Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
File:                     FDeI0jX9adsvJbd3Il96t2naNQs.mft (raw, json)
Hash identifier:          xjs3AHyBpP0PEMU0oqqSDVAwxTHUPJy4R+mafz/hXx8=
Subject key identifier:   BA:CA:01:05:BF:A9:CB:0F:E9:CC:AC:B3:E4:8C:73:42:4C:63:EC:64
Authority key identifier: 14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B
Certificate issuer:       /CN=A91C5323/serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
Certificate serial:       0633
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
Manifest number:          0626
Signing time:             Tue 12 May 2026 22:56:00 +0000
Manifest this update:     Tue 12 May 2026 22:55:59 +0000
Manifest next update:     Tue 19 May 2026 22:55:59 +0000
Files and hashes:         1: FDeI0jX9adsvJbd3Il96t2naNQs.crl (hash: Ezxj6/PNObpQt4n+JRO7+2E3gNMac7o1vBjKfW0CNYY=)
                          2: 2A52AB54138811F0BA2C056DC4F9AE02.roa (hash: +IpWmHn21lv1JDCd0DfT+m1o2uccKHiSqsImB3ZiiSM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl
                          rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:55:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1587 (0x633)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C5323, serialNumber=143788D235FD69DB2F25B777225F7AB769DA350B
        Validity
            Not Before: May 12 22:55:59 2026 GMT
            Not After : May 19 22:55:59 2026 GMT
        Subject: CN=6a03b000-ba33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e0:b8:13:5b:b7:09:e6:bf:32:65:88:c2:0a:
                    35:9f:af:46:f3:1e:4f:d6:89:cc:77:de:48:ed:17:
                    53:88:cf:bd:47:4b:77:cd:55:f2:e5:91:8f:65:eb:
                    5f:59:b1:00:6e:49:ac:11:8e:93:f9:a6:b7:0e:a4:
                    5e:9a:70:86:66:70:1b:9b:e9:3e:b2:65:86:93:06:
                    77:4a:83:e2:18:e7:17:39:05:44:f2:94:c2:c3:55:
                    26:62:b5:cf:15:3f:27:ab:7f:e6:e4:32:a0:57:65:
                    7e:55:45:f0:b8:fc:de:ec:0a:3d:95:8d:37:2b:d3:
                    a1:bd:83:9f:c9:d7:9a:75:58:3b:8e:73:4f:78:83:
                    9e:1b:bb:90:a1:93:b1:36:f2:55:cd:d7:31:39:b3:
                    5b:ea:90:96:00:c1:f7:1b:75:33:be:94:98:d5:f6:
                    ba:b8:44:07:32:ac:c8:ef:2b:85:2d:80:6a:f5:aa:
                    46:36:c0:85:e5:d1:d2:ff:ff:9f:7d:78:9d:92:23:
                    3f:e9:c7:14:14:08:bf:9f:df:bf:9b:88:59:91:25:
                    c9:35:97:27:45:a4:ac:f1:bb:f8:5f:c5:0e:1e:7c:
                    3d:83:1d:36:e8:5c:90:2e:69:b9:0a:0c:17:81:9c:
                    43:a6:bc:f4:cc:95:04:a1:44:4a:05:c5:d3:ac:f4:
                    7d:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:CA:01:05:BF:A9:CB:0F:E9:CC:AC:B3:E4:8C:73:42:4C:63:EC:64
            X509v3 Authority Key Identifier:
                keyid:14:37:88:D2:35:FD:69:DB:2F:25:B7:77:22:5F:7A:B7:69:DA:35:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FDeI0jX9adsvJbd3Il96t2naNQs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C5323/DF66DE24E56111EB84BFE820C4F9AE02/FDeI0jX9adsvJbd3Il96t2naNQs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:d2:da:65:a7:7b:09:af:fc:cd:08:ab:4a:70:00:86:83:07:
         2e:ce:2d:ae:8d:33:42:19:14:df:f1:81:d3:0c:b8:07:a3:09:
         52:ba:1b:e4:48:3d:43:87:f0:5b:ba:bc:fb:f5:c6:4e:8f:49:
         86:ad:ff:b9:0e:cf:b7:7d:07:91:5c:3e:86:8b:3a:f8:8e:e9:
         d5:ef:9f:20:2f:e0:c5:52:44:56:ad:e0:33:49:01:f6:f6:3e:
         23:c0:ae:f4:73:5c:9a:d7:eb:ca:bc:b3:26:14:8e:de:b4:41:
         63:4a:2d:09:6c:c3:de:b7:41:a5:a1:0c:ff:3b:09:6e:16:28:
         d3:b6:b9:95:18:b9:cf:ba:7f:cf:f8:c1:c8:f0:33:2e:27:ea:
         2b:0f:8e:a2:6f:4d:63:0e:5d:fd:25:5d:9a:8e:52:51:c1:89:
         0b:50:fb:a0:11:f9:1c:28:f7:d3:9e:3b:8f:fa:7a:72:8f:c6:
         fb:50:4b:75:49:f1:ed:e9:34:75:d2:e9:b7:68:ff:a6:6c:c7:
         81:54:ac:4a:e1:62:ac:f8:bb:17:24:8a:44:77:41:d7:d5:26:
         7f:d1:2d:bf:82:5c:38:05:e7:be:05:62:f7:3b:c8:f3:c3:5b:
         b1:df:0b:74:82:9f:80:0c:7d:d2:9a:b1:95:de:21:28:fe:e3:
         5a:ae:fd:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 11:34:44 2026 by rpki-client