Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
File:                     Ae4IndSGeyyydlgqqXsxj1Cepu4.mft (raw, json)
Hash identifier:          di68TUCPdBPkKXNAtyBxorD4mc7sw0Z6tq26mJ+nLTA=
Subject key identifier:   AB:CD:88:20:DB:10:A5:1C:0D:F3:43:AA:23:55:DA:E4:94:23:B7:89
Authority key identifier: 01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE
Certificate issuer:       /CN=A91B3D30/serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
Certificate serial:       0C56
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
Manifest number:          0BF8
Signing time:             Tue 12 May 2026 19:00:41 +0000
Manifest this update:     Tue 12 May 2026 19:00:40 +0000
Manifest next update:     Tue 19 May 2026 19:00:40 +0000
Files and hashes:         1: Ae4IndSGeyyydlgqqXsxj1Cepu4.crl (hash: ynbhNtDD1/jd+3eCqvdDjJB03mL2Dsuuely4gSXbldM=)
                          2: 80C33BD4227811F190F6266DA4833773.roa (hash: 3v+B4tCUwpOF2mkM4uEJ/dje8PYL5k+BkV2Dze67PRM=)
                          3: 701DFED0219D11F1B09B7EBF113D8C67.roa (hash: 3bsqhgLSGJ0jySaUj0UoaU5+UCc3YemslUryYMqMd14=)
                          4: F6722FA6822411F088762570C4F9AE02.roa (hash: FYa4vN/cUGv4uAuMbz/mOKfD6eVvy62iEPGrtmeoWO0=)
                          5: 0CCA3D6CBAC811F0A07AB13AC4F9AE02.roa (hash: Ny314IGo19wl8MjOcZI74Zy4zGs2+uD6dX7RODZKGgw=)
                          6: E551CBD2BDCF11F0B085BE82C4F9AE02.roa (hash: IIBSEhSGWvOtD18zZJ+qeiGEnoieLx/pQzi9soqlUGk=)
                          7: 3A883F284B3E11F0817E3C31C4F9AE02.roa (hash: iHncQlzb704Umur42ElwW4bGPSOVnnYc0muryAxJjrc=)
                          8: F5E1478E822411F088762570C4F9AE02.roa (hash: XOOFVhR+X9ay6WkgnJIVnO7Un1zvha+xlStC4yqXXU4=)
                          9: 541716E2B95411F0B8E2D868C4F9AE02.roa (hash: 1nUtY951jqRrI+dTCVWXi0cSf76Zz6olI1+fh+4G7wY=)
                          10: 7147D9D69D9811F09B4CDC3EC4F9AE02.roa (hash: xUDY8fa7BGcrzHTy/hrdZE1BbzUbC3rseR2XxjoP1gs=)
                          11: 09534036847011F0A17FCE63C4F9AE02.roa (hash: +SKfbNfmSVnwo+JjcAhmtvWvJTXw2W/IvgQmMr371Zc=)
                          12: BB46A670849811F08EA6E444C4F9AE02.roa (hash: gZhASpUdS2kKZkIDGyUcYVa0JbfP6X8oZEBvcGxjMeM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl
                          rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:00:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3158 (0xc56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B3D30, serialNumber=01EE089DD4867B2CB276582AA97B318F509EA6EE
        Validity
            Not Before: May 12 19:00:40 2026 GMT
            Not After : May 19 19:00:40 2026 GMT
        Subject: CN=6a0378d9-5f55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:23:cf:0f:ae:4a:c9:43:8e:49:f4:6f:48:dd:
                    aa:fd:c4:74:c3:dd:9b:6c:89:5e:91:fe:88:85:34:
                    ef:47:64:44:90:30:ad:22:8d:59:21:9c:1d:a0:29:
                    c0:46:1d:51:4b:0b:57:40:e7:03:68:bf:b5:e9:e3:
                    ff:06:e4:bd:91:99:12:f2:54:f3:47:5a:66:a3:ab:
                    c3:cd:03:b6:6a:25:8d:9e:c8:04:d3:d4:c2:e8:bd:
                    4d:ee:d1:71:c9:52:98:8b:4d:05:fd:1b:68:72:f4:
                    f3:be:ea:86:d0:72:11:f1:63:5d:eb:c6:cb:5d:d1:
                    4b:ec:2b:ce:e5:44:84:2b:f7:7f:db:d1:47:5a:14:
                    7d:29:48:f8:0d:dc:75:5b:8a:85:6f:b1:ed:54:6d:
                    65:6a:58:00:4b:14:aa:0e:36:b7:52:f8:e0:1f:f1:
                    f9:cb:4a:60:de:7e:c6:d4:0e:bd:20:b2:d6:93:d0:
                    9d:a4:04:73:3d:62:2c:3c:21:76:2a:15:79:d5:27:
                    7a:83:23:54:02:6a:91:8c:4f:3d:d2:61:05:ed:94:
                    82:3e:83:d8:f2:1a:59:45:c8:48:00:d7:6d:09:93:
                    f4:03:be:e3:02:64:4a:e7:2e:de:fa:13:da:63:9b:
                    27:a2:71:a0:0e:79:fa:c0:1f:b2:5d:4d:54:c4:04:
                    3f:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:CD:88:20:DB:10:A5:1C:0D:F3:43:AA:23:55:DA:E4:94:23:B7:89
            X509v3 Authority Key Identifier:
                keyid:01:EE:08:9D:D4:86:7B:2C:B2:76:58:2A:A9:7B:31:8F:50:9E:A6:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ae4IndSGeyyydlgqqXsxj1Cepu4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B3D30/E3DF469C416811EAAE8A7750C4F9AE02/Ae4IndSGeyyydlgqqXsxj1Cepu4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:72:59:e4:cd:ef:57:53:26:69:fb:9d:77:2a:49:91:6f:62:
         b7:0b:10:2c:ba:37:11:f8:02:b7:96:6a:11:e8:88:1b:bd:c4:
         21:85:e7:f0:86:4f:c6:d1:89:ae:bb:67:4f:4f:d3:c4:e8:62:
         56:e5:c5:df:71:f8:c1:b7:79:40:28:01:b2:23:80:5c:fe:71:
         67:0b:91:bf:be:22:c5:f0:34:86:75:0a:0f:4e:3c:bc:d0:0a:
         c7:5e:a5:2f:bc:25:77:b2:4a:ed:49:b2:78:a3:9b:59:ae:23:
         f4:d4:d8:9b:ea:5f:15:64:46:37:80:5c:54:68:21:fc:13:40:
         f4:31:30:5c:7d:a7:5f:3d:43:bf:48:08:d1:d3:a9:fc:f4:71:
         f1:b4:5a:b4:44:16:50:aa:fd:19:8b:48:d4:80:d9:fd:c1:82:
         47:c1:34:a8:8a:42:06:88:88:f2:9f:55:36:af:57:7c:dd:cc:
         ff:80:be:20:b5:d1:fe:eb:94:bb:26:82:94:4f:90:56:99:6f:
         a3:22:d0:e0:d3:d0:76:6e:74:09:82:84:29:15:ea:3d:65:e1:
         83:13:66:d7:a3:73:0b:0c:c0:24:e1:bf:1b:2d:0d:d5:77:f4:
         58:8b:85:17:ae:f4:d9:7b:7e:5a:01:f8:ff:cc:d1:26:7c:37:
         89:fc:f8:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:17:13 2026 by rpki-client