Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
File:                     mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft (raw, json)
Hash identifier:          nmeTpqJeVdW1VQtiXggUcs+tMXRX6pUVBrpHV0sIYl8=
Subject key identifier:   91:F1:2B:C5:13:C3:A4:30:BB:7C:C6:F3:69:8B:29:26:5A:D6:2B:2E
Authority key identifier: 9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67
Certificate issuer:       /CN=A91BB493/serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
Certificate serial:       0B61
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
Manifest number:          0B17
Signing time:             Tue 12 May 2026 19:25:02 +0000
Manifest this update:     Tue 12 May 2026 19:25:01 +0000
Manifest next update:     Tue 19 May 2026 19:25:01 +0000
Files and hashes:         1: mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl (hash: vZPbz6ePikURhe9xbq1KwJgrFTkxDiZ5ON72vyOs/QY=)
                          2: 8A916FDC83D711EAAA5AEC56C4F9AE02.roa (hash: QhYpDZxY4lrsisBo9KeT1dhpxH5qfKkNuCdxLZwNY9M=)
                          3: DC4A492A4E6311EEBED9743CC4F9AE02.roa (hash: XDyPY9O4h8LcXQtO6A3H7KbS57jl8fFcVjI3g/PUwDc=)
                          4: 8B083190C9DC11EE8B24C55EC4F9AE02.roa (hash: FFPC/GmMsZAGnYI1MxUTiojQXUXpV7bsbNkgwvbEEh0=)
                          5: 8D864528E26911EFB89A9142C4F9AE02.roa (hash: NpQW8k4zu/MCDQehzvD8ow5oFPR6pQ3aQJLeOrQZX6w=)
                          6: 011CBE6CDF8911ED942E2A67C4F9AE02.roa (hash: /K+KO/JAxBT13HOP0sbdD7WCDuaiCfipJ799+0uNLAE=)
                          7: 8C0868D0C9DC11EE8B24C55EC4F9AE02.roa (hash: O4XanTDe0ztngiWNae9hBO/GQEgCdTJ5b4fu8JScoU8=)
                          8: BACC498C9EFC11EC856FCB09C4F9AE02.roa (hash: 9sxR8CYFCyJQExW8lI4y1fZzjOTHx0uRGcx0+QALp7E=)
                          9: 66E400CACB4C11EE8E404546C4F9AE02.roa (hash: zdqWLocdgkEwEzpGEFgWlpmeuU0MlCsdCgg2P2h00eg=)
                          10: 0FD2DB3A109C11F08D6B6B19C4F9AE02.roa (hash: 3jHJ+QCDVuVqH920nc4APigYKIgE0XcUu8gojB0ssNY=)
                          11: DB701E584E6311EEBED9743CC4F9AE02.roa (hash: aVcFD+7Cf2Q5NsiqVZPSqT6t7DqlHkbGwDM3SujhnaU=)
                          12: 01D6C542776C11EF9A0CEA56C4F9AE02.roa (hash: vqy0H4ya82Ekfsog+7GBN45eVwK+VW8rWrLWS8sX2Fk=)
                          13: 07CD68A213AD11EFADED003DC4F9AE02.roa (hash: vpflnylg4u69h4p+T+Zu8l+UhKj8oqOycxNU/87Vm54=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl
                          rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:25:01 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2913 (0xb61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BB493, serialNumber=9A3FE54122A5096D3EDD88060ED4D9183CBE1867
        Validity
            Not Before: May 12 19:25:01 2026 GMT
            Not After : May 19 19:25:01 2026 GMT
        Subject: CN=6a037e8e-d77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:ce:fb:0e:96:12:67:6f:3e:58:de:b5:d2:58:
                    a0:92:5d:4b:18:73:c2:d4:46:f8:cb:b9:fd:19:27:
                    e3:8c:9f:7e:55:4e:b4:d7:1a:f9:9b:b3:69:e4:72:
                    b5:b1:76:00:75:a1:cf:94:ba:54:c2:20:12:62:12:
                    5c:a7:4c:0f:90:a1:b2:03:82:c3:21:64:63:b6:88:
                    6d:fb:b6:fa:90:03:ab:b1:55:d2:83:9b:25:6c:b6:
                    c9:91:7a:df:f4:b5:6a:da:29:37:0b:1c:14:01:db:
                    f7:21:7f:21:74:1b:3d:3f:55:2c:ed:76:d9:f7:b9:
                    6d:25:24:c2:8c:fb:3c:c7:da:ca:38:e5:e1:a8:4a:
                    03:f3:87:bf:95:33:25:38:47:42:04:6e:6e:5c:e6:
                    62:57:2d:07:f5:b0:b1:2d:22:e0:9d:84:08:5f:e9:
                    99:86:73:05:dc:f9:07:ce:91:4f:cf:08:4f:65:e3:
                    0c:28:59:ee:eb:91:d7:48:7f:53:7f:12:ac:66:79:
                    df:eb:6a:3b:31:64:a0:7c:c3:b9:0e:7b:e9:c8:b0:
                    1e:56:72:cb:08:84:dd:35:8c:62:b2:1c:f4:3e:37:
                    88:c4:d1:68:14:46:01:f0:5f:f2:57:59:a3:c8:f4:
                    f6:f1:4b:42:66:79:43:35:96:47:ae:5b:74:e6:24:
                    78:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F1:2B:C5:13:C3:A4:30:BB:7C:C6:F3:69:8B:29:26:5A:D6:2B:2E
            X509v3 Authority Key Identifier:
                keyid:9A:3F:E5:41:22:A5:09:6D:3E:DD:88:06:0E:D4:D9:18:3C:BE:18:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/mj_lQSKlCW0-3YgGDtTZGDy-GGc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BB493/5FCAB67268F311EA832DDB37C4F9AE02/mj_lQSKlCW0-3YgGDtTZGDy-GGc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:dd:b8:48:16:3b:1f:44:fb:8d:18:a8:24:02:18:88:c3:ac:
         b1:f0:bc:a3:7c:85:e0:91:99:b2:e0:3f:31:d1:f6:7d:70:6b:
         c7:01:83:d7:30:90:e6:ef:b6:d5:35:97:2a:d5:02:14:0f:8e:
         ed:6a:12:bb:98:0a:47:98:36:cd:2b:6a:c7:b9:e5:6d:91:73:
         5f:e5:dc:a0:8b:da:55:87:30:ef:56:7b:2f:62:4a:9c:14:20:
         75:91:02:54:87:f0:32:1f:0c:14:4f:1b:36:e3:fa:85:45:fe:
         dd:1c:63:53:16:7c:ab:ac:32:d9:43:38:a0:33:43:95:5f:15:
         08:45:59:52:a6:0c:25:52:8f:d5:d1:49:25:41:7a:d4:e0:44:
         e1:dc:82:0f:bb:cf:8e:b2:c6:f6:9d:ff:d9:eb:2d:fe:ba:65:
         14:17:9d:70:c9:3d:79:48:c1:f4:48:a8:5d:3b:2d:a3:dc:94:
         e8:25:79:60:cc:b1:bf:39:de:b5:4a:b5:85:5c:49:3a:24:de:
         2e:9c:ab:13:6d:b0:7d:2d:c2:54:fe:7e:4e:33:49:a5:87:dd:
         80:d2:cf:a8:d3:82:6d:cb:76:b5:d5:da:71:8f:0d:c8:67:46:
         a2:7d:94:7f:4d:96:40:91:7d:53:ba:89:e5:3c:01:5b:af:92:
         bc:87:02:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:43 2026 by rpki-client