Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
File:                     bLMNwI7ylzDp3wScVPOVgquFvpQ.mft (raw, json)
Hash identifier:          R8jrGXDWsbA08nelGGKhya2rtP5KOzHfbmz3BungdBE=
Subject key identifier:   EB:F3:6E:49:26:C6:9A:B8:C5:A1:EF:5F:D6:7A:7C:44:6D:B2:45:24
Authority key identifier: 6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94
Certificate issuer:       /CN=A91C40D1/serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
Certificate serial:       1375
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
Manifest number:          1367
Signing time:             Tue 12 May 2026 17:00:13 +0000
Manifest this update:     Tue 12 May 2026 17:00:12 +0000
Manifest next update:     Tue 19 May 2026 17:00:12 +0000
Files and hashes:         1: bLMNwI7ylzDp3wScVPOVgquFvpQ.crl (hash: ztffahzYtXTGtPCrF8vypxiYxGbhpLuao4n3Tdzrdjg=)
                          2: 18272628C30B11E8A6851824C4F9AE02.roa (hash: kMK6cFoyDF+YC63uz7mLOHILoZmbrgDgimkdvFEz5OA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl
                          rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:00:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4981 (0x1375)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C40D1, serialNumber=6CB30DC08EF29730E9DF049C54F39582AB85BE94
        Validity
            Not Before: May 12 17:00:12 2026 GMT
            Not After : May 19 17:00:12 2026 GMT
        Subject: CN=6a035c9c-9fba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9a:09:ea:d5:78:24:87:92:cb:3e:1d:4a:70:
                    8b:c1:7e:7b:64:13:97:11:3a:ba:86:8f:94:81:6b:
                    b1:db:e9:90:88:22:d2:f6:68:6a:dc:c7:8f:86:58:
                    64:56:09:6e:65:5f:6a:e4:7f:25:ec:2d:b4:8e:fb:
                    db:e0:01:f5:8c:a3:1c:40:30:05:c3:ab:a9:52:34:
                    31:85:55:0b:d2:9c:bc:6c:6d:cd:2b:08:81:27:f2:
                    a8:e9:00:fa:e7:65:45:e1:40:61:83:ce:7e:a6:d4:
                    35:21:db:c0:40:66:2e:81:aa:d3:90:6b:e3:b6:ba:
                    82:fa:91:d2:6f:75:78:ae:4b:40:85:7e:e8:93:d9:
                    94:51:ce:4f:d3:44:0c:ae:99:d7:98:7a:2b:b9:79:
                    57:f2:2a:2c:78:3a:f2:90:09:1a:aa:4b:af:2f:3a:
                    cb:27:63:cd:e0:4f:c4:94:c9:00:3d:ed:0f:b4:cc:
                    85:48:0f:1d:dc:da:bd:fc:ec:e8:89:51:3b:cc:ce:
                    fc:8b:28:aa:7a:41:8d:b4:87:a2:51:e0:01:2c:6a:
                    90:b0:d6:6c:c4:d4:08:ee:2f:f9:90:77:e4:9d:9a:
                    e8:5d:c1:06:5d:aa:5d:c3:d7:6a:3d:be:65:22:8d:
                    9b:e1:b2:f7:d2:2d:f4:07:86:55:57:de:55:7f:dc:
                    4f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:F3:6E:49:26:C6:9A:B8:C5:A1:EF:5F:D6:7A:7C:44:6D:B2:45:24
            X509v3 Authority Key Identifier:
                keyid:6C:B3:0D:C0:8E:F2:97:30:E9:DF:04:9C:54:F3:95:82:AB:85:BE:94

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bLMNwI7ylzDp3wScVPOVgquFvpQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C40D1/CC7830B0C30911E8900E5F21C4F9AE02/bLMNwI7ylzDp3wScVPOVgquFvpQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0f:d8:0c:76:20:5a:9c:b8:20:f7:78:cf:ce:31:6b:c2:1b:bb:
         d5:f9:68:6e:0b:90:a4:c1:38:bc:f3:2b:f8:a6:9b:80:44:bf:
         3b:36:d6:55:0c:0b:8c:bc:0d:f4:8a:2b:c3:94:7c:00:21:b1:
         6c:9b:aa:43:a1:1b:9a:3a:e8:d2:85:14:9f:dc:fa:63:09:13:
         69:4b:ad:b0:34:57:cd:c0:60:41:94:e7:6a:66:64:fa:66:ed:
         cd:22:10:89:b3:f4:05:97:eb:cf:12:48:96:5a:ec:02:a9:2b:
         4c:9d:bd:d1:a1:e4:6d:ee:7f:ca:b2:09:a3:74:17:e7:1e:b9:
         d1:c0:69:2d:14:5b:97:ec:30:81:f1:0c:16:29:48:63:b7:01:
         68:09:21:6c:fa:d1:1f:a4:f8:83:09:49:dc:0c:5b:5d:dc:33:
         65:ad:e6:9b:33:55:fa:66:6a:92:0b:31:b6:f4:9d:5f:fc:ac:
         8b:f8:3b:1e:9a:a1:7b:ed:04:9f:10:81:d5:56:ff:2e:70:d3:
         1b:56:1c:03:98:13:ce:36:e0:33:3b:c8:d1:45:f7:b3:fa:f9:
         c3:54:59:12:c4:35:bb:8a:66:84:5f:4a:bd:b4:88:69:6e:ea:
         58:cb:8f:d1:52:e6:43:bb:bc:06:a1:e6:b1:5b:4e:07:ee:c1:
         94:6a:f7:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:17:21 2026 by rpki-client