Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
File:                     mraG48KZqn5EVUk0lbRrpadECZ0.mft (raw, json)
Hash identifier:          NDjLu9CwVesZYZ7F52yiUNrRe3zzaMSvFoHDNyhBA9I=
Subject key identifier:   A9:F3:F1:88:72:CD:87:AB:91:A9:3E:6B:33:E4:AD:93:B8:2B:0B:1F
Authority key identifier: 9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D
Certificate issuer:       /CN=A91A6D8B/serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
Certificate serial:       01F4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
Manifest number:          01EA
Signing time:             Wed 13 May 2026 03:27:55 +0000
Manifest this update:     Wed 13 May 2026 03:27:54 +0000
Manifest next update:     Wed 20 May 2026 03:27:54 +0000
Files and hashes:         1: mraG48KZqn5EVUk0lbRrpadECZ0.crl (hash: RDDYLZMkEPF534YLyL6W9df5qcgjcX1pNAN5djkTIjI=)
                          2: D633730A5AD711EF8665FF81C4F9AE02.roa (hash: +y5rCicZP5PLUrf/IaiEUvKxVk8tGpptOs2ZUbAFH7g=)
                          3: D6A69CF45AD711EF8665FF81C4F9AE02.roa (hash: 1bLjvUFKAie+LhFsglKp4ujOu6m4XQrp7oBF2mMsatU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl
                          rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 03:27:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 500 (0x1f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A6D8B, serialNumber=9AB686E3C299AA7E4455493495B46BA5A744099D
        Validity
            Not Before: May 13 03:27:54 2026 GMT
            Not After : May 20 03:27:54 2026 GMT
        Subject: CN=6a03efba-d09a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:51:49:34:60:28:32:43:83:58:f5:5d:6e:3a:
                    43:c6:cc:3f:ad:3b:2c:6e:05:03:b0:ab:41:ac:6a:
                    4d:01:4e:69:e8:e5:9a:c5:b5:57:4c:c1:46:ff:6d:
                    b3:11:b3:61:15:08:db:f2:ae:01:2d:59:d3:2a:a6:
                    1f:78:3f:fa:23:e3:22:b0:4d:09:f9:1d:14:3b:50:
                    0e:0c:9f:ef:1d:03:8d:85:80:c8:16:7c:cf:a5:43:
                    a5:c3:6d:ed:a2:bd:af:be:e1:27:02:38:08:d5:43:
                    bf:aa:6b:55:d3:6b:ba:0b:05:ff:72:2f:ae:f4:96:
                    29:e4:68:b1:0c:35:f6:76:01:69:3c:10:e2:80:c8:
                    2a:94:ad:cb:1d:23:f6:19:3b:c7:70:3b:4a:72:e1:
                    ad:66:ab:3e:a5:0f:89:42:a6:ad:d2:61:e4:1e:3d:
                    ec:e4:46:1c:a4:e0:85:ba:9b:c9:a5:8d:02:21:57:
                    52:e0:a6:5c:8c:91:d9:69:c7:54:ea:e8:af:90:92:
                    b4:f0:ae:b2:92:09:89:35:be:7f:09:99:27:28:8a:
                    1b:91:dd:78:77:a6:ba:aa:35:58:2d:78:8d:db:e4:
                    72:f4:17:0e:92:82:c9:fe:49:11:1f:64:53:20:e8:
                    42:42:2b:73:b1:19:f1:47:0d:e5:f8:06:c9:16:f2:
                    58:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F3:F1:88:72:CD:87:AB:91:A9:3E:6B:33:E4:AD:93:B8:2B:0B:1F
            X509v3 Authority Key Identifier:
                keyid:9A:B6:86:E3:C2:99:AA:7E:44:55:49:34:95:B4:6B:A5:A7:44:09:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mraG48KZqn5EVUk0lbRrpadECZ0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A6D8B/B2F235B2672011EEA146C22DC4F9AE02/mraG48KZqn5EVUk0lbRrpadECZ0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         92:28:54:f0:eb:55:f8:66:55:76:2a:57:63:3d:12:9e:2d:03:
         8f:9a:9f:95:26:17:60:6a:f1:22:c3:35:12:42:1d:a3:94:d0:
         ac:01:9c:27:8b:25:db:d5:f1:8d:fa:26:28:02:f0:0f:92:a3:
         c0:a2:47:11:e4:c2:4e:7e:0f:3e:09:cb:43:89:cd:ce:6f:0b:
         f2:b0:95:47:ce:53:db:b7:bb:1d:85:21:95:bf:dc:c1:a8:9e:
         3e:fb:f2:f1:fc:52:7f:0b:07:0b:6e:27:26:4a:97:45:18:17:
         8a:6c:49:ac:5a:68:d3:c2:10:ac:ee:fa:f2:05:00:5b:c7:e9:
         73:12:74:92:7a:f4:46:53:19:e4:ab:fc:fb:bb:e0:44:21:13:
         f8:d8:eb:7e:45:f8:ef:82:b6:57:f4:13:f1:e6:d8:a1:b8:a5:
         d0:06:a9:59:82:fa:1f:2d:73:73:25:72:70:2b:59:03:f8:52:
         e4:7c:ca:ca:75:0a:94:9b:6f:b4:f5:6f:b4:0b:9d:de:25:f3:
         c6:80:5e:48:aa:30:4d:6a:6a:0f:5c:5a:4b:de:03:35:b4:c6:
         b3:5b:87:5c:8d:77:e2:72:90:d4:14:5e:64:84:bc:87:ae:26:
         eb:b2:70:cd:18:f9:8e:84:38:02:d4:ce:74:84:c4:2c:3a:22:
         2e:3f:14:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:45:08 2026 by rpki-client