Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
File:                     -kF5Yn9bJllOVjA1Ogt3heDWksU.mft (raw, json)
Hash identifier:          JtdZ1VlrM9UAI3gKZKgBuxLU4hpmUKQU0vBVHzFrSzk=
Subject key identifier:   EC:F8:BE:BB:81:64:45:E1:37:47:F9:F1:3E:B7:33:53:7E:1E:20:48
Authority key identifier: FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5
Certificate issuer:       /CN=A91C1621/serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
Certificate serial:       3576
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
Manifest number:          3559
Signing time:             Tue 12 May 2026 14:16:15 +0000
Manifest this update:     Tue 12 May 2026 14:16:15 +0000
Manifest next update:     Tue 19 May 2026 14:16:15 +0000
Files and hashes:         1: -kF5Yn9bJllOVjA1Ogt3heDWksU.crl (hash: 4oxK6rd2OBUTF0qTrXl6gEVxQuWLAnKJAm2+28eRuJ4=)
                          2: CDE36D52DB9511E99F3F673EC4F9AE02.roa (hash: 1OACpcIMwxDFvy670DP/4OuuubrWAy3MQQBov3eDpOM=)
                          3: BB8F87B4D4B011ECAA427351C4F9AE02.roa (hash: UzEPTLsD5T1ajQoZ/gCnYZnBau95KS3L99yADoGvBuE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl
                          rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:16:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13686 (0x3576)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C1621, serialNumber=FA4179627F5B26594E5630353A0B7785E0D692C5
        Validity
            Not Before: May 12 14:16:15 2026 GMT
            Not After : May 19 14:16:15 2026 GMT
        Subject: CN=6a03362f-f275
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5e:89:0e:b3:9a:f8:01:a2:58:2e:24:f7:12:
                    12:c6:18:7b:b9:1b:8d:24:bb:e9:71:2b:e2:8b:d8:
                    a8:50:30:ad:fd:a7:1d:93:8e:69:11:ac:d4:43:89:
                    a9:ca:4d:88:35:eb:b7:9a:dc:c2:fd:2a:81:a3:55:
                    e2:d5:fb:dd:c2:49:35:d4:50:a8:cc:14:fb:e6:81:
                    af:b5:92:dd:57:c3:88:98:af:25:15:66:af:a6:1c:
                    e3:c4:09:06:b9:0b:04:d9:31:ac:25:44:33:5a:cf:
                    a5:6c:9b:2c:af:d6:c1:70:51:01:7b:5c:ed:2b:d2:
                    df:55:e8:4b:18:11:39:1c:23:02:98:23:15:1f:40:
                    4d:bc:d7:5c:94:24:56:d4:db:29:83:60:c1:84:19:
                    89:29:a3:11:93:7e:ab:f3:57:94:dc:9e:47:29:a9:
                    cb:86:f6:da:d7:71:79:0d:de:ba:92:54:93:f6:c1:
                    6a:5e:a4:17:45:45:3d:fc:74:41:24:65:f9:94:7b:
                    ef:65:35:bf:21:af:62:97:90:9c:c0:34:97:2b:71:
                    2f:84:40:e1:b7:ce:03:c1:cc:a2:0c:61:b7:36:5f:
                    be:0e:19:44:43:f7:c2:21:a5:d3:59:7c:14:76:11:
                    0c:21:28:1c:88:39:4f:14:19:18:23:02:b4:af:e4:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F8:BE:BB:81:64:45:E1:37:47:F9:F1:3E:B7:33:53:7E:1E:20:48
            X509v3 Authority Key Identifier:
                keyid:FA:41:79:62:7F:5B:26:59:4E:56:30:35:3A:0B:77:85:E0:D6:92:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-kF5Yn9bJllOVjA1Ogt3heDWksU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C1621/99D68DCE1D6911E2A4640DA708B02CD2/-kF5Yn9bJllOVjA1Ogt3heDWksU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5e:ab:ba:88:8c:fa:35:6f:f4:a5:49:76:13:16:24:34:0e:02:
         7a:fb:82:56:da:38:c2:c8:33:6e:51:b9:0c:52:cb:fc:83:8a:
         75:a3:73:68:c9:40:82:75:1c:ff:83:84:59:f5:a2:f1:bd:d8:
         3c:a0:5a:25:64:84:be:6a:3c:71:8f:98:b7:55:7b:8d:90:b0:
         69:89:2a:a8:9a:42:47:3d:df:dc:64:9c:38:40:7e:41:a2:86:
         26:65:86:92:a8:19:5e:e2:10:71:3a:6c:41:7c:fa:b2:2c:64:
         7b:7f:f2:ea:9f:37:d9:2d:33:a1:f8:9b:99:1e:88:cf:47:de:
         1e:92:f6:1b:69:99:47:fd:60:bf:9b:d7:f9:3b:a2:a4:db:3d:
         12:96:b5:c5:7e:87:cc:8c:f7:df:a8:43:aa:6e:f3:a0:52:84:
         e7:44:30:73:4b:da:2b:84:cf:bb:6f:31:4d:33:af:61:62:1e:
         e0:a7:7b:0c:63:ee:a2:05:01:6f:95:2e:36:c9:ab:25:fe:75:
         8b:a1:a7:56:e6:83:e5:c6:ea:65:a4:50:e5:fc:aa:a3:ec:ce:
         31:ad:2b:6b:d1:24:2c:fc:ae:5b:0f:ab:c1:71:32:a0:2f:9f:
         38:77:18:75:65:ee:9a:a9:1b:a1:90:1c:b1:f8:10:00:1e:f1:
         4a:04:1a:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:23:15 2026 by rpki-client