Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
File:                     m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft (raw, json)
Hash identifier:          60p4IpuuLtjAdIR1OwkokL9rKFt4BU+Y4HgoUjx8QQM=
Subject key identifier:   DA:03:5E:89:07:9F:A8:9B:D6:64:41:89:73:2E:95:F0:F1:94:55:DA
Authority key identifier: 9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91
Certificate issuer:       /CN=A91BF7D7/serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
Certificate serial:       0B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
Manifest number:          0A
Signing time:             Wed 13 May 2026 09:19:16 +0000
Manifest this update:     Wed 13 May 2026 09:19:16 +0000
Manifest next update:     Wed 20 May 2026 09:19:16 +0000
Files and hashes:         1: m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl (hash: Cr8FVpb0RhymKxpYzWZQI9Mz1/ocsWDoUWHgHqJyI+o=)
                          2: 86AA0D8E446F11F1B67309509A833773.roa (hash: zXvF741bTXRyFYONSYuKFzrQXEfaqz6hEnhbX238MYw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl
                          rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 09:19:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91BF7D7, serialNumber=9BC5F9BB08E90969AA1D1EEF39DD6E41F3B07791
        Validity
            Not Before: May 13 09:19:16 2026 GMT
            Not After : May 20 09:19:16 2026 GMT
        Subject: CN=6a044214-2daa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:e9:3d:51:17:64:7c:4d:fc:2a:9b:ec:9e:fc:
                    32:67:2a:e7:75:de:5c:12:5e:a2:58:ab:94:be:62:
                    e1:c1:23:df:56:19:bf:c6:03:f1:40:4e:66:27:55:
                    88:d8:fb:cb:a3:2c:d6:63:b0:d5:38:12:e1:1d:15:
                    5e:f1:c6:95:0c:f3:36:7f:f6:a2:57:5d:fe:04:d7:
                    97:01:3a:5a:cd:c9:ab:be:a6:ea:de:7b:6a:c7:fc:
                    09:5d:2e:31:f3:02:29:5c:63:3a:9b:c4:25:e5:56:
                    83:b2:f2:75:42:be:d5:27:7a:3c:d0:90:e7:e3:ab:
                    36:ef:47:c3:a5:30:15:50:62:be:5d:aa:f6:9e:72:
                    dc:f9:ef:72:bf:3c:23:0e:0b:f3:f8:87:b8:b4:67:
                    50:ac:b9:89:ba:af:50:f6:2b:06:d9:58:b0:10:5b:
                    6c:fa:e8:44:28:32:21:ad:37:a3:10:61:51:cc:26:
                    92:82:d7:3f:9f:9e:14:d9:e6:e9:cd:91:fd:ec:45:
                    f1:16:68:03:9a:9b:e3:92:c8:e8:26:77:81:e7:28:
                    14:d1:63:53:2d:e0:1b:99:dd:0e:1b:70:30:e9:c0:
                    e9:94:3d:54:da:c2:7a:6d:a9:97:7b:d0:eb:df:21:
                    77:ef:b4:8c:56:55:85:a1:d0:e9:37:f0:ef:56:3f:
                    46:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:03:5E:89:07:9F:A8:9B:D6:64:41:89:73:2E:95:F0:F1:94:55:DA
            X509v3 Authority Key Identifier:
                keyid:9B:C5:F9:BB:08:E9:09:69:AA:1D:1E:EF:39:DD:6E:41:F3:B0:77:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/m8X5uwjpCWmqHR7vOd1uQfOwd5E.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91BF7D7/66083F06446A11F1A5622F6E97833773/m8X5uwjpCWmqHR7vOd1uQfOwd5E.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4d:a8:4c:89:ab:ef:ac:65:d8:82:ca:8a:37:be:41:53:b1:99:
         e6:ef:35:f8:f7:e5:6a:b9:1f:1f:b6:40:e4:5f:d8:b5:26:68:
         c9:4c:5c:58:e4:47:e8:74:94:af:53:3e:4e:0c:fa:e3:de:d6:
         ee:a0:8c:53:92:c2:e3:57:cd:8c:b4:40:57:e1:31:bc:1c:37:
         be:0d:65:fb:6c:e9:ea:cf:17:12:0b:94:5b:e5:04:73:36:bc:
         c8:ed:77:dd:5d:21:7f:fc:75:d3:4c:26:ec:3b:9d:c8:70:9e:
         eb:4e:89:5b:46:00:1a:8c:c6:c7:0a:22:18:c5:4a:7a:53:77:
         d1:43:a4:81:a3:fe:2d:28:3d:09:67:f6:a9:19:5f:75:f6:21:
         cf:5e:00:96:42:10:2a:5c:1b:c2:60:67:14:30:8c:57:23:b7:
         3d:03:18:ab:12:52:45:82:60:99:c2:23:bf:11:7e:fc:29:4b:
         b0:e1:93:a7:a7:b6:5b:47:36:c7:e9:f8:24:4c:42:99:9f:35:
         9d:ba:b9:06:7f:be:61:30:9e:83:57:c4:c0:33:1c:88:02:32:
         f7:3e:0e:d3:67:bd:86:d0:51:de:3f:a8:19:2b:90:5f:e5:e8:
         1a:36:96:d9:7d:6e:10:98:d8:85:bb:37:09:14:c2:26:71:03:
         7e:2d:74:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:08:15 2026 by rpki-client