Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
File:                     Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft (raw, json)
Hash identifier:          XFIUydPy/HryyMRyydwBk6AzV2TRWw3xMriM96eDYKI=
Subject key identifier:   D1:9F:CE:56:2D:D5:23:46:C2:6E:DF:53:40:D3:66:68:8B:1A:13:E4
Authority key identifier: 05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D
Certificate issuer:       /CN=A91A3526/serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
Certificate serial:       01D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
Manifest number:          01CC
Signing time:             Wed 13 May 2026 03:51:11 +0000
Manifest this update:     Wed 13 May 2026 03:51:10 +0000
Manifest next update:     Wed 20 May 2026 03:51:10 +0000
Files and hashes:         1: Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl (hash: a679bonxUzeDn1VZ+ijSkumwWCT85hvekOJCSPjaNfQ=)
                          2: 13E4471298B711EE99FD1F09C4F9AE02.roa (hash: CSGjDy/wdYYzGXyvOOUl98bHiR5LO+1hU3+jdzF0bhY=)
                          3: 134D519098B711EE99FD1F09C4F9AE02.roa (hash: TP4JixOOcg9YnuGelQlIMV1MqlMNS4cHb5eiwzX8uV8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:51:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 473 (0x1d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3526, serialNumber=05FD2D519D40CB208937BF8A8E463E6D842CC07D
        Validity
            Not Before: May 13 03:51:10 2026 GMT
            Not After : May 20 03:51:10 2026 GMT
        Subject: CN=6a03f52f-1675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:20:b8:dc:82:92:a7:20:dd:d5:7a:3b:03:2e:
                    e6:71:a8:da:ec:fa:a0:60:87:34:6a:86:d0:3c:2a:
                    31:7c:3f:cc:cb:24:ba:19:0d:80:e3:db:86:ea:5c:
                    98:1e:70:cc:4d:56:d5:f6:fa:d2:0f:00:01:37:e6:
                    e0:7b:dd:37:b4:35:3d:69:c4:d7:7f:58:5f:c0:e4:
                    23:c7:06:08:e3:18:17:13:02:fc:54:22:6c:b4:3f:
                    e9:94:fc:9e:93:1e:b7:1b:6b:c4:f0:a6:48:7a:25:
                    3d:2c:c0:04:f8:98:af:a5:e1:37:74:0a:e6:a9:b2:
                    21:8f:8d:19:5a:fb:1c:b0:b3:92:0c:3d:32:88:77:
                    76:ec:3b:a4:86:80:c4:27:75:92:20:96:ad:ec:5c:
                    c8:0c:ac:43:cd:0c:94:8a:eb:45:03:89:63:68:77:
                    5f:76:51:c0:48:12:28:b5:3a:5d:15:eb:b5:ad:5d:
                    55:99:16:d0:74:7f:1b:68:fa:65:52:b8:08:fc:c2:
                    c2:43:fa:11:22:4b:0e:7e:6a:86:63:9c:dc:82:10:
                    4d:2f:b5:d7:fe:13:9e:55:ce:8b:f9:e0:06:16:df:
                    5f:83:57:e2:c4:24:fe:5c:ee:26:79:de:fb:7d:36:
                    ca:87:80:d7:71:6f:ad:55:c9:91:db:60:55:29:c0:
                    28:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:9F:CE:56:2D:D5:23:46:C2:6E:DF:53:40:D3:66:68:8B:1A:13:E4
            X509v3 Authority Key Identifier:
                keyid:05:FD:2D:51:9D:40:CB:20:89:37:BF:8A:8E:46:3E:6D:84:2C:C0:7D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3526/A13C55CE98B611EE8B490487C4F9AE02/Bf0tUZ1AyyCJN7-KjkY-bYQswH0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:38:11:82:03:1a:70:93:35:14:96:bc:3a:32:26:f3:7d:45:
         2d:8b:01:2f:da:93:a0:51:26:ca:7a:c9:eb:64:cf:11:10:f6:
         ea:55:31:6f:20:e4:b1:20:bf:f4:9f:2a:28:b9:41:b8:61:87:
         55:2c:9b:8c:3a:c6:0b:c8:0b:e0:a1:26:29:ae:c5:82:11:ee:
         ff:ec:85:32:e1:a0:5e:eb:62:fc:77:3b:a2:e2:0b:7f:94:92:
         3b:9f:9e:df:7e:ae:3e:10:1d:bd:c7:d9:c6:f2:f9:c3:11:d3:
         61:96:73:9b:ca:4c:91:c0:aa:63:40:88:0e:2b:a5:30:8e:78:
         d2:de:50:50:9b:72:a2:0e:c2:b4:fd:e6:ea:de:fc:67:4d:bc:
         a4:6f:3e:49:07:16:1f:c8:14:03:94:f1:ae:9b:76:4b:d8:3b:
         cb:c1:f0:3a:13:aa:d0:ff:25:fc:a4:e3:1c:8e:5c:ff:58:01:
         80:8b:28:43:63:2f:02:36:ea:c2:dc:65:aa:1b:a4:73:42:00:
         ba:7b:6f:6b:d9:9f:e8:66:bb:9d:2f:6d:6b:55:ae:9d:f7:57:
         cc:f3:ab:4c:59:b0:98:52:27:50:18:11:1f:e4:52:51:1f:7f:
         db:0c:ff:d5:0b:d3:8d:91:c7:c7:96:04:16:62:07:e6:e8:3a:
         4a:e7:ea:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:48:41 2026 by rpki-client