Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
File:                     xIoOQPt_45dbEsI-AwrFTFIFcWM.mft (raw, json)
Hash identifier:          18iLWsWAzXPjV4EVkrCNDY/N0XO7ai2FyTkUJKxBOmw=
Subject key identifier:   96:80:38:27:2A:C5:F0:45:3F:5A:4F:03:02:54:09:8E:97:8E:DE:08
Authority key identifier: C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63
Certificate issuer:       /CN=A91D28BC/serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163
Certificate serial:       0610
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
Manifest number:          060A
Signing time:             Tue 12 May 2026 22:57:01 +0000
Manifest this update:     Tue 12 May 2026 22:57:01 +0000
Manifest next update:     Tue 19 May 2026 22:57:01 +0000
Files and hashes:         1: xIoOQPt_45dbEsI-AwrFTFIFcWM.crl (hash: ouzgtxlLQRwA98rENiVLXWxZLbx2BKrhz6Ag8VDVhJ0=)
                          2: 2B07FA82EADC11EBBE430B5EC4F9AE02.roa (hash: IP/QJfV6mDMkAmZvNNAznS9XZlWRM/mkzo7SsyQDQEc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl
                          rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 22:57:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1552 (0x610)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D28BC, serialNumber=C48A0E40FB7FE3975B12C23E030AC54C52057163
        Validity
            Not Before: May 12 22:57:01 2026 GMT
            Not After : May 19 22:57:01 2026 GMT
        Subject: CN=6a03b03d-d6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:b0:20:bf:93:93:ae:ef:01:32:c1:5c:c4:
                    77:ac:c6:c6:23:fc:fe:0c:7d:d6:97:32:73:5f:0f:
                    ae:af:97:51:3c:4b:e0:14:dd:48:2b:4e:09:45:3a:
                    3b:f5:67:b8:bd:d5:56:16:0a:1d:cb:fe:f8:b7:33:
                    ba:b7:02:17:b9:2e:94:9b:2e:0f:cf:6f:dd:a2:c1:
                    06:f1:56:09:e4:f9:ac:47:d3:03:11:60:0d:7e:54:
                    9d:46:92:83:c0:9a:aa:48:5c:af:05:8b:36:de:7d:
                    13:01:f9:1b:35:d8:00:ce:19:7c:02:a6:17:4d:61:
                    f1:42:15:bd:42:47:05:3c:9b:5b:03:20:f1:6d:1f:
                    5a:0d:24:df:f5:1a:d6:d0:6f:7a:6d:75:7f:4b:40:
                    f8:91:79:ed:f4:0e:89:9b:b2:74:fe:09:f7:d3:b1:
                    c6:dd:f0:c5:8c:b7:32:27:9e:08:75:0b:44:7d:af:
                    85:e1:47:ac:87:10:c2:a5:1f:cd:8d:30:61:51:82:
                    a9:25:fe:be:c4:80:35:ce:e8:8e:56:5d:d8:3e:99:
                    17:31:a9:9f:7c:5f:f4:a9:a0:ee:b4:83:bd:13:29:
                    77:79:91:91:05:57:25:07:98:6d:0d:42:26:6d:22:
                    36:46:63:3e:32:e3:cd:29:79:91:2f:ba:6d:57:06:
                    8b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:80:38:27:2A:C5:F0:45:3F:5A:4F:03:02:54:09:8E:97:8E:DE:08
            X509v3 Authority Key Identifier:
                keyid:C4:8A:0E:40:FB:7F:E3:97:5B:12:C2:3E:03:0A:C5:4C:52:05:71:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xIoOQPt_45dbEsI-AwrFTFIFcWM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D28BC/92092390EAD811EBBD2CC758C4F9AE02/xIoOQPt_45dbEsI-AwrFTFIFcWM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d4:74:56:ac:aa:4f:d1:9d:1f:99:ff:43:88:11:dc:80:ee:9b:
         d3:f4:8c:a0:40:16:03:e7:cb:ae:52:ab:f8:51:c4:6b:28:1c:
         86:f4:ba:37:9e:0d:69:1b:04:35:5e:a5:d7:17:6c:66:8e:c2:
         af:b4:dd:76:8a:ac:50:55:04:5a:bc:67:62:18:ba:87:e5:a1:
         f2:0e:1f:c8:08:da:d2:d2:b9:d9:2b:88:e1:b5:a8:5d:80:4c:
         0e:7a:ea:65:04:3c:5a:60:46:f1:20:f7:f3:fb:1d:cb:f4:b8:
         e7:53:83:c7:a5:5b:76:61:59:90:62:11:35:c7:94:66:45:b7:
         ed:53:18:24:19:6e:08:d4:35:65:aa:b4:94:66:73:9a:d4:43:
         ae:1e:d4:73:b5:7f:2c:17:4b:ec:8f:b3:91:42:92:bf:c5:cd:
         2e:8d:41:bc:ce:7f:83:bf:4e:af:5c:e0:be:6a:e5:2b:e1:0b:
         0c:24:ae:24:8b:d8:c2:af:a7:85:c8:78:28:14:8e:1c:65:fa:
         5c:7c:63:6f:6f:23:f3:a8:3c:00:3d:f9:6f:cb:13:65:df:0d:
         a0:b4:4b:0f:af:bd:ed:17:cd:81:64:17:c0:1d:ef:1b:5f:36:
         3c:40:14:1c:df:d7:23:7f:15:0b:84:a1:be:73:eb:a0:60:81:
         db:05:bb:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:46:16 2026 by rpki-client