Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
File:                     tAgYFca67ZihzJUKxvoQvGAFiQI.mft (raw, json)
Hash identifier:          8wJ8JCqC8BuxhfBF0csKDwKo7lqh5LryBTW3lXLztNA=
Subject key identifier:   E5:1E:59:7B:FD:74:CD:CA:45:97:20:F2:0B:4E:C6:78:7D:7D:3D:F3
Authority key identifier: B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02
Certificate issuer:       /CN=A91A3F5D/serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
Certificate serial:       019C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
Manifest number:          0184
Signing time:             Wed 13 May 2026 04:38:37 +0000
Manifest this update:     Wed 13 May 2026 04:38:36 +0000
Manifest next update:     Wed 20 May 2026 04:38:36 +0000
Files and hashes:         1: tAgYFca67ZihzJUKxvoQvGAFiQI.crl (hash: KWwrtOfFEIfKWlGvzh8nZ1/zjaGR+3AlMbuDbc28OJs=)
                          2: C27BAE1E63B411EF9A87155DC4F9AE02.roa (hash: k+syne/qwmIS8QA8cfkIQ/6o3usgazmP314zIWYqprk=)
                          3: 04B0D250076211EFB14D3B12C4F9AE02.roa (hash: YBbzvVhuDe0JBEniZRZQfShMx+qsENyrYUEkIrWxQCw=)
                          4: 03DAC9E4076211EFB14D3B12C4F9AE02.roa (hash: lN2R/Ai1/H4y4rcwjFYf6RmytrpeM9mEWKhNt95uzoM=)
                          5: 052FFA76076211EFB14D3B12C4F9AE02.roa (hash: raANeknaYAFLrEXg5mJ29hPwQZTZdRNH0CFF0rT054Q=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl
                          rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:38:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 412 (0x19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3F5D, serialNumber=B4081815C6BAED98A1CC950AC6FA10BC60058902
        Validity
            Not Before: May 13 04:38:36 2026 GMT
            Not After : May 20 04:38:36 2026 GMT
        Subject: CN=6a04004c-572a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:33:d4:d3:1f:eb:b4:53:41:8a:cd:e8:99:1b:
                    f8:81:cb:f0:7a:6b:bc:36:7c:ee:85:7a:62:05:99:
                    33:1a:e2:af:d3:a0:15:fb:96:59:13:ae:59:52:69:
                    74:0f:7a:2d:43:ff:4e:35:ce:03:39:0c:24:9f:35:
                    d6:9f:11:b1:2c:9f:06:f9:c4:21:6e:d2:82:98:ef:
                    dd:0d:bd:af:6a:f1:62:4e:b1:a7:53:7c:16:c6:28:
                    f4:aa:05:20:dc:5c:d2:66:99:41:85:a5:e3:44:59:
                    bc:ab:f1:cf:20:d1:48:fa:a2:21:f1:57:89:9d:bb:
                    ef:a6:aa:dd:cf:e6:7c:66:1c:d5:4e:a2:73:13:ef:
                    83:90:57:a1:ce:34:54:cd:c6:fb:13:71:dd:21:1d:
                    d3:5c:74:ad:5a:cb:bb:e2:af:98:5d:e5:8f:cc:cd:
                    44:2b:6f:71:ac:ee:7a:d0:9c:a6:51:21:7b:41:95:
                    57:d1:8e:28:32:7d:cf:34:85:5e:5e:bf:2b:f1:fc:
                    d2:60:a3:a9:eb:9d:9d:17:af:7f:ab:a6:48:7a:66:
                    6a:83:41:d6:87:ab:07:f4:c2:cb:5e:1b:3d:34:21:
                    88:f3:e7:18:28:e9:35:f9:d1:50:42:39:dc:42:58:
                    2a:58:a0:a3:46:8b:d2:64:b7:77:a3:db:76:20:f8:
                    e3:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:1E:59:7B:FD:74:CD:CA:45:97:20:F2:0B:4E:C6:78:7D:7D:3D:F3
            X509v3 Authority Key Identifier:
                keyid:B4:08:18:15:C6:BA:ED:98:A1:CC:95:0A:C6:FA:10:BC:60:05:89:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tAgYFca67ZihzJUKxvoQvGAFiQI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3F5D/10F94EF006AB11EF87BFA725C4F9AE02/tAgYFca67ZihzJUKxvoQvGAFiQI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         58:1f:44:04:d2:6e:1f:10:45:a9:11:b2:6b:ec:f3:35:4c:f6:
         e9:3e:f4:72:c8:71:10:26:5c:59:0b:92:15:db:d2:dc:20:9e:
         cc:b2:3d:5b:f0:15:dd:46:9d:a4:fb:ed:19:8b:90:5b:09:29:
         c1:fc:de:3c:0e:64:a7:d8:a7:c8:92:b3:8e:68:9b:14:7b:5d:
         dc:4c:1d:0f:8b:b0:11:58:37:c5:07:10:9b:b0:51:10:2f:c9:
         0c:0c:5b:1a:96:c4:a8:00:b7:14:7b:c2:74:80:4b:5b:63:82:
         74:cc:0b:20:65:5c:fd:ab:81:0f:4f:01:37:db:2f:b1:e0:09:
         85:42:05:eb:5c:cb:e9:7f:7d:9e:d6:39:5a:98:d6:cb:ec:aa:
         d3:9f:3d:8b:b1:b0:cc:3d:b3:ec:28:ef:55:b4:ec:50:ba:af:
         ae:82:37:ea:5b:8f:74:d7:9d:67:18:d4:6e:13:ae:fe:df:dd:
         2e:55:e0:55:1f:a6:ac:13:74:dd:16:75:e8:46:49:d3:0a:08:
         cb:8e:84:62:08:bc:ae:66:5a:e6:f7:1f:48:a2:ab:74:9e:7d:
         fb:df:c4:9f:17:8d:fa:ea:51:b0:c2:f0:5e:1a:94:cc:ab:2f:
         b3:4d:0e:de:5d:c3:c9:dc:8b:c5:6b:41:e4:0f:63:9a:be:c0:
         82:c7:61:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:33:59 2026 by rpki-client