Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
File:                     ruF924xrNZlkYYfQgefI95iD4Z0.mft (raw, json)
Hash identifier:          nuz0ZW573i1mWWUihhgIDGisoCzfcVTKFvXoBE74HjY=
Subject key identifier:   AF:83:6C:D6:6E:FF:6C:19:D1:48:1C:65:9C:28:47:AA:6C:1A:EA:CA
Authority key identifier: AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D
Certificate issuer:       /CN=A91BB221/serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
Certificate serial:       DE
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
Manifest number:          CC
Signing time:             Wed 13 May 2026 07:04:58 +0000
Manifest this update:     Wed 13 May 2026 07:04:57 +0000
Manifest next update:     Wed 20 May 2026 07:04:57 +0000
Files and hashes:         1: ruF924xrNZlkYYfQgefI95iD4Z0.crl (hash: ovEHAIhvLj8U91vcPHT6MkIzcUZ1exODnrh1gQZibsw=)
                          2: 7020A3F6FB6411F0B417A8544B6F56BC.roa (hash: 0uJQxDpAOHaABeJ25wfn3VTH/VdzhDmcRhWseG4IhVU=)
                          3: A433C1262D0311F0A91F647CC4F9AE02.roa (hash: Wv3Hw56ZpmiR46v0hXlQur/T4NvoJ9rmr1BmJ2RxWtU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl
                          rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 07:04:56 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB221, serialNumber=AEE17DDB8C6B3599646187D081E7C8F79883E19D
        Validity
            Not Before: May 13 07:04:57 2026 GMT
            Not After : May 20 07:04:57 2026 GMT
        Subject: CN=6a042299-9abc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:41:48:8d:e7:38:0a:06:a4:4e:bc:96:c3:
                    95:43:bc:df:b0:ca:09:13:ad:8d:94:3f:f3:c3:8a:
                    15:4d:b4:41:93:f0:77:08:77:13:31:4b:bb:d5:41:
                    30:c9:8b:fc:4f:9e:b5:4a:93:36:3d:d4:c6:e8:0c:
                    a0:4a:3f:99:02:4a:79:ca:5c:ee:e8:53:1e:9d:ef:
                    c1:8d:69:02:63:9b:47:bc:f8:ae:c2:cc:fc:0a:b1:
                    0d:62:6d:78:20:5d:b2:68:c1:1a:77:fb:a7:b7:a5:
                    74:9f:14:25:9e:02:49:b3:c2:23:8b:b4:e1:6b:c1:
                    c3:cd:e0:c8:e7:3a:4f:e9:ae:dc:cd:f3:37:5a:7d:
                    30:35:bf:4a:1d:ec:bb:16:84:bb:a1:f0:2f:7d:f9:
                    4a:ba:e9:e7:0f:42:4c:ed:58:41:0b:f2:5c:d4:1b:
                    77:73:c7:f8:9b:23:57:10:95:66:93:4f:9e:cf:66:
                    d6:4d:19:29:ce:c5:10:74:c1:98:8b:56:6c:90:9f:
                    16:cd:7c:2b:16:f7:dd:37:c9:06:1e:c5:a9:2f:b8:
                    60:c7:f9:ac:f3:de:bd:c0:c4:43:d5:91:36:c1:06:
                    3b:51:2a:46:17:bd:b0:c9:17:a1:0b:89:45:6e:69:
                    25:6d:3b:5f:7a:a1:50:a7:07:a2:a7:18:2a:75:78:
                    20:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:83:6C:D6:6E:FF:6C:19:D1:48:1C:65:9C:28:47:AA:6C:1A:EA:CA
            X509v3 Authority Key Identifier:
                keyid:AE:E1:7D:DB:8C:6B:35:99:64:61:87:D0:81:E7:C8:F7:98:83:E1:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ruF924xrNZlkYYfQgefI95iD4Z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB221/33EAAC682D0311F083EBB37AC4F9AE02/ruF924xrNZlkYYfQgefI95iD4Z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         32:21:85:a6:48:94:4f:c0:92:66:6b:0f:37:1b:b6:8d:22:35:
         bd:6f:76:11:71:ea:67:9e:a0:78:19:08:cf:8c:5b:ad:ed:bf:
         c8:9c:57:52:5b:0b:ef:92:b3:0f:22:1a:9a:e9:2a:f5:ed:4e:
         32:96:04:e1:76:6d:55:53:1f:19:03:92:e7:6a:b1:cd:35:09:
         d3:33:eb:10:35:3c:cf:60:d2:02:ad:43:98:14:95:47:d0:55:
         66:94:2b:b6:fe:ea:7a:06:0c:49:a6:12:0e:62:cd:41:78:85:
         bc:27:1b:e5:64:72:8c:a7:c5:b1:d4:5a:fd:61:0c:53:5a:71:
         e2:28:89:e0:87:37:78:4b:50:c1:b5:56:b8:18:ab:6b:5a:51:
         a3:cb:87:5d:7b:62:2f:02:91:d8:63:47:d2:67:91:3b:20:9f:
         85:ce:56:33:1e:e1:ef:fb:3c:a4:53:a2:a8:1d:b1:eb:82:65:
         b4:8e:03:63:2b:e9:64:f8:79:85:4b:65:70:75:dd:50:30:41:
         df:16:84:9b:f6:64:39:10:55:ac:28:aa:ed:39:2c:82:3a:82:
         d4:c9:43:b4:11:0a:2c:2e:b9:56:38:02:61:0c:0d:ed:a3:4f:
         02:32:13:11:92:08:8a:41:7f:e7:24:90:bb:e5:26:b3:5e:92:
         0b:99:cd:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:04:32 2026 by rpki-client