Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
File:                     U4XhOhtYRftEzutr7Y3rTomvOCk.mft (raw, json)
Hash identifier:          LfthMkyOxoRGnmmzXngCmb6JSa/Kw2i5RkrRRu7X4wQ=
Subject key identifier:   42:0C:E4:9B:7E:67:7B:90:A2:F9:3D:D1:C4:07:70:AB:B0:44:C1:E3
Authority key identifier: 53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29
Certificate issuer:       /CN=A91ACFEB/serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
Certificate serial:       0A3A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
Manifest number:          0A24
Signing time:             Tue 12 May 2026 19:50:02 +0000
Manifest this update:     Tue 12 May 2026 19:50:01 +0000
Manifest next update:     Tue 19 May 2026 19:50:01 +0000
Files and hashes:         1: U4XhOhtYRftEzutr7Y3rTomvOCk.crl (hash: 2ODgxK+d4JeBWKi6L4y4LQ6K/NVIgWPmOBBbt19gqHg=)
                          2: 3636BCD2937011EA8A795583C4F9AE02.roa (hash: pxNuh5srbtMxxnoUXoogGH47f0VhHR+2FLeTjpcucQE=)
                          3: 35831FCE937011EA8A795583C4F9AE02.roa (hash: KU74ZbX8QctQD6oWhNP2ZPDiRV7nlnVfxskUU58FW+U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl
                          rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:50:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2618 (0xa3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ACFEB, serialNumber=5385E13A1B5845FB44CEEB6BED8DEB4E89AF3829
        Validity
            Not Before: May 12 19:50:01 2026 GMT
            Not After : May 19 19:50:01 2026 GMT
        Subject: CN=6a03846a-8b87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:be:9f:2b:05:f5:a8:73:ca:6e:c4:f8:62:0a:
                    4d:b4:92:ee:f0:c3:a5:37:0a:7d:9e:78:40:8d:fd:
                    1f:af:f1:29:fc:54:24:da:40:78:79:ce:88:d8:1c:
                    81:69:da:56:0d:a2:40:98:1f:2e:5f:e3:e1:ad:88:
                    df:b8:0d:c5:b6:18:57:0f:5c:5e:4d:a8:81:97:ef:
                    ec:4e:b4:7d:85:2c:0d:97:7e:a8:18:af:8b:52:39:
                    8a:63:c5:9f:da:b6:34:5a:cf:b0:54:c0:ab:79:e3:
                    d6:07:93:39:56:e8:19:06:23:f7:db:30:e6:4b:9f:
                    96:7d:d1:91:fc:98:22:de:9c:9f:d0:4d:da:54:4e:
                    0d:f3:27:d1:2c:4d:2e:bd:06:30:49:bf:1f:37:5d:
                    b3:d2:7c:0e:2f:93:bc:99:2f:dd:ae:f4:b6:3d:07:
                    20:5f:7b:45:1e:37:ff:8f:63:ff:ea:37:bc:72:f2:
                    10:aa:3f:bf:a3:63:83:b8:2b:2a:8e:4f:86:e7:70:
                    83:b4:50:d6:cf:a7:6c:bf:9c:f0:dc:58:d7:e6:11:
                    87:c1:c7:ab:19:60:98:11:90:1a:3c:56:c5:49:45:
                    7d:87:0c:ef:ab:aa:93:b9:e2:31:a1:9a:e5:18:ea:
                    8a:5a:1a:e4:f9:f9:85:b8:18:8a:47:7e:26:f7:6e:
                    a8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:0C:E4:9B:7E:67:7B:90:A2:F9:3D:D1:C4:07:70:AB:B0:44:C1:E3
            X509v3 Authority Key Identifier:
                keyid:53:85:E1:3A:1B:58:45:FB:44:CE:EB:6B:ED:8D:EB:4E:89:AF:38:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4XhOhtYRftEzutr7Y3rTomvOCk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ACFEB/CB2C33E6936E11EAA5E56B7EC4F9AE02/U4XhOhtYRftEzutr7Y3rTomvOCk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         65:81:58:3d:9d:38:6e:40:16:6c:41:d5:c8:84:94:e3:7b:45:
         8f:93:c2:1e:61:b0:4b:cd:a3:1f:e6:62:c1:f6:5e:4d:04:15:
         a3:7a:51:02:e5:81:13:f7:43:96:ff:2a:c2:2b:90:74:72:34:
         9d:d6:a8:3d:57:ac:c7:ac:c7:65:3d:33:1f:45:e0:dc:a9:62:
         75:1b:44:01:b6:88:06:25:86:d5:25:8a:95:e9:8c:cc:2b:2a:
         77:01:40:04:30:ae:f3:d5:da:52:8e:96:03:49:0d:8a:63:e1:
         83:a1:0f:2d:ba:2f:7e:50:ee:85:57:04:bb:10:1c:9b:8f:2b:
         13:ef:03:93:ae:bf:93:a1:58:4b:d2:00:c1:ad:65:73:44:38:
         50:7b:f8:30:3c:c1:24:21:c1:71:94:d4:d8:9c:94:36:86:fc:
         ec:a8:73:09:59:9a:88:d7:d7:a0:e7:f2:5b:d2:20:da:43:60:
         54:12:42:e1:8e:db:f7:e2:26:48:d6:b1:c5:85:15:de:04:3f:
         d9:b4:d3:13:13:7b:17:fb:ca:3a:d9:4e:72:76:d5:ad:a8:65:
         83:cd:7f:ca:53:2a:c5:0f:70:4b:2c:a0:5a:ba:a6:30:2b:a1:
         90:a7:1d:07:ac:04:2d:16:c5:bb:b7:f6:b2:5e:5f:c2:aa:e8:
         87:cd:ad:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:21:31 2026 by rpki-client