Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
File:                     j11eWHmnUVjyz_syrdlEcfl0GD8.mft (raw, json)
Hash identifier:          urwX63Iu9l4V94Y4CTzJbUTZTUk0r8XnUMul3byPg4Y=
Subject key identifier:   A9:4C:3A:14:9F:E9:E9:3D:AA:25:38:BE:4C:95:A7:6F:4D:E5:1B:56
Authority key identifier: 8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F
Certificate issuer:       /CN=A91ABEAC/serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
Certificate serial:       035D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
Manifest number:          0356
Signing time:             Wed 13 May 2026 01:02:45 +0000
Manifest this update:     Wed 13 May 2026 01:02:45 +0000
Manifest next update:     Wed 20 May 2026 01:02:45 +0000
Files and hashes:         1: j11eWHmnUVjyz_syrdlEcfl0GD8.crl (hash: 7lJtcYWxYEpaIxiRvOdCKHb6eiaydqLZ5dnJf0FoxY0=)
                          2: 7F64C44645A511ED93E3C45BC4F9AE02.roa (hash: D722CR8ebcqKNXrK+mpZqBYonCFXKUy8xzYz+EwUymM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl
                          rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:02:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 861 (0x35d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABEAC, serialNumber=8F5D5E5879A75158F2CFFB32ADD94471F974183F
        Validity
            Not Before: May 13 01:02:45 2026 GMT
            Not After : May 20 01:02:45 2026 GMT
        Subject: CN=6a03cdb5-db0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:94:50:0c:f0:50:d8:ec:48:a3:61:2b:e4:6f:
                    f2:1b:fa:49:97:64:61:ff:46:f8:45:71:45:b0:82:
                    ae:e0:63:eb:6a:2f:4e:b6:fe:fb:9f:ee:f5:60:57:
                    4c:cf:d3:d4:f9:67:8a:cb:c0:3b:45:87:5b:df:0c:
                    28:10:6a:33:c2:bb:0d:22:3c:6e:8f:60:cb:5e:5f:
                    59:90:87:91:85:7b:4c:04:1b:05:6e:ce:d9:6e:e7:
                    8d:74:ae:d2:51:ad:6b:8f:1d:ee:d3:30:63:f4:65:
                    cc:17:7c:0c:ba:9b:ec:d2:75:82:2a:42:ab:c2:b4:
                    41:6d:23:80:52:cf:96:af:48:3d:6d:8b:85:a2:60:
                    4b:5c:b4:9e:c1:2e:f9:eb:86:04:42:54:5c:a5:0d:
                    db:7a:99:78:ec:66:eb:28:19:3b:ef:38:02:79:2e:
                    3b:aa:ba:03:f6:22:e5:5f:7e:a0:8c:42:32:14:88:
                    93:22:bb:75:19:2c:d4:b3:60:0d:d1:43:9f:74:af:
                    a3:86:5c:b0:9e:5a:c2:1f:db:38:da:c4:fc:04:10:
                    f2:99:3c:9a:0b:bb:05:16:07:74:fa:13:1d:8a:85:
                    95:64:80:65:18:45:f7:6f:75:d3:f7:69:a3:11:c6:
                    d2:8f:a7:55:f0:ae:30:cc:31:25:db:70:a1:3f:db:
                    14:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4C:3A:14:9F:E9:E9:3D:AA:25:38:BE:4C:95:A7:6F:4D:E5:1B:56
            X509v3 Authority Key Identifier:
                keyid:8F:5D:5E:58:79:A7:51:58:F2:CF:FB:32:AD:D9:44:71:F9:74:18:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/j11eWHmnUVjyz_syrdlEcfl0GD8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABEAC/1CD146B0FD1111ECAD8B5228C4F9AE02/j11eWHmnUVjyz_syrdlEcfl0GD8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:42:e4:fc:3a:42:1d:b6:3e:11:e1:1c:d1:14:0a:32:53:6d:
         f3:6b:5a:47:77:d8:80:7a:77:de:59:36:19:88:8a:c3:84:ca:
         ad:23:8c:23:68:e9:37:43:7d:74:d0:c0:cd:02:b0:24:4c:f5:
         2b:8f:c2:af:db:de:c4:1e:6f:76:02:25:96:09:d2:c5:e5:77:
         cd:24:08:8f:f9:c7:2d:19:6d:b5:f0:5f:8d:e9:ad:3e:fc:03:
         96:49:dd:5d:84:7f:4c:d3:bc:84:4c:1b:a8:1d:a5:f6:a1:60:
         d1:bd:fc:d1:4a:55:29:d7:b3:c7:78:dc:fd:ab:1a:f3:75:f4:
         84:04:9a:dd:f7:7d:75:fd:8c:ce:6e:b3:84:b3:55:a7:05:f2:
         0c:f5:2f:39:38:67:d5:33:e9:a7:5d:6a:ef:eb:28:e2:5d:7e:
         68:7a:3e:30:e7:8e:90:db:26:ff:b4:aa:be:91:8e:7d:27:39:
         16:88:ea:9b:45:c4:75:93:3e:52:13:11:9c:96:4d:42:13:66:
         7a:40:8d:2e:a0:c9:9c:de:fd:70:24:84:47:70:29:65:6b:fd:
         6d:c6:ca:32:75:8b:d1:e5:eb:1d:0d:24:b1:f9:ad:b3:11:1b:
         7d:9e:6c:4b:0c:37:ae:a7:6c:60:a4:56:07:c5:6b:6c:60:23:
         d9:ea:22:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:22 2026 by rpki-client