Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
File:                     AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft (raw, json)
Hash identifier:          CJFW2rCn1ZzKeB/4KTh03/h/GEqrDvdfJt4kzdmm14Q=
Subject key identifier:   90:2A:D5:E8:D4:0E:92:C2:DE:71:FA:F7:41:2B:B7:23:EA:8F:4A:D0
Authority key identifier: 00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7
Certificate issuer:       /CN=A91CA1A6/serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
Certificate serial:       07F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
Manifest number:          07D8
Signing time:             Tue 12 May 2026 21:28:10 +0000
Manifest this update:     Tue 12 May 2026 21:28:10 +0000
Manifest next update:     Tue 19 May 2026 21:28:10 +0000
Files and hashes:         1: AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl (hash: UmHtZuHil4FEDIKAR7nY/49p5aK7yzNzhSiMEF5utlw=)
                          2: 910A49AAB5CC11ECAE337E78C4F9AE02.roa (hash: AQsEjkfXYE8iJW37NiBShvRrsZAk/FjyC4xd+5A2hgs=)
                          3: EEE4C606B5D411ECA20B840AC4F9AE02.roa (hash: EIHT9tw+jJfDxYwJoN6Zou+1GSdOeWVDmrSdgdYC9zo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl
                          rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:28:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2041 (0x7f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CA1A6, serialNumber=000241490E3F2098F79D5C93037EBFF2B956CFD7
        Validity
            Not Before: May 12 21:28:10 2026 GMT
            Not After : May 19 21:28:10 2026 GMT
        Subject: CN=6a039b6a-fe7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:75:d1:f0:38:ae:d7:a4:f7:b1:35:8e:fa:
                    10:25:43:e7:a8:81:6a:49:0b:fb:1e:45:d7:82:25:
                    8c:5b:07:cb:7b:eb:e2:9a:7e:05:2f:61:ef:43:ad:
                    fe:03:a5:f6:39:c4:41:c6:00:e1:3c:84:d9:de:da:
                    8a:05:d9:e6:60:97:b7:ee:a7:19:72:40:b6:31:5f:
                    76:96:4e:04:09:1e:8c:36:a4:d4:a3:97:a8:ed:6a:
                    75:09:4e:18:a8:7a:2c:ad:54:20:95:e8:46:ee:ca:
                    2f:a0:a2:a7:c8:d0:10:e4:96:f0:ca:8c:eb:56:9b:
                    75:56:6a:2d:9f:f4:1b:c0:be:e0:77:d5:c4:b7:58:
                    2a:bb:4a:ba:10:f5:92:83:59:24:13:0b:65:e7:3d:
                    21:5f:3f:59:68:82:de:12:cc:bb:64:1c:a1:50:c0:
                    6f:8a:1c:00:e9:3f:1a:ac:f6:87:30:01:f1:c6:d6:
                    bb:5e:23:de:e3:41:fa:7d:1d:95:40:42:cd:52:6b:
                    ca:93:95:d3:89:c7:7d:14:0a:a9:d6:a7:3c:12:6f:
                    05:38:69:b1:d3:d7:0d:7b:ba:65:27:ed:7b:f3:90:
                    08:ba:52:24:72:45:05:4b:3d:52:3e:ee:07:8c:e9:
                    7e:da:7c:1b:30:cc:99:42:eb:3d:ac:34:90:fa:b9:
                    e1:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:2A:D5:E8:D4:0E:92:C2:DE:71:FA:F7:41:2B:B7:23:EA:8F:4A:D0
            X509v3 Authority Key Identifier:
                keyid:00:02:41:49:0E:3F:20:98:F7:9D:5C:93:03:7E:BF:F2:B9:56:CF:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AAJBSQ4_IJj3nVyTA36_8rlWz9c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CA1A6/38D93E1E3D3011EBB3B2D66EC4F9AE02/AAJBSQ4_IJj3nVyTA36_8rlWz9c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:c8:b6:91:8f:5b:f4:4f:5f:3f:92:e2:96:15:78:bb:46:d8:
         f0:d1:bb:56:b5:a9:01:9a:5f:3f:6f:44:d7:42:4f:c8:3e:8f:
         9f:49:8a:4b:4d:f0:af:4a:e4:93:af:ca:24:22:01:a6:52:c7:
         d0:a3:4d:26:0c:62:ba:8b:86:7b:8c:bf:95:af:69:5a:cd:a2:
         41:76:01:05:90:29:24:12:79:f4:c4:6b:45:8f:03:5c:b9:bd:
         ab:52:89:7c:8f:19:88:b0:27:e1:b2:9f:64:11:17:ba:27:f2:
         b7:3d:38:ef:3d:02:56:96:fd:39:32:c5:33:34:a6:96:06:bc:
         8a:1d:c7:71:e8:99:66:4b:01:6b:b8:3d:76:27:ce:96:bd:bd:
         5d:34:b0:10:4c:d7:9a:2c:3b:f3:c9:5d:77:54:d6:03:2d:36:
         8c:ae:86:11:c0:a8:7b:57:c0:09:0d:14:4f:ef:81:e5:44:12:
         78:bf:b0:1c:6d:98:84:3b:c7:0e:a8:ce:66:19:13:5a:69:5d:
         88:85:4a:2a:21:b1:f6:26:23:9c:e2:3b:18:32:88:c1:0f:dc:
         dc:3d:31:7d:41:47:fe:4b:09:91:9d:44:3b:0f:8b:80:9a:d1:
         10:74:13:df:69:14:6b:cf:8f:73:c8:a9:65:6a:0e:45:87:23:
         9e:2e:48:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:32:09 2026 by rpki-client