Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
File:                     0fGDjm-uASwUWNKgeiJNnhEBJdw.mft (raw, json)
Hash identifier:          oH14SATi+1wV1IZ0aWIhiTJt0xAMvqt6PHr672i2Jsk=
Subject key identifier:   FC:70:2D:82:0D:D8:08:A5:D3:B1:0D:2A:5F:D1:F1:A2:2C:2B:71:72
Authority key identifier: D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC
Certificate issuer:       /CN=A91D3603/serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
Certificate serial:       0592
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
Manifest number:          0589
Signing time:             Sun 10 May 2026 23:17:51 +0000
Manifest this update:     Sun 10 May 2026 23:17:50 +0000
Manifest next update:     Sun 17 May 2026 23:17:50 +0000
Files and hashes:         1: 0fGDjm-uASwUWNKgeiJNnhEBJdw.crl (hash: 8Amjqz9nEdcfQXi+nN3dJFo1qHWMK+Mg7U+tztoDf1U=)
                          2: 11F818F81F7311EC9027050AC4F9AE02.roa (hash: EBh/ckQNlDc4ahR7RMYLM7PgmugIX2cx8X7/ugjUn30=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl
                          rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 17 May 2026 23:17:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1426 (0x592)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3603, serialNumber=D1F1838E6FAE012C1458D2A07A224D9E110125DC
        Validity
            Not Before: May 10 23:17:50 2026 GMT
            Not After : May 17 23:17:50 2026 GMT
        Subject: CN=6a01121e-34fd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:56:fd:a0:8f:b6:58:04:4d:64:fb:a3:88:63:
                    16:f5:3f:db:44:bd:fc:54:6f:37:56:69:4f:09:ed:
                    c4:62:29:04:4b:b7:15:6a:14:40:ee:f2:47:24:ed:
                    4d:09:1d:02:ab:15:90:56:72:e7:f8:bb:a7:b1:04:
                    e4:22:ee:20:2f:de:52:21:8b:78:0e:4f:75:02:f8:
                    f7:b9:e9:b6:60:a9:a4:3d:0f:ea:13:4f:20:ff:1a:
                    78:d2:7d:0a:5b:d5:7e:60:5e:d6:d5:b0:5d:75:f4:
                    6f:40:2f:c9:7b:61:b2:a6:03:c7:9b:1e:bb:0d:5a:
                    9b:2d:51:86:fa:e6:0b:b6:cf:c7:de:06:f9:88:e4:
                    c4:1e:59:e0:bd:36:b0:ff:a8:9a:24:3e:e3:52:6f:
                    80:fe:64:87:36:ba:0a:fc:e3:89:63:1f:f7:9b:b1:
                    a5:c4:d4:97:11:a1:af:6d:d9:00:0b:ab:4b:04:35:
                    d7:f8:e7:ea:da:cd:b9:cd:1f:ba:1b:b3:9d:1a:0c:
                    22:14:ba:69:07:b2:9a:f3:1e:28:78:f3:4b:67:28:
                    6d:d5:b1:58:b3:bf:fd:dc:f1:f4:b9:5b:05:ec:2d:
                    bd:f3:cf:23:a0:f5:6c:fb:dc:e1:30:10:4a:c7:c4:
                    a3:d3:05:d3:7e:d5:f1:0b:a5:0b:1d:16:6d:80:6a:
                    63:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:70:2D:82:0D:D8:08:A5:D3:B1:0D:2A:5F:D1:F1:A2:2C:2B:71:72
            X509v3 Authority Key Identifier:
                keyid:D1:F1:83:8E:6F:AE:01:2C:14:58:D2:A0:7A:22:4D:9E:11:01:25:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/0fGDjm-uASwUWNKgeiJNnhEBJdw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3603/8C82AC341F6C11EC87580672C4F9AE02/0fGDjm-uASwUWNKgeiJNnhEBJdw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5d:06:0d:c8:17:b8:60:0f:38:26:9a:60:7b:0f:4d:79:86:9a:
         01:1f:1a:ce:88:58:4b:f0:8d:5c:94:fa:b0:39:f9:b2:25:86:
         bb:16:22:35:74:9a:42:ab:d7:4c:20:21:0c:7c:27:6e:74:af:
         d7:20:5e:94:67:fa:19:7e:a7:99:c3:dd:7c:6f:65:ea:eb:5b:
         eb:cc:7e:d3:86:2d:5c:43:09:7f:ae:b2:b4:39:a6:bd:69:40:
         c9:8d:12:b6:b3:1b:6b:b9:9d:f3:12:6c:4d:eb:22:0c:a9:1e:
         cf:90:83:1d:6a:39:ed:96:f6:2e:3d:6e:da:2c:13:6c:a0:ac:
         0e:11:8b:ed:35:1e:7b:39:30:fe:b9:a7:57:f8:99:af:22:61:
         67:cc:48:1a:88:8a:2e:87:ac:e0:a2:81:5f:7b:e6:c8:e7:6e:
         ca:06:05:b6:85:95:2b:e8:5a:51:4f:87:a2:3c:e0:28:5a:4c:
         df:7c:15:ac:8b:9c:39:36:49:55:06:15:e1:b2:f5:1a:2c:88:
         c0:b7:88:e3:01:2c:24:6e:0d:24:b9:70:d3:90:7b:f6:59:80:
         12:68:4f:26:0e:bf:03:c8:04:17:3f:7e:a4:80:85:c6:c6:42:
         3c:b6:94:80:34:c3:da:6e:bf:b2:e9:78:2e:5f:ef:f6:c2:8c:
         8b:97:d6:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue May 12 22:31:20 2026 by rpki-client