Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
File:                     5yN2M529XTAqWcz6d6wJzRcjlU0.mft (raw, json)
Hash identifier:          55Ay2Xcb7Mn+s+EJizRUcR2+Fl13dmp4XxjqHk0f8/Y=
Subject key identifier:   A7:5D:97:98:04:F2:29:2D:F3:E1:91:64:B1:5B:E3:D5:A7:FC:11:30
Authority key identifier: E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D
Certificate issuer:       /CN=A91CD60C/serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
Certificate serial:       012F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
Manifest number:          0128
Signing time:             Wed 13 May 2026 05:51:20 +0000
Manifest this update:     Wed 13 May 2026 05:51:20 +0000
Manifest next update:     Wed 20 May 2026 05:51:20 +0000
Files and hashes:         1: 5yN2M529XTAqWcz6d6wJzRcjlU0.crl (hash: F7mZ9CPJ6ioWTX6cOwFNfjAkalxSkFQCDTy67T2bds4=)
                          2: AC8EE79E975B11EFB1D18E82C4F9AE02.roa (hash: E/UjcIn0wlrlZQH9DRKC67zkHtOeFvf1WN6PywtlyRM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl
                          rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:51:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 303 (0x12f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CD60C, serialNumber=E72376339DBD5D302A59CCFA77AC09CD1723954D
        Validity
            Not Before: May 13 05:51:20 2026 GMT
            Not After : May 20 05:51:20 2026 GMT
        Subject: CN=6a041158-5b7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:2f:e6:00:3b:fe:7a:8e:96:66:b9:9a:c9:4f:
                    96:51:91:78:79:37:8a:19:87:67:76:73:1a:c2:25:
                    89:86:99:08:96:0f:de:a6:4c:53:41:9c:23:63:75:
                    68:86:8f:95:8d:40:bf:cb:af:03:5a:96:05:6b:7b:
                    57:62:82:65:2a:64:cd:d1:27:e9:97:13:3f:9d:49:
                    15:3f:46:80:f2:7b:86:a6:df:33:72:a5:9f:3e:93:
                    79:ee:ee:2d:0e:d8:b5:5c:db:55:3f:57:e1:dd:65:
                    14:31:11:c3:9b:36:92:ce:f0:9a:2c:b8:48:18:55:
                    52:d0:bf:8c:dd:86:93:7c:a9:e2:1b:74:43:1b:2c:
                    07:6e:4a:e4:0d:e7:6b:93:fd:66:ab:29:c0:c1:bf:
                    56:fc:d8:b5:0a:96:6b:c0:bc:b5:67:3a:04:2a:9b:
                    06:a2:32:55:1a:be:3a:e9:c7:c1:fe:c3:4e:ee:da:
                    95:c0:65:1c:3a:a7:42:c7:5c:b9:ea:55:c1:a8:97:
                    8a:60:dc:77:7a:8e:c3:d9:37:94:dd:de:49:e7:1f:
                    cc:9d:49:d8:e4:79:57:e8:12:af:06:b3:e9:72:1e:
                    41:38:bc:ba:07:b2:3b:7a:a0:d6:f4:0e:e5:e3:18:
                    34:08:27:df:8c:25:e3:33:c6:72:ae:05:3a:e0:3b:
                    72:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:5D:97:98:04:F2:29:2D:F3:E1:91:64:B1:5B:E3:D5:A7:FC:11:30
            X509v3 Authority Key Identifier:
                keyid:E7:23:76:33:9D:BD:5D:30:2A:59:CC:FA:77:AC:09:CD:17:23:95:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5yN2M529XTAqWcz6d6wJzRcjlU0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CD60C/188F1172973D11EFA5196058C4F9AE02/5yN2M529XTAqWcz6d6wJzRcjlU0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         0a:9b:e1:28:6d:81:2b:84:ee:1a:90:90:09:70:b6:79:5e:b2:
         2c:29:39:c2:fa:4e:68:c8:25:16:71:45:ef:2b:40:8c:6c:63:
         d1:7e:e5:e2:2b:8d:fa:23:72:4c:a2:bc:99:48:ff:da:50:a4:
         66:31:5c:f6:85:c9:20:d3:b6:ac:d0:ad:ef:86:a2:1e:78:4c:
         73:c9:81:d8:c7:04:e9:c6:13:b8:ea:4c:c9:42:8b:4a:c4:db:
         61:e0:95:16:ec:87:b7:ca:61:16:b4:fb:cf:0c:bc:1d:47:ef:
         c4:ee:7c:93:8f:3a:3a:75:4a:14:04:24:ba:95:d5:26:71:a7:
         c4:98:7f:aa:f4:91:b9:47:e2:43:5e:e0:2e:63:23:3e:3a:c7:
         50:5c:f8:33:9f:1b:68:1e:f0:92:55:33:6f:de:e1:cb:69:2a:
         e6:94:8e:76:0b:b4:91:2a:7b:63:c6:02:f4:5e:40:bf:29:07:
         d1:f4:f1:74:9d:09:7c:72:cb:a2:0a:83:8a:71:fb:3b:30:1d:
         47:c4:61:5d:cb:df:74:e6:09:02:0f:d1:fc:c4:80:19:48:2d:
         a1:8b:67:c7:44:40:92:0b:0f:8b:ea:76:42:05:09:82:bc:12:
         14:a6:55:61:ef:05:c9:bb:8e:ac:2c:b5:53:0a:b2:dd:1a:87:
         d5:fc:2a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:50:10 2026 by rpki-client