Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
File:                     -_-IremTZomzJBRb_mO3TVeqrAs.mft (raw, json)
Hash identifier:          qC7yOeq0clVbzdNB5SiRs4kpsiF5EH/vRn+85ek5kew=
Subject key identifier:   8E:0C:AB:58:7F:FF:F6:10:B9:1C:F8:EE:67:76:22:59:7E:CD:57:CB
Authority key identifier: FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B
Certificate issuer:       /CN=A919F525/serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
Certificate serial:       0142
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
Manifest number:          0138
Signing time:             Wed 13 May 2026 05:39:14 +0000
Manifest this update:     Wed 13 May 2026 05:39:13 +0000
Manifest next update:     Wed 20 May 2026 05:39:13 +0000
Files and hashes:         1: -_-IremTZomzJBRb_mO3TVeqrAs.crl (hash: WVr0sLNKwLrfbmOV2eilkTh0qxero31WDzOiJdGKxas=)
                          2: C276060084F011EF9D52F573C4F9AE02.roa (hash: GaX2eTz1KVZJBCRnp0CPc8pGqtf6VC7dkGVx9Fs53F8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl
                          rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:39:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 322 (0x142)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919F525, serialNumber=FBFF88ADE9936689B324145BFE63B74D57AAAC0B
        Validity
            Not Before: May 13 05:39:13 2026 GMT
            Not After : May 20 05:39:13 2026 GMT
        Subject: CN=6a040e82-d740
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:2b:53:49:8d:55:ac:66:b3:83:f0:46:03:f5:
                    32:ef:38:ff:62:54:c1:05:53:4c:f3:d5:b8:b1:4d:
                    8d:93:b9:0d:3d:e5:ac:58:e8:ce:7c:17:49:32:be:
                    cf:ca:c0:07:a1:72:2c:30:14:fc:19:d0:bb:68:33:
                    08:65:9e:9a:7f:c8:6e:07:26:78:d2:ec:05:a8:79:
                    67:58:bc:56:6f:16:c9:60:a5:38:7d:af:c1:7b:d7:
                    0d:0a:79:54:c2:06:36:33:06:f4:3f:f3:17:6d:d0:
                    7b:3d:59:f0:77:34:45:d1:d4:cf:5b:12:ec:f2:cb:
                    e0:d8:88:52:f5:66:6e:d4:e2:7c:b8:f6:5e:a8:29:
                    4d:16:3d:31:a6:9a:a8:99:d7:ef:32:65:9a:39:d7:
                    95:ce:a5:15:e8:72:dd:60:de:a1:12:93:70:dc:e3:
                    1a:15:e3:cb:d9:cd:fa:72:c2:ea:a0:f1:a2:50:50:
                    b2:be:6a:61:cc:de:aa:ae:fa:6a:27:f3:43:f9:5f:
                    43:b6:ec:7f:d9:8e:c5:d8:7c:66:a8:81:bf:8b:a4:
                    b8:87:67:72:6a:66:66:e8:80:2e:a9:18:b8:10:d4:
                    b4:b3:24:f4:75:4b:1d:58:83:82:32:b3:45:96:25:
                    81:3c:f4:a2:52:da:6c:49:21:4e:bf:5a:e0:f6:9d:
                    3d:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0C:AB:58:7F:FF:F6:10:B9:1C:F8:EE:67:76:22:59:7E:CD:57:CB
            X509v3 Authority Key Identifier:
                keyid:FB:FF:88:AD:E9:93:66:89:B3:24:14:5B:FE:63:B7:4D:57:AA:AC:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-_-IremTZomzJBRb_mO3TVeqrAs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919F525/EA02341C84ED11EFB9FF2D5AC4F9AE02/-_-IremTZomzJBRb_mO3TVeqrAs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:63:eb:38:f7:77:77:d0:9c:76:7d:6e:a1:40:05:6f:81:8c:
         9e:23:cd:6b:9c:96:ff:92:2d:ae:74:10:d9:73:f0:b8:50:4d:
         95:f3:66:3c:9a:cd:54:fe:94:3a:c2:4b:7b:f9:56:ec:5c:c2:
         f4:7e:99:6d:b8:57:f0:a8:c3:eb:70:9b:22:7b:ec:82:13:39:
         c1:6d:e4:df:94:42:f6:52:17:04:61:00:8c:ed:de:d0:03:3d:
         cb:85:96:df:dc:29:9a:cd:05:6e:e2:c1:e0:3f:f8:0e:25:32:
         aa:78:56:3b:dc:fd:19:29:a6:ee:c6:8c:f2:cf:2a:05:70:ec:
         6b:2b:b4:81:2c:c2:bd:18:e3:9f:4f:dc:c8:f2:65:be:34:c4:
         b4:18:77:71:c3:94:83:a8:18:8a:d7:36:fc:c3:7f:dd:e9:b4:
         40:5b:62:dd:2b:04:32:c6:32:6b:78:de:90:44:a2:bd:e0:f8:
         d3:1e:a5:b3:71:37:c2:e2:08:2f:79:c9:90:5d:1e:60:a9:3c:
         f8:3e:b3:35:34:63:ce:95:4b:67:03:fb:3c:95:ef:f9:b7:ab:
         52:3f:3e:a4:6b:65:32:e0:f6:fc:5f:d9:82:50:5e:0e:35:4c:
         c1:8b:c0:86:3b:20:52:f2:58:b5:d5:3f:91:9b:8d:ca:37:26:
         7a:4f:9e:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:36:46 2026 by rpki-client