Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
File:                     9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft (raw, json)
Hash identifier:          fv8iVQ0LL/IDmZ+sAFiC1sHvRJTAg652ftY3i8a3bsk=
Subject key identifier:   D4:06:3D:B2:CD:AD:C8:4A:58:16:FC:97:69:34:3D:0A:2C:26:6C:8C
Authority key identifier: F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6
Certificate issuer:       /CN=A91A5B07/serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
Certificate serial:       03F1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
Manifest number:          03DF
Signing time:             Wed 13 May 2026 00:42:28 +0000
Manifest this update:     Wed 13 May 2026 00:42:27 +0000
Manifest next update:     Wed 20 May 2026 00:42:27 +0000
Files and hashes:         1: 9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl (hash: YIcQ9EQbzEEgOkO0HHj31gysf77b4qzp1uKJstX1sh0=)
                          2: 685F0CBA031211F1BBBCC8A9163D8C67.roa (hash: NxlgbUimOupPTjcXRwh01KDTfYdr+Bp3csROuFT6/PM=)
                          3: 3A904D64210111F181AE0DC81F3D8C67.roa (hash: t+AIRVihJ3hRRsLPqK0l+yDAoSi5gLyuvLWG6FytYCE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl
                          rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:42:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1009 (0x3f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A5B07, serialNumber=F4FFFE60E7D63BE4F1819BBA84CD5B20474C91C6
        Validity
            Not Before: May 13 00:42:27 2026 GMT
            Not After : May 20 00:42:27 2026 GMT
        Subject: CN=6a03c8f3-a8de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:71:2f:63:53:af:d7:b4:8d:fe:0d:07:1c:21:
                    92:1f:b6:fd:d2:53:71:d7:e4:85:d9:9e:d6:c4:c4:
                    ce:1a:6e:39:db:f8:18:7b:73:18:ed:bd:1c:3b:c3:
                    4d:e7:71:1f:6a:fb:04:cb:57:fd:29:3a:fd:cc:65:
                    7c:90:e5:28:4c:61:be:30:fa:aa:a7:80:3d:f7:93:
                    20:9e:09:d3:52:03:fd:fa:ee:e7:a4:6a:e3:81:c6:
                    95:81:b9:f5:8a:4e:bb:28:c7:74:74:53:20:b0:42:
                    ad:9f:81:c9:07:96:79:1d:c5:bb:15:67:19:35:20:
                    c1:22:a9:ad:43:95:64:dc:d7:8d:f9:27:19:c4:d7:
                    3b:06:35:66:81:4a:bf:c1:ac:8a:d5:43:0b:32:b6:
                    23:fd:18:85:ad:13:89:1e:65:69:f4:fd:77:c2:79:
                    9d:15:3f:a9:31:fe:ea:9e:27:ce:e5:61:a8:72:89:
                    50:59:ff:8a:ec:1c:f8:c0:67:5c:d3:27:d1:97:52:
                    11:23:91:72:1a:0e:db:be:3c:80:26:3a:31:93:37:
                    4f:30:1b:1e:ad:71:9f:3e:0b:bb:9c:26:0a:58:13:
                    11:69:d1:6e:41:79:7c:c5:f3:07:9a:0d:2f:df:d4:
                    a6:04:f2:d3:14:16:97:df:fe:c2:28:ff:a6:a7:73:
                    e7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:06:3D:B2:CD:AD:C8:4A:58:16:FC:97:69:34:3D:0A:2C:26:6C:8C
            X509v3 Authority Key Identifier:
                keyid:F4:FF:FE:60:E7:D6:3B:E4:F1:81:9B:BA:84:CD:5B:20:47:4C:91:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9P_-YOfWO-TxgZu6hM1bIEdMkcY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A5B07/72A48A76CCE111ECBBA05C2CC4F9AE02/9P_-YOfWO-TxgZu6hM1bIEdMkcY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:36:a0:27:11:b0:ac:9a:6b:fc:64:43:1b:22:3b:41:eb:62:
         d5:bd:99:4b:2e:bb:56:7c:d4:b4:fa:3f:63:06:55:ab:31:ad:
         65:03:2b:e4:27:44:2e:39:d4:06:ea:29:43:3b:02:2f:73:3b:
         f9:8e:86:0e:dc:d4:55:02:75:86:5c:09:b9:29:3a:7d:63:01:
         73:45:68:80:ba:9a:dc:83:7d:25:37:5c:b5:ec:90:4e:d2:33:
         fe:58:32:b5:25:19:01:ab:71:ee:ef:a2:ba:69:86:09:41:c7:
         ea:e5:b6:20:58:87:f5:e6:58:24:39:f1:72:63:d0:c7:38:09:
         bb:ea:b1:97:74:24:99:65:3f:f3:26:fa:c4:95:0f:f1:24:62:
         00:45:6b:7c:b4:de:37:64:22:ff:9d:5f:2d:78:52:5b:1b:f7:
         2b:8b:41:eb:29:58:4a:d6:82:64:49:cb:8d:6e:39:86:19:99:
         e1:c2:06:bf:a5:c6:f7:27:67:90:05:e1:06:20:da:e7:fa:75:
         33:80:ef:27:42:b5:6f:ed:ca:16:db:b6:2b:7a:1e:d3:0a:4c:
         60:9e:95:ea:4e:e5:d3:cf:9f:7c:c9:c8:36:33:34:a4:e5:50:
         57:f0:67:ae:87:d0:9c:b5:0f:94:17:87:50:19:6e:91:b3:8c:
         25:f8:ee:25
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA/EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QTVCMDcxMTAvBgNVBAUTKEY0RkZGRTYwRTdENjNCRTRGMTgxOUJCQTg0Q0Q1QjIw
NDc0QzkxQzYwHhcNMjYwNTEzMDA0MjI3WhcNMjYwNTIwMDA0MjI3WjAYMRYwFAYD
VQQDEw02YTAzYzhmMy1hOGRlMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvHEvY1Ov17SN/g0HHCGSH7b90lNx1+SF2Z7WxMTOGm452/gYe3MY7b0cO8NN
53EfavsEy1f9KTr9zGV8kOUoTGG+MPqqp4A995MgngnTUgP9+u7npGrjgcaVgbn1
ik67KMd0dFMgsEKtn4HJB5Z5HcW7FWcZNSDBIqmtQ5Vk3NeN+ScZxNc7BjVmgUq/
wayK1UMLMrYj/RiFrROJHmVp9P13wnmdFT+pMf7qnifO5WGocolQWf+K7Bz4wGdc
0yfRl1IRI5FyGg7bvjyAJjoxkzdPMBserXGfPgu7nCYKWBMRadFuQXl8xfMHmg0v
39SmBPLTFBaX3/7CKP+mp3PnYQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFNQGPbLN
rchKWBb8l2k0PQosJmyMMB8GA1UdIwQYMBaAFPT//mDn1jvk8YGbuoTNWyBHTJHG
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBNUIwNy83MkE0OEE3NkND
RTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08tVHhnWnU2aE0xYklFZE1r
Y1kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzlQXy1ZT2ZXTy1UeGdadTZoTTFiSUVkTWtjWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
NUIwNy83MkE0OEE3NkNDRTExMUVDQkJBMDVDMkNDNEY5QUUwMi85UF8tWU9mV08t
VHhnWnU2aE0xYklFZE1rY1kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhDagJxGwrJpr/GRDGyI7Qeti1b2ZSy67VnzUtPo/YwZVqzGtZQMr5CdELjnU
BuopQzsCL3M7+Y6GDtzUVQJ1hlwJuSk6fWMBc0VogLqa3IN9JTdcteyQTtIz/lgy
tSUZAatx7u+iummGCUHH6uW2IFiH9eZYJDnxcmPQxzgJu+qxl3QkmWU/8yb6xJUP
8SRiAEVrfLTeN2Qi/51fLXhSWxv3K4tB6ylYStaCZEnLjW45hhmZ4cIGv6XG9ydn
kAXhBiDa5/p1M4DvJ0K1b+3KFtu2K3oe0wpMYJ6V6k7l08+ffMnINjM0pOVQV/Bn
rofQnLUPlBeHUBlukbOMJfjuJQ==
-----END CERTIFICATE-----
Generated at Wed May 13 05:29:21 2026 by rpki-client