Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
File:                     fBlP7bilyMl2697IST3zw_CMyOI.mft (raw, json)
Hash identifier:          /4UCfXZ4bl4aeWDu/gRrHvMWsgLCXs6s9cvSaxOzoNc=
Subject key identifier:   51:95:D3:E5:0B:BC:64:E0:CD:35:C2:7A:F2:00:1C:98:B9:4A:97:4C
Authority key identifier: 7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2
Certificate issuer:       /CN=A91BE056/serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
Certificate serial:       01B3
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
Manifest number:          01AA
Signing time:             Tue 12 May 2026 23:04:14 +0000
Manifest this update:     Tue 12 May 2026 23:04:13 +0000
Manifest next update:     Tue 19 May 2026 23:04:13 +0000
Files and hashes:         1: fBlP7bilyMl2697IST3zw_CMyOI.crl (hash: mY/BfHCXu7tg/K0av89rZi6xeKNXg3YxfTdk9oU6Muw=)
                          2: C7AAEA76637311EF97465324C4F9AE02.roa (hash: GPOp4w2ZvKNt+x+91lwiugP/PaS/3PPwDU9MX+UN6Qg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl
                          rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:04:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BE056, serialNumber=7C194FEDB8A5C8C976EBDEC8493DF3C3F08CC8E2
        Validity
            Not Before: May 12 23:04:13 2026 GMT
            Not After : May 19 23:04:13 2026 GMT
        Subject: CN=6a03b1ee-3b8b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d2:5f:30:b5:60:71:83:69:1e:21:49:60:ef:
                    85:60:04:dd:96:07:0c:54:29:c3:1a:07:2d:42:c2:
                    25:cd:bf:8e:da:bd:a2:42:60:cf:b9:a5:3d:cf:a2:
                    77:be:29:00:8f:bd:5a:68:28:f8:19:ae:bc:45:9e:
                    0a:d9:23:43:a2:a6:cf:69:01:87:9c:40:53:83:55:
                    aa:51:56:e2:1b:d1:bd:59:bf:e6:9b:d7:55:e2:48:
                    26:78:ff:a5:92:69:8e:c0:fd:d9:92:d0:78:a2:cd:
                    4a:c8:c0:66:01:a5:08:26:ab:df:6e:2e:e8:de:3b:
                    84:d4:27:8b:0d:e7:d5:0b:b8:8c:fe:f6:72:e3:f2:
                    8b:d1:c7:0a:ea:2e:d3:f5:17:36:52:f7:d6:17:12:
                    8a:d6:9b:81:22:01:a3:89:00:97:de:ab:e5:2c:eb:
                    68:7a:d8:7e:af:58:43:e9:70:66:71:35:cf:c2:9d:
                    29:f6:32:c0:d0:c4:ac:85:41:86:cd:87:1f:78:ec:
                    2a:c2:cf:1a:0d:f0:5e:e2:51:21:2f:4b:45:68:24:
                    69:28:ed:d5:a9:6c:71:5e:22:81:46:ca:4b:da:51:
                    8e:14:3f:14:da:65:46:55:c3:ba:8c:9c:e6:8e:2d:
                    c7:de:d6:a6:d3:17:c2:3f:a8:2f:2c:19:64:d8:f2:
                    3c:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:95:D3:E5:0B:BC:64:E0:CD:35:C2:7A:F2:00:1C:98:B9:4A:97:4C
            X509v3 Authority Key Identifier:
                keyid:7C:19:4F:ED:B8:A5:C8:C9:76:EB:DE:C8:49:3D:F3:C3:F0:8C:C8:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/fBlP7bilyMl2697IST3zw_CMyOI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BE056/003E1158D78B11EEA2EBD712C4F9AE02/fBlP7bilyMl2697IST3zw_CMyOI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0b:84:50:b6:44:54:14:10:24:c2:84:2c:ae:98:43:6d:c6:5a:
         6b:6f:07:07:3f:ed:fb:32:97:92:d3:90:8d:1b:6b:b0:dd:ff:
         27:27:34:ce:7f:ea:a7:9e:f0:f4:b7:6c:e4:51:7f:c4:b3:95:
         5f:4e:22:59:97:5d:80:47:e4:e3:16:59:59:4b:ea:9d:f7:71:
         77:c7:c6:67:f3:1a:3f:10:5d:d9:53:50:89:e5:bd:61:e7:9f:
         e2:4a:7f:55:34:cc:b4:51:ae:6a:13:95:58:17:5e:83:07:36:
         ce:51:7c:ac:10:4e:0c:84:8c:81:44:f1:87:e9:c0:e6:26:de:
         eb:2e:a2:e8:6f:7c:47:20:32:d4:6a:d4:dd:89:e4:ac:48:d0:
         c1:04:61:68:1c:67:3d:24:65:3a:8e:fd:26:c6:53:f0:e4:60:
         43:a3:61:b3:26:d2:dd:14:75:24:a1:a8:53:fd:29:b1:14:91:
         44:a8:66:d7:7e:2b:8c:11:23:b5:fa:53:21:a8:c4:87:1d:7f:
         20:12:a6:2b:96:12:35:d8:95:e7:33:7d:e9:d7:6f:24:f0:91:
         67:32:96:0d:03:81:86:c0:74:a7:b9:45:df:0b:1a:0e:c0:5c:
         2b:27:20:47:6e:af:cc:f2:06:41:0d:e5:19:de:13:73:c4:28:
         a0:d1:65:80
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAbMwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
QkUwNTYxMTAvBgNVBAUTKDdDMTk0RkVEQjhBNUM4Qzk3NkVCREVDODQ5M0RGM0Mz
RjA4Q0M4RTIwHhcNMjYwNTEyMjMwNDEzWhcNMjYwNTE5MjMwNDEzWjAYMRYwFAYD
VQQDEw02YTAzYjFlZS0zYjhiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuNJfMLVgcYNpHiFJYO+FYATdlgcMVCnDGgctQsIlzb+O2r2iQmDPuaU9z6J3
vikAj71aaCj4Ga68RZ4K2SNDoqbPaQGHnEBTg1WqUVbiG9G9Wb/mm9dV4kgmeP+l
kmmOwP3ZktB4os1KyMBmAaUIJqvfbi7o3juE1CeLDefVC7iM/vZy4/KL0ccK6i7T
9Rc2UvfWFxKK1puBIgGjiQCX3qvlLOtoeth+r1hD6XBmcTXPwp0p9jLA0MSshUGG
zYcfeOwqws8aDfBe4lEhL0tFaCRpKO3VqWxxXiKBRspL2lGOFD8U2mVGVcO6jJzm
ji3H3tam0xfCP6gvLBlk2PI8sQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFGV0+UL
vGTgzTXCevIAHJi5SpdMMB8GA1UdIwQYMBaAFHwZT+24pcjJduveyEk988PwjMji
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFCRTA1Ni8wMDNFMTE1OEQ3
OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlNbDI2OTdJU1QzendfQ015
T0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL2ZCbFA3YmlseU1sMjY5N0lTVDN6d19DTXlPSS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFC
RTA1Ni8wMDNFMTE1OEQ3OEIxMUVFQTJFQkQ3MTJDNEY5QUUwMi9mQmxQN2JpbHlN
bDI2OTdJU1QzendfQ015T0kubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAC4RQtkRUFBAkwoQsrphDbcZaa28HBz/t+zKXktOQjRtrsN3/Jyc0zn/qp57w
9Lds5FF/xLOVX04iWZddgEfk4xZZWUvqnfdxd8fGZ/MaPxBd2VNQieW9Yeef4kp/
VTTMtFGuahOVWBdegwc2zlF8rBBODISMgUTxh+nA5ibe6y6i6G98RyAy1GrU3Ynk
rEjQwQRhaBxnPSRlOo79JsZT8ORgQ6NhsybS3RR1JKGoU/0psRSRRKhm134rjBEj
tfpTIajEhx1/IBKmK5YSNdiV5zN96ddvJPCRZzKWDQOBhsB0p7lF3wsaDsBcKycg
R26vzPIGQQ3lGd4Tc8QooNFlgA==
-----END CERTIFICATE-----
Generated at Wed May 13 05:39:23 2026 by rpki-client