Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
File:                     nAcegU2AsQ4sofcemy5TXDkFy2U.mft (raw, json)
Hash identifier:          tLD22iDn5GGmAmo/JWttUKWSQ5ufva50h9rwHH2olvg=
Subject key identifier:   90:20:6E:EA:21:E4:0D:78:D3:71:F6:D1:C0:30:73:92:D5:C6:CB:82
Authority key identifier: 9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65
Certificate issuer:       /CN=A91A998A/serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
Certificate serial:       015D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
Manifest number:          0146
Signing time:             Mon 11 May 2026 05:34:44 +0000
Manifest this update:     Mon 11 May 2026 05:34:44 +0000
Manifest next update:     Mon 18 May 2026 05:34:44 +0000
Files and hashes:         1: nAcegU2AsQ4sofcemy5TXDkFy2U.crl (hash: p7gmcUN/T5TmvcgBboosEM0Y5fsohbfO554ad6EarfE=)
                          2: F60E5BC87C8711EFB9EB5F5FC4F9AE02.roa (hash: YSZYviBTPxtzDHVeHnT8ow3/nXxU9t04H0K+ZmSVj7U=)
                          3: B6DE83747AE811EF94E01B38C4F9AE02.roa (hash: /Mfb+/GCj01R9lifsGJinmVrLBP5+B8J3/UWQZMFbAU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl
                          rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:34:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 349 (0x15d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A998A, serialNumber=9C071E814D80B10E2CA1F71E9B2E535C3905CB65
        Validity
            Not Before: May 11 05:34:44 2026 GMT
            Not After : May 18 05:34:44 2026 GMT
        Subject: CN=6a016a74-1360
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ec:0c:1d:4c:18:e1:aa:b9:bd:a4:b3:79:32:
                    83:67:08:78:a7:e3:56:ee:f6:ee:4e:bb:e6:0f:86:
                    df:a6:0d:d4:94:b6:af:d1:17:ca:dc:e2:a0:95:21:
                    3d:66:18:59:45:0e:e0:57:34:ac:ce:49:4e:2e:c2:
                    74:02:e8:71:0c:c1:ef:d8:32:e4:5d:80:f6:c5:f4:
                    18:b3:52:5b:2f:e1:17:c5:1c:7d:54:00:46:2d:19:
                    a1:05:54:27:b1:22:d7:d0:15:d7:ba:6a:a0:ba:da:
                    cc:5c:7b:77:db:7a:7a:91:8a:c2:41:c3:1e:74:79:
                    a8:e5:99:c4:32:76:7b:d1:52:c2:fe:dc:98:88:59:
                    dc:c3:38:66:27:88:03:51:2b:14:1c:10:64:90:ce:
                    99:22:c1:28:a2:b9:04:4b:7b:ae:8b:f5:96:76:4b:
                    a0:0b:35:99:db:3b:5c:e8:78:5e:f2:26:79:5f:f1:
                    c7:72:75:15:f3:66:ed:d1:dc:2c:7c:ad:66:d2:02:
                    67:2d:7b:f0:90:74:ef:35:45:cb:d6:26:45:e4:dd:
                    a0:51:dd:78:76:21:0c:fb:25:6c:9f:e4:dd:17:ff:
                    b7:c0:8c:bd:fa:06:4a:a8:7a:00:51:d0:fc:b4:bc:
                    61:3c:93:29:9f:1e:01:14:a3:d9:d9:08:f9:7b:bd:
                    98:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:20:6E:EA:21:E4:0D:78:D3:71:F6:D1:C0:30:73:92:D5:C6:CB:82
            X509v3 Authority Key Identifier:
                keyid:9C:07:1E:81:4D:80:B1:0E:2C:A1:F7:1E:9B:2E:53:5C:39:05:CB:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nAcegU2AsQ4sofcemy5TXDkFy2U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A998A/522CB7347AE811EF9A4A4737C4F9AE02/nAcegU2AsQ4sofcemy5TXDkFy2U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0c:93:30:37:ef:fd:9d:78:db:fd:4a:eb:e9:9e:d7:ef:3d:e6:
         3b:b8:4f:fc:92:2e:c7:b7:41:00:a0:75:f0:06:26:14:ad:fa:
         10:a8:4c:56:a3:25:3e:ca:5a:e2:d2:d4:a6:ae:aa:7b:14:2b:
         f9:42:10:1d:44:de:4c:7c:f9:eb:39:bf:01:ff:02:1a:9f:0a:
         0b:2a:51:17:74:ac:39:82:aa:1d:ec:df:cf:42:ec:23:90:85:
         f1:7f:92:48:91:36:90:e0:26:7e:1c:6c:ba:74:3e:ac:eb:67:
         1e:9e:87:09:9d:a2:82:fd:40:7f:7a:4c:40:39:42:0a:ca:d9:
         97:96:a4:f9:a2:ae:ea:18:f4:ec:8d:4f:44:6d:6a:c4:33:cb:
         cf:9c:86:8a:2d:47:7e:8f:92:f8:08:7c:9e:b7:41:27:d5:f7:
         10:34:f4:87:16:43:ca:88:61:d7:eb:4d:22:80:23:12:b8:26:
         ce:ee:7e:2f:48:29:62:4c:fe:de:dc:84:2b:f1:45:1d:44:8f:
         21:ea:7b:c5:df:8f:85:eb:e2:e2:ea:71:8c:1d:a4:40:f3:a1:
         54:47:f2:e6:da:10:a6:9f:23:b2:8a:8f:26:62:76:da:0a:6a:
         98:95:97:ce:e9:f7:be:11:2a:09:4d:a8:27:2f:03:b2:68:bc:
         27:ca:c4:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:26:47 2026 by rpki-client