Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
File:                     JtUcwUoj0KiCO18cogDnCGrJqWk.mft (raw, json)
Hash identifier:          IFe9l5eLp7h7X6xAgYiNLoU5GNfwWPLdoJ6dUWTfOrk=
Subject key identifier:   A0:2B:B2:F3:63:BD:01:DF:22:A4:4B:7B:15:D2:5B:F5:55:E7:33:D6
Authority key identifier: 26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69
Certificate issuer:       /CN=A91B0022/serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
Certificate serial:       07E6
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
Manifest number:          07DE
Signing time:             Tue 12 May 2026 21:24:01 +0000
Manifest this update:     Tue 12 May 2026 21:24:01 +0000
Manifest next update:     Tue 19 May 2026 21:24:01 +0000
Files and hashes:         1: JtUcwUoj0KiCO18cogDnCGrJqWk.crl (hash: zAGA1TzLKzvTT24Q19nzJIIab4rPh2Qs+vk+KI3iqN8=)
                          2: 736BC8B433B011EBB38B4E68C4F9AE02.roa (hash: 3VbEprdUkL8m1GA2u2LXvlOjG1yVfgww8DFLCukSZV4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl
                          rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2022 (0x7e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B0022, serialNumber=26D51CC14A23D0A8823B5F1CA200E7086AC9A969
        Validity
            Not Before: May 12 21:24:01 2026 GMT
            Not After : May 19 21:24:01 2026 GMT
        Subject: CN=6a039a71-5598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:78:d9:bc:1f:ef:05:a3:8a:91:bb:4b:c8:3f:
                    bf:2a:a6:45:40:29:8f:62:75:2b:44:1c:8b:00:6a:
                    0a:34:34:4a:5e:16:6f:69:eb:63:ec:2f:49:00:1a:
                    35:6e:13:bf:78:64:eb:f9:1f:e1:f5:0d:60:fc:a7:
                    4e:06:d1:90:29:2d:67:9f:4a:96:7a:29:d1:aa:63:
                    bf:2a:68:2c:fc:f7:86:54:f8:15:3d:5e:50:53:a3:
                    ac:13:1d:82:c5:c9:89:b4:58:56:fd:f7:c4:28:14:
                    58:87:54:10:99:62:e0:5b:84:55:6f:de:cb:6e:5f:
                    55:0b:7e:5d:56:92:45:24:de:4e:d0:42:62:72:d0:
                    34:4e:0f:83:23:8b:d5:ba:59:94:82:1a:bc:66:00:
                    1a:ff:7e:6c:8c:9e:25:df:8b:c3:9d:eb:73:11:31:
                    a1:01:86:4c:fc:b4:ca:68:cb:4a:37:1a:d3:6c:ba:
                    ff:69:b8:fb:e1:87:e2:fe:bd:26:d3:2c:dd:a5:7b:
                    cb:b8:61:00:97:61:f0:8d:fc:e3:34:4f:04:49:44:
                    32:b6:3a:fb:40:54:d2:de:97:3b:cb:15:89:b4:36:
                    f5:af:ab:5e:68:95:a8:ed:a3:d6:39:0e:8d:e0:5d:
                    7b:d7:09:26:c3:71:71:39:e3:d7:6b:5d:2c:a8:ea:
                    b5:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:2B:B2:F3:63:BD:01:DF:22:A4:4B:7B:15:D2:5B:F5:55:E7:33:D6
            X509v3 Authority Key Identifier:
                keyid:26:D5:1C:C1:4A:23:D0:A8:82:3B:5F:1C:A2:00:E7:08:6A:C9:A9:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/JtUcwUoj0KiCO18cogDnCGrJqWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B0022/94E7CAF833AE11EBA1FFBF63C4F9AE02/JtUcwUoj0KiCO18cogDnCGrJqWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:98:7c:98:03:fa:cb:26:02:f3:7a:dd:fa:ca:38:6b:08:57:
         c0:b3:84:c1:71:a0:e9:da:e0:86:44:1f:f6:92:df:22:86:ca:
         bf:4e:19:b1:d3:fb:69:ab:29:70:8d:d0:fe:20:65:c4:7a:c3:
         d3:3f:06:58:20:e8:98:48:05:85:f8:13:12:c3:42:1d:5c:a1:
         57:5e:9e:81:d7:28:22:26:bb:59:9a:20:2e:7a:5a:ca:52:a4:
         c4:93:9a:6e:78:fd:88:ce:fe:c1:64:e1:d4:47:15:d9:d3:95:
         8b:b5:11:7a:87:c4:df:83:93:03:2a:e9:79:03:f7:ea:83:1c:
         68:5d:7d:d4:5c:48:31:3e:1a:b5:36:20:76:4a:3f:e1:f3:2f:
         0e:91:83:47:f1:55:ed:02:5d:1d:e4:45:bd:e6:1b:7e:e5:9c:
         b7:59:59:00:80:72:1e:ff:4a:e5:2d:ad:36:30:ef:f6:43:61:
         1c:a0:19:38:a4:66:d3:e1:7e:2e:83:f5:b7:4b:c5:d6:94:ac:
         82:80:3e:90:6d:e1:1d:bc:df:33:46:00:74:ae:91:55:bd:81:
         b5:48:8a:bd:25:d4:7e:74:a1:48:b4:b7:a0:3b:6d:5b:0e:36:
         3f:a8:e8:88:df:0e:ca:88:32:39:52:58:aa:22:60:8a:bb:53:
         2d:1c:73:04
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICB+YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QjAwMjIxMTAvBgNVBAUTKDI2RDUxQ0MxNEEyM0QwQTg4MjNCNUYxQ0EyMDBFNzA4
NkFDOUE5NjkwHhcNMjYwNTEyMjEyNDAxWhcNMjYwNTE5MjEyNDAxWjAYMRYwFAYD
VQQDEw02YTAzOWE3MS01NTk4MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAtHjZvB/vBaOKkbtLyD+/KqZFQCmPYnUrRByLAGoKNDRKXhZvaetj7C9JABo1
bhO/eGTr+R/h9Q1g/KdOBtGQKS1nn0qWeinRqmO/Kmgs/PeGVPgVPV5QU6OsEx2C
xcmJtFhW/ffEKBRYh1QQmWLgW4RVb97Lbl9VC35dVpJFJN5O0EJictA0Tg+DI4vV
ulmUghq8ZgAa/35sjJ4l34vDnetzETGhAYZM/LTKaMtKNxrTbLr/abj74Yfi/r0m
0yzdpXvLuGEAl2HwjfzjNE8ESUQytjr7QFTS3pc7yxWJtDb1r6teaJWo7aPWOQ6N
4F171wkmw3FxOePXa10sqOq1UwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFKArsvNj
vQHfIqRLexXSW/VV5zPWMB8GA1UdIwQYMBaAFCbVHMFKI9CogjtfHKIA5whqyalp
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCMDAyMi85NEU3Q0FGODMz
QUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBLaUNPMThjb2dEbkNHckpx
V2suY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0p0VWN3VW9qMEtpQ08xOGNvZ0RuQ0dySnFXay5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
MDAyMi85NEU3Q0FGODMzQUUxMUVCQTFGRkJGNjNDNEY5QUUwMi9KdFVjd1VvajBL
aUNPMThjb2dEbkNHckpxV2subWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAlph8mAP6yyYC83rd+so4awhXwLOEwXGg6drghkQf9pLfIobKv04ZsdP7aasp
cI3Q/iBlxHrD0z8GWCDomEgFhfgTEsNCHVyhV16egdcoIia7WZogLnpaylKkxJOa
bnj9iM7+wWTh1EcV2dOVi7UReofE34OTAyrpeQP36oMcaF191FxIMT4atTYgdko/
4fMvDpGDR/FV7QJdHeRFveYbfuWct1lZAIByHv9K5S2tNjDv9kNhHKAZOKRm0+F+
LoP1t0vF1pSsgoA+kG3hHbzfM0YAdK6RVb2BtUiKvSXUfnShSLS3oDttWw42P6jo
iN8OyogyOVJYqiJgirtTLRxzBA==
-----END CERTIFICATE-----
Generated at Wed May 13 16:54:29 2026 by rpki-client