Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
File:                     5esYDNbcUWxm01KwR7npxaUCcOM.mft (raw, json)
Hash identifier:          l6ktwpjYVqRqyISRQYflrrBDs2+1hVzYzx4h+is2kzI=
Subject key identifier:   F8:05:1A:4B:FA:F1:75:D9:9E:46:AD:0E:E8:DE:62:24:07:B3:6C:2D
Authority key identifier: E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3
Certificate issuer:       /CN=A91ABFD9/serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
Certificate serial:       0985
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
Manifest number:          095A
Signing time:             Tue 12 May 2026 20:10:06 +0000
Manifest this update:     Tue 12 May 2026 20:10:06 +0000
Manifest next update:     Tue 19 May 2026 20:10:06 +0000
Files and hashes:         1: 5esYDNbcUWxm01KwR7npxaUCcOM.crl (hash: srViml9At9H1sqc5qOkEnVA4eIVqKlzoT+fkdvOzTag=)
                          2: E22ECDEAC4F811EAB8D31113C4F9AE02.roa (hash: 32WeveE7dnAV5izIj802rGBUdP9CIosFzoeZQ6CO6QU=)
                          3: 36945EC2232711EBA0F14F17C4F9AE02.roa (hash: lOAwTW5XkFCPCUk/gWDqiJqpMlb51sjQCmzCQhzil4Q=)
                          4: 6AE50E1C21E011EBBF36CD21C4F9AE02.roa (hash: lMhUzM6SrZqnaSb3sq+PG5FZ88KlD5XwOD16PSgtpr8=)
                          5: E2E21364C4F811EAB8D31113C4F9AE02.roa (hash: 9iL3rgMf4vh9lsgcWbb8FKQC+wyReC1nKI6xvJ+GiO0=)
                          6: F1A54AC47A5611EB876D281FC4F9AE02.roa (hash: k0ZucBj+etuvwgMyyarMxzRHSJzy5ua857nN2Fqt8Kw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl
                          rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:10:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2437 (0x985)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ABFD9, serialNumber=E5EB180CD6DC516C66D352B047B9E9C5A50270E3
        Validity
            Not Before: May 12 20:10:06 2026 GMT
            Not After : May 19 20:10:06 2026 GMT
        Subject: CN=6a03891e-182f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:73:79:6b:e3:0d:bd:5d:9f:d5:ad:28:bc:01:
                    8f:51:e0:13:f8:f3:d0:52:33:00:e5:59:a0:cc:7d:
                    e5:dc:9d:d5:da:01:88:9c:d0:e9:8f:da:9a:c3:67:
                    37:a5:1a:43:c5:1e:b8:19:0e:66:20:cf:08:ba:ed:
                    bb:80:97:f1:07:a0:6d:00:b8:f1:e1:e2:e9:32:5a:
                    ba:a7:dd:48:7c:40:c8:70:bb:fa:d3:a1:1e:80:1e:
                    f8:1e:cb:82:80:f0:d7:11:0f:cc:10:08:2d:4c:11:
                    3f:47:21:99:da:b3:1c:25:2b:17:7d:28:64:d8:ad:
                    6b:68:59:91:59:6c:28:1c:b8:3f:95:d5:be:05:01:
                    a3:b0:a8:c3:48:fb:6a:92:34:e6:32:88:75:80:66:
                    94:e6:61:c1:f4:c0:ce:4a:21:7b:4f:40:50:4c:7c:
                    a5:04:5c:dc:94:02:64:97:78:0a:a6:cf:8c:83:85:
                    20:d3:b5:93:28:0e:40:f5:b7:8b:fb:71:bc:a8:b0:
                    06:72:40:06:da:65:d3:2a:f2:db:a8:bb:74:88:82:
                    ee:b7:dd:19:81:fa:2e:a9:a5:7f:dd:fa:11:68:fe:
                    59:2f:58:44:d2:75:c7:37:99:eb:54:f7:80:74:8c:
                    2f:83:61:fd:c5:b2:f8:75:9f:c0:8e:78:32:67:bf:
                    74:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:05:1A:4B:FA:F1:75:D9:9E:46:AD:0E:E8:DE:62:24:07:B3:6C:2D
            X509v3 Authority Key Identifier:
                keyid:E5:EB:18:0C:D6:DC:51:6C:66:D3:52:B0:47:B9:E9:C5:A5:02:70:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5esYDNbcUWxm01KwR7npxaUCcOM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ABFD9/4AE8041EB9D711EA9CF51E5FC4F9AE02/5esYDNbcUWxm01KwR7npxaUCcOM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:d9:51:1f:51:03:52:38:0a:1e:49:1b:22:f4:cf:2e:fa:92:
         7f:c6:f0:a4:8d:12:ed:fa:14:21:48:ec:ba:32:f1:a5:1c:35:
         04:10:54:74:ff:5e:76:89:22:98:35:64:0b:24:07:f7:19:11:
         6c:fa:d6:96:29:3d:94:55:41:5a:93:03:ed:54:aa:73:11:e8:
         4b:d7:eb:70:c9:4a:8b:c6:b0:34:c5:c9:2a:80:be:c7:70:93:
         fa:03:a4:51:03:b9:18:b0:8f:82:90:39:85:61:c6:f9:da:2a:
         77:d9:25:28:1b:9f:1c:84:5d:83:f0:ed:ba:f5:30:e0:bd:6e:
         fc:11:c4:cd:04:e0:b5:7f:aa:63:2b:8a:a0:0e:a6:09:bb:8b:
         d7:a8:35:d9:f0:0f:aa:ef:cf:67:64:10:3b:40:8d:77:c4:f6:
         0e:f4:d7:33:03:72:0f:5b:45:64:33:df:fa:56:3e:03:bf:b6:
         08:fe:c1:c7:ae:19:c5:f7:b4:b6:23:a7:04:80:1e:e9:96:f5:
         89:b5:b6:27:d2:2c:b9:57:8d:d2:94:f4:a1:e8:6c:1e:4d:06:
         66:d1:74:88:62:3d:ce:f8:b1:f9:a5:f3:64:07:1b:6e:1a:84:
         2c:6f:4e:d4:c9:c1:58:02:be:6e:f1:39:5e:20:dd:83:c5:4f:
         a2:86:63:d0
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCYUwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QUJGRDkxMTAvBgNVBAUTKEU1RUIxODBDRDZEQzUxNkM2NkQzNTJCMDQ3QjlFOUM1
QTUwMjcwRTMwHhcNMjYwNTEyMjAxMDA2WhcNMjYwNTE5MjAxMDA2WjAYMRYwFAYD
VQQDEw02YTAzODkxZS0xODJmMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA73N5a+MNvV2f1a0ovAGPUeAT+PPQUjMA5VmgzH3l3J3V2gGInNDpj9qaw2c3
pRpDxR64GQ5mIM8Iuu27gJfxB6BtALjx4eLpMlq6p91IfEDIcLv606EegB74HsuC
gPDXEQ/MEAgtTBE/RyGZ2rMcJSsXfShk2K1raFmRWWwoHLg/ldW+BQGjsKjDSPtq
kjTmMoh1gGaU5mHB9MDOSiF7T0BQTHylBFzclAJkl3gKps+Mg4Ug07WTKA5A9beL
+3G8qLAGckAG2mXTKvLbqLt0iILut90ZgfouqaV/3foRaP5ZL1hE0nXHN5nrVPeA
dIwvg2H9xbL4dZ/AjngyZ790EQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPgFGkv6
8XXZnkatDujeYiQHs2wtMB8GA1UdIwQYMBaAFOXrGAzW3FFsZtNSsEe56cWlAnDj
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFBQkZEOS80QUU4MDQxRUI5
RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VXeG0wMUt3UjducHhhVUNj
T00uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyLzVlc1lETmJjVVd4bTAxS3dSN25weGFVQ2NPTS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFB
QkZEOS80QUU4MDQxRUI5RDcxMUVBOUNGNTFFNUZDNEY5QUUwMi81ZXNZRE5iY1VX
eG0wMUt3UjducHhhVUNjT00ubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALNlRH1EDUjgKHkkbIvTPLvqSf8bwpI0S7foUIUjsujLxpRw1BBBUdP9edoki
mDVkCyQH9xkRbPrWlik9lFVBWpMD7VSqcxHoS9frcMlKi8awNMXJKoC+x3CT+gOk
UQO5GLCPgpA5hWHG+doqd9klKBufHIRdg/DtuvUw4L1u/BHEzQTgtX+qYyuKoA6m
CbuL16g12fAPqu/PZ2QQO0CNd8T2DvTXMwNyD1tFZDPf+lY+A7+2CP7Bx64Zxfe0
tiOnBIAe6Zb1ibW2J9IsuVeN0pT0oehsHk0GZtF0iGI9zvix+aXzZAcbbhqELG9O
1MnBWAK+bvE5XiDdg8VPooZj0A==
-----END CERTIFICATE-----
Generated at Wed May 13 03:45:23 2026 by rpki-client