Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
File:                     x5XlnAMMfJKfy-R0Gfxexp4frP0.mft (raw, json)
Hash identifier:          i4bauNLNNHEvMoeNxpsCSw2IEzIdEEK37XfpCiO9hkA=
Subject key identifier:   4A:AD:90:6F:6E:73:4F:78:01:4D:C7:61:60:E8:89:82:42:3A:32:53
Authority key identifier: C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD
Certificate issuer:       /CN=A91A3FEB/serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
Certificate serial:       0806
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
Manifest number:          07FE
Signing time:             Tue 12 May 2026 21:16:39 +0000
Manifest this update:     Tue 12 May 2026 21:16:39 +0000
Manifest next update:     Tue 19 May 2026 21:16:39 +0000
Files and hashes:         1: x5XlnAMMfJKfy-R0Gfxexp4frP0.crl (hash: jDKReD2XMI+ypRE9fSKH/LkWKvCyX+3ItaqlTs6JC+g=)
                          2: B722FC542A0411EB992DD32EC4F9AE02.roa (hash: 55CxpWCtuoXOi6t/gybs+bucccea1BToqnuBzxE+HNE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl
                          rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:16:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2054 (0x806)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A3FEB, serialNumber=C795E59C030C7C929FCBE47419FC5EC69E1FACFD
        Validity
            Not Before: May 12 21:16:39 2026 GMT
            Not After : May 19 21:16:39 2026 GMT
        Subject: CN=6a0398b7-93b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c0:a0:36:5f:f4:2a:7c:60:99:f2:b2:8f:6b:
                    31:b6:0c:6a:c7:75:ea:04:15:4e:7d:41:99:4f:1a:
                    f9:08:e2:f1:2a:bf:6c:cf:60:d2:d2:a0:26:63:14:
                    c0:1a:63:77:6e:b2:bb:74:09:c2:66:c4:65:d4:a8:
                    86:a8:1e:52:b7:62:13:11:c5:39:49:20:5e:30:6b:
                    0f:f3:34:21:d2:97:d9:6f:d5:1b:70:20:63:66:15:
                    09:85:04:ff:81:c1:2b:cf:96:6f:91:86:24:f4:d5:
                    99:f8:18:60:6d:78:e2:71:62:ae:e0:17:22:58:9d:
                    f6:c8:db:44:c7:b2:ef:88:d2:3f:5f:74:88:e5:1c:
                    8e:fb:12:17:f7:e9:4d:83:ef:8e:a9:28:2d:43:7f:
                    32:df:b1:0b:35:cb:ca:9b:23:16:94:b7:c4:a8:b5:
                    e0:f8:62:de:11:09:7a:eb:86:f7:59:4e:69:56:2b:
                    97:d8:24:14:a5:1e:4e:3d:2b:63:dc:fb:68:02:18:
                    f5:45:ae:09:da:3a:8f:7e:cf:66:f6:6a:78:b3:ae:
                    85:cc:e3:30:73:c8:a7:91:e1:e5:f3:ba:1b:7f:4c:
                    3a:9a:2c:17:2d:68:d1:26:8e:50:9a:c6:2d:5f:91:
                    a9:cf:01:4c:3b:60:b6:13:0e:78:e7:44:47:81:02:
                    8d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:AD:90:6F:6E:73:4F:78:01:4D:C7:61:60:E8:89:82:42:3A:32:53
            X509v3 Authority Key Identifier:
                keyid:C7:95:E5:9C:03:0C:7C:92:9F:CB:E4:74:19:FC:5E:C6:9E:1F:AC:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/x5XlnAMMfJKfy-R0Gfxexp4frP0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A3FEB/B018AD96291911EB9854985CC4F9AE02/x5XlnAMMfJKfy-R0Gfxexp4frP0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:41:5d:62:17:f4:d2:f3:c1:31:e0:b5:e2:92:10:a2:b6:72:
         e7:5e:ba:db:b9:2e:99:70:e2:1a:5b:0b:2a:93:d4:67:6d:c1:
         9c:16:56:47:22:4b:f2:f3:61:64:98:e2:3d:bc:b6:fa:8f:50:
         29:d8:97:9d:9e:3c:75:46:2f:c9:6f:f1:1e:4f:14:de:18:fb:
         c1:c0:96:94:c5:66:be:2a:74:d3:42:2f:79:d0:1d:7a:60:7f:
         33:27:b1:4e:a4:94:62:3a:57:7d:50:bf:e0:9f:07:79:5c:80:
         a0:7e:2f:6c:32:24:ed:cc:50:6c:3f:16:85:8e:9f:ac:d3:46:
         c3:7d:c5:c5:c0:7a:49:c1:0a:23:e6:57:a7:7a:32:59:30:4f:
         da:59:7b:81:87:23:62:60:ee:a1:7d:6e:0e:fb:c5:75:6b:a9:
         00:8e:14:28:58:5d:63:b5:35:9c:72:59:2e:d6:41:58:c3:69:
         c7:eb:49:4f:05:09:e8:a8:a6:19:9c:c9:5a:97:9c:dd:6e:05:
         e5:35:20:8f:59:cb:4e:46:d4:b4:12:94:dd:d0:d2:8e:b9:f5:
         78:c9:00:ad:5c:c7:c5:93:d5:62:22:85:cc:c3:3f:3c:4a:4a:
         7b:d3:26:f0:ea:90:78:ba:b2:a8:80:ac:71:5e:cd:da:11:c0:
         9c:09:0d:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:42:24 2026 by rpki-client