Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
File:                     nTRubbOcPTMMGv-UBg4VBV_07Rw.mft (raw, json)
Hash identifier:          drCUx9kh2Mo7w0MWcQjoDQbHWAOBBeh/CrlcO0u67dM=
Subject key identifier:   FA:A2:FA:5D:25:85:7F:FB:F3:28:3B:D1:DE:83:C3:60:D9:B0:D8:A0
Authority key identifier: 9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C
Certificate issuer:       /CN=A91C2168/serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
Certificate serial:       3578
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
Manifest number:          355F
Signing time:             Tue 12 May 2026 14:43:30 +0000
Manifest this update:     Tue 12 May 2026 14:43:30 +0000
Manifest next update:     Tue 19 May 2026 14:43:30 +0000
Files and hashes:         1: nTRubbOcPTMMGv-UBg4VBV_07Rw.crl (hash: egjyuC37MEtZurbSNzv5piSCGha5WJc20Dq41ov9rxc=)
                          2: A7098B604A5411F0A2CC9015C4F9AE02.roa (hash: b12I5DSwhN0Bm2MDcv3H2tx6IO2KcAPD+wYWdyKS7tU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl
                          rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:43:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13688 (0x3578)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C2168, serialNumber=9D346E6DB39C3D330C1AFF94060E15055FF4ED1C
        Validity
            Not Before: May 12 14:43:30 2026 GMT
            Not After : May 19 14:43:30 2026 GMT
        Subject: CN=6a033c92-c155
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fe:93:4a:6b:bd:7c:98:a0:d8:64:a2:d8:2a:
                    de:49:3e:23:6e:32:2a:9e:ac:3a:a0:f0:2d:e8:2a:
                    52:6e:71:99:01:d9:2a:6a:9c:02:7c:09:bb:b0:2c:
                    29:ef:fd:dd:e0:59:64:19:bf:13:4b:10:fb:bb:fb:
                    95:4e:e5:3a:e9:cd:27:c1:9f:8a:cd:12:70:d4:b5:
                    94:5b:ee:a8:63:3b:ed:c6:90:25:93:15:fb:13:ff:
                    cf:52:12:76:86:8c:8f:64:6a:5e:dc:75:20:66:e7:
                    9c:ce:cd:3a:74:c3:66:5a:51:37:f8:9f:ce:26:b2:
                    a0:45:2d:cf:a9:51:a5:2b:29:2f:5e:c2:cc:0a:c8:
                    a0:d0:fc:30:d2:04:20:38:77:d0:8b:4d:6f:2e:67:
                    cf:89:85:78:e1:2d:f3:57:09:c9:1e:3f:7e:67:6b:
                    be:3b:71:70:c4:48:4f:27:b1:16:96:b8:40:ac:36:
                    2d:31:a9:1c:cf:b7:ba:ff:eb:cb:5c:73:3f:28:65:
                    63:62:5c:9d:4d:4a:af:cb:c7:fa:88:d0:ae:a4:fa:
                    3c:88:06:84:eb:5f:dd:74:9e:a5:4a:01:5c:53:e8:
                    a8:fa:96:ac:25:3c:97:22:3e:8a:41:af:df:70:c7:
                    e8:9c:38:b1:86:69:21:03:ba:b0:4e:51:56:e2:c8:
                    4d:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:A2:FA:5D:25:85:7F:FB:F3:28:3B:D1:DE:83:C3:60:D9:B0:D8:A0
            X509v3 Authority Key Identifier:
                keyid:9D:34:6E:6D:B3:9C:3D:33:0C:1A:FF:94:06:0E:15:05:5F:F4:ED:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/nTRubbOcPTMMGv-UBg4VBV_07Rw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C2168/24C62C061D9111E2924430F308B02CD2/nTRubbOcPTMMGv-UBg4VBV_07Rw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         48:56:7b:ee:b5:99:98:0c:7d:c1:04:e2:a2:15:0b:0f:60:c3:
         56:49:4c:ed:0e:51:af:3f:47:12:58:fc:3a:50:de:24:a6:0b:
         5e:26:d4:5d:d0:e8:25:9b:a5:78:ef:1c:ed:fb:63:f1:a0:20:
         45:ad:83:6b:33:ba:29:3f:56:51:8a:48:3a:df:f1:cd:6a:52:
         f1:2a:2a:43:f3:45:2c:5b:87:61:2b:ef:c1:9f:9e:1f:af:0a:
         a9:cf:3c:a8:ee:3d:94:32:52:c2:9c:32:a6:32:1a:f5:01:42:
         45:e0:a4:bb:74:9e:ce:99:81:fc:3f:51:d6:b6:b7:ca:61:54:
         a2:9d:5f:f7:24:f4:dc:45:86:35:b3:6c:af:93:8c:c1:3a:5c:
         47:f0:2e:49:58:f0:74:c2:9a:94:c1:2f:da:1f:eb:44:75:5d:
         a7:8b:50:65:90:49:93:c0:30:c5:a1:19:87:a2:f2:c6:06:94:
         eb:2e:25:68:00:c4:ff:72:26:4f:ad:7b:75:4b:ac:2d:b9:f2:
         d7:62:d3:69:e2:42:cd:42:a2:64:b9:36:c8:2f:6c:1d:2b:79:
         f1:2e:3c:7d:33:12:f1:b5:4e:9b:60:e4:fe:db:a5:b3:b5:ab:
         c5:68:c7:9e:4e:70:41:9d:cf:81:b9:e5:20:31:c1:59:ba:76:
         3a:d6:b2:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:56:44 2026 by rpki-client