60:12:
         67:a3:fe:57:ed:36:bf:99:a2:95:6e:79:7c:24:d2:52:d2:da:
         8e:bb:41:cc:53:30:98:66:2d:60:b6:9b:d5:18:1a:37:3d:07:
         e0:6a:45:17:b6:7b:f7:38:e4:df:f4:e9:66:0d:dc:1c:d8:f8:
         6d:6d:55:a7:3a:81:e0:6e:2c:6d:e5:ee:4d:81:0f:e6:59:e3:
         86:98:07:f0:e5:f5:5c:b2:fd:0d:93:bc:2b:3f:2c:7c:6f:c6:
         3e:f0:55:cd:09:55:93:0b:b3:9f:40:1a:eb:7e:3a:d6:46:90:
         11:b4:2e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 23:34:36 2026 by rpki-client