Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
File:                     aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft (raw, json)
Hash identifier:          KaB1z/48yZ2i8FWFpdF8FdjznHbSVzAq7qnBJ1ZtgvE=
Subject key identifier:   56:33:9E:A7:BE:E2:2D:9F:36:C0:C4:1C:A6:00:B8:04:26:62:B7:41
Authority key identifier: 69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49
Certificate issuer:       /CN=A91A80F9/serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
Certificate serial:       0D5C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
Manifest number:          0D51
Signing time:             Tue 12 May 2026 18:02:40 +0000
Manifest this update:     Tue 12 May 2026 18:02:39 +0000
Manifest next update:     Tue 19 May 2026 18:02:39 +0000
Files and hashes:         1: aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl (hash: Xr34gBWDLPLl3FXKP48VUQtx7+MlAitLNvPmOeTjLDg=)
                          2: 3EF3C6EEF8B511EAAD434755C4F9AE02.roa (hash: Ffz0/550gPeWO1uoSNPGxqvr0nsdzbXHysPRag2LkXo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl
                          rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3420 (0xd5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A80F9, serialNumber=696AF4FE036613D651B5E29A09D4FE71B555A449
        Validity
            Not Before: May 12 18:02:39 2026 GMT
            Not After : May 19 18:02:39 2026 GMT
        Subject: CN=6a036b40-4369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:b6:48:4a:e5:75:33:5d:32:ea:06:af:79:34:
                    e3:44:74:9a:16:56:6e:72:23:d6:8d:50:22:8c:fc:
                    c3:25:46:b9:3a:e1:9a:42:74:0d:ef:1e:27:99:20:
                    3d:84:72:a1:e7:cd:33:46:5b:bb:94:e3:ac:51:70:
                    55:a9:e9:99:97:23:8d:62:a2:ad:75:40:b6:97:9f:
                    92:70:db:c1:c2:f4:42:5c:1a:75:2a:11:d6:93:de:
                    c4:10:58:6b:a2:1b:9c:9a:73:8e:ed:8a:8d:91:95:
                    bc:de:0f:57:11:ac:3e:34:b1:dd:6d:9c:3d:09:87:
                    6a:e1:b6:33:c3:36:72:12:52:17:90:46:73:e8:b1:
                    b9:19:a6:4b:ad:8d:a7:79:0b:bc:ab:9f:44:0d:b1:
                    85:9e:96:01:d2:fb:af:94:01:7f:99:0d:b9:73:73:
                    f3:52:6e:d9:c9:ff:1c:1d:47:b2:d8:26:09:3e:88:
                    54:36:a6:ec:88:b4:94:64:ea:b9:60:02:bc:e6:bb:
                    21:5e:d2:17:73:95:02:d8:50:e4:f8:10:f3:09:5d:
                    a3:bb:8e:f4:38:4c:74:67:74:4d:da:ce:5a:08:8d:
                    41:ac:8c:3c:66:0b:f7:fc:7f:c0:8b:eb:db:fa:a5:
                    28:ae:f8:11:12:64:81:bd:dc:a9:43:df:b5:28:df:
                    a8:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:33:9E:A7:BE:E2:2D:9F:36:C0:C4:1C:A6:00:B8:04:26:62:B7:41
            X509v3 Authority Key Identifier:
                keyid:69:6A:F4:FE:03:66:13:D6:51:B5:E2:9A:09:D4:FE:71:B5:55:A4:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aWr0_gNmE9ZRteKaCdT-cbVVpEk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A80F9/49773AD0F4A411E98CC75E37C4F9AE02/aWr0_gNmE9ZRteKaCdT-cbVVpEk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a4:9d:ea:ee:ed:b8:cb:ab:1e:4f:3d:66:1f:c6:78:cb:39:44:
         86:fb:77:f9:d4:25:2a:ad:ce:90:d2:40:7c:8e:03:0c:27:fb:
         41:3e:dc:28:dd:da:7b:20:79:af:d6:49:2b:31:f9:96:73:1c:
         23:18:f3:4d:8e:a2:44:d9:46:1d:fe:8c:cd:69:65:5e:b0:36:
         8a:05:7e:c6:a1:17:78:d0:92:c0:e6:db:2f:83:38:81:cc:3a:
         46:46:fa:eb:58:0f:f2:80:85:99:77:30:67:9f:a7:e4:e0:bd:
         e1:1f:87:bc:9e:d3:bc:1c:27:38:b7:67:72:e4:f1:0e:30:1e:
         25:14:4c:fe:dc:0f:a1:a9:81:dc:a8:80:52:4e:9d:3c:a1:8e:
         83:81:5d:d7:51:bd:bd:ea:cd:42:4b:49:2e:cd:94:cf:63:fc:
         1a:28:9e:1e:65:2a:da:75:18:7b:a4:46:a8:84:03:e1:d4:0c:
         99:05:6a:91:39:89:b9:38:e1:9c:2e:19:d8:1b:31:94:2e:20:
         1e:96:a5:b2:08:d7:80:ba:a3:eb:2f:fa:78:b9:68:c6:67:af:
         f5:8f:ec:42:49:18:df:31:10:ab:5b:15:16:24:57:35:84:4b:
         84:c3:a0:01:40:7d:4d:ac:c3:5f:42:16:33:b0:13:4c:83:5f:
         3c:43:7a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:48:54 2026 by rpki-client