Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
File:                     PoReqE4RAwvCoQYTCJefeYoSET8.mft (raw, json)
Hash identifier:          RgoPZb5xAnh2ifgM/WAy56EnBS5u5J2oFlVj7RdByFk=
Subject key identifier:   64:8C:C6:B1:A9:24:53:32:94:C2:34:0E:87:AB:15:0A:E4:96:7B:D4
Authority key identifier: 3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F
Certificate issuer:       /CN=A91A6BF5/serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
Certificate serial:       0CB7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
Manifest number:          0CAC
Signing time:             Tue 12 May 2026 18:33:16 +0000
Manifest this update:     Tue 12 May 2026 18:33:16 +0000
Manifest next update:     Tue 19 May 2026 18:33:16 +0000
Files and hashes:         1: PoReqE4RAwvCoQYTCJefeYoSET8.crl (hash: wWbAOZnbqskdal2IUXxAWdfSoibbKIN5Dtg6e0JI7lE=)
                          2: 03EE880413F511EA8D120C65C4F9AE02.roa (hash: 2QGfkxbn7M0/GCnbZiSq9uZzzvvClpW7C4zygip+ABU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl
                          rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:33:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3255 (0xcb7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6BF5, serialNumber=3E845EA84E11030BC2A1061308979F798A12113F
        Validity
            Not Before: May 12 18:33:16 2026 GMT
            Not After : May 19 18:33:16 2026 GMT
        Subject: CN=6a03726c-f416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:55:d4:5f:90:18:8c:42:a1:2d:63:47:19:6c:
                    ba:c6:4b:47:51:92:56:18:30:5b:02:a0:8f:71:0f:
                    87:6c:4b:e4:85:27:70:4e:79:3e:01:a6:d0:d6:0f:
                    46:6f:e1:13:84:c8:75:35:af:3b:11:0f:2c:35:4f:
                    24:48:70:f7:64:ac:94:4f:f2:1e:70:b8:ac:91:03:
                    ec:80:85:c3:09:d5:c5:98:c6:27:a7:c4:f2:fe:25:
                    42:04:b8:3d:12:5f:9e:90:9f:8d:90:e9:61:f8:d2:
                    60:bc:60:b6:9b:a5:21:75:5f:ae:e6:f1:5a:14:b4:
                    8b:d8:f1:be:9d:ea:84:e3:cc:83:12:cd:35:4d:85:
                    1f:aa:e6:29:55:be:7d:bf:53:f4:23:44:08:93:48:
                    83:98:c9:dc:f9:86:86:c2:44:f9:bd:e9:9c:01:5a:
                    37:6a:12:c7:38:eb:57:1a:43:c7:9e:64:bf:40:41:
                    b3:f9:13:54:17:ee:60:e4:30:8b:af:37:54:ed:b3:
                    da:06:c0:39:98:13:3a:8d:7f:dd:eb:d0:81:bd:b1:
                    e3:6d:76:65:a3:3b:89:69:c3:d1:68:26:30:5b:a1:
                    04:8f:ff:d4:d9:fa:b0:f7:dc:17:5b:c2:98:ad:24:
                    47:07:be:b7:28:59:60:e8:61:93:a1:46:01:08:28:
                    b8:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8C:C6:B1:A9:24:53:32:94:C2:34:0E:87:AB:15:0A:E4:96:7B:D4
            X509v3 Authority Key Identifier:
                keyid:3E:84:5E:A8:4E:11:03:0B:C2:A1:06:13:08:97:9F:79:8A:12:11:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/PoReqE4RAwvCoQYTCJefeYoSET8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6BF5/9D0B422213F311EA80B3745FC4F9AE02/PoReqE4RAwvCoQYTCJefeYoSET8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         bc:35:a4:be:32:1f:f9:1c:70:63:80:07:33:bc:bf:d2:25:ef:
         3a:79:63:6c:35:e8:e6:ee:85:ce:b0:ac:2c:27:17:c9:c9:56:
         68:47:66:53:1d:e9:9b:ad:72:11:ab:42:57:70:7d:87:2b:42:
         c8:5f:fa:38:b0:a2:dd:b1:db:7d:e9:d0:5f:45:92:98:c8:1e:
         dd:e9:3d:4f:c5:f1:57:95:2d:5d:87:11:65:0b:e7:ae:16:35:
         f0:4b:94:61:aa:a9:3a:65:37:ca:11:fc:32:9c:4d:61:48:8b:
         25:20:2b:8a:71:26:e4:ec:a4:2b:83:58:64:53:b9:ed:2c:b9:
         2d:a6:78:9e:93:7b:2b:f8:97:60:a8:2d:da:ec:cc:a3:29:33:
         b7:b8:82:a8:a8:b4:f1:4a:67:1c:33:b8:da:ac:c8:87:98:2b:
         3c:45:53:5c:da:45:72:a4:31:42:0e:98:e3:ec:b9:e9:9f:88:
         aa:b3:04:95:41:de:a0:ed:52:a1:9a:21:df:84:1a:79:5a:8c:
         a7:0e:29:dd:7b:7d:4a:d5:65:6f:40:8b:00:2b:32:cc:db:ec:
         7b:aa:2d:40:29:0d:f3:a2:6b:b1:33:09:58:93:cb:f6:ed:32:
         53:cb:e9:59:17:96:11:a5:bd:96:32:3d:7c:ad:63:b8:03:ab:
         e7:35:e8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:25 2026 by rpki-client