Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
File:                     9-88h0KVuB-hDxQP61W8nFzt-dk.mft (raw, json)
Hash identifier:          0qjzDJ3vr84BrR+iV+k0zqPPRBzB3FQ0uADQd3bhuVg=
Subject key identifier:   59:D5:9A:45:94:94:59:80:1C:0B:A2:55:DA:14:18:22:4E:96:7E:F7
Authority key identifier: F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9
Certificate issuer:       /CN=A91D8218/serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
Certificate serial:       69
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
Manifest number:          67
Signing time:             Wed 13 May 2026 08:03:59 +0000
Manifest this update:     Wed 13 May 2026 08:03:58 +0000
Manifest next update:     Wed 20 May 2026 08:03:58 +0000
Files and hashes:         1: 9-88h0KVuB-hDxQP61W8nFzt-dk.crl (hash: MsavksRpTzaLb7qb8QiOw7xPQwxRysjXLqQ3RzzrO/o=)
                          2: E1F27B12B4A611F0927EAF76C4F9AE02.roa (hash: KPsklehDxHE/6tXZuvBqXZaukbJh52cwiwX6QhSLfDQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl
                          rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:03:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D8218, serialNumber=F7EF3C874295B81FA10F140FEB55BC9C5CEDF9D9
        Validity
            Not Before: May 13 08:03:58 2026 GMT
            Not After : May 20 08:03:58 2026 GMT
        Subject: CN=6a04306f-f14b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:94:f2:5a:07:16:72:9a:f9:ac:2f:ff:0d:1f:
                    14:40:a0:40:18:aa:39:46:c3:80:22:1d:ac:5c:a5:
                    00:40:e4:2b:46:57:2f:94:78:a1:0a:c7:63:f1:ff:
                    bb:aa:82:82:bd:cc:34:46:cb:85:73:7f:72:da:26:
                    1a:98:5b:32:95:79:54:b3:03:44:75:9e:35:bf:97:
                    f8:b2:8c:6e:d8:73:e5:02:78:3c:11:cd:be:11:b7:
                    53:fc:68:ae:f5:ef:43:8c:64:e7:0d:9b:f7:c2:74:
                    47:fe:da:20:00:b4:2e:7c:56:17:46:5e:7f:6e:c7:
                    54:4d:cb:90:b4:52:67:88:19:85:1c:e1:c1:cf:25:
                    d9:a1:df:96:e2:ae:ca:ae:d1:73:ac:0c:ec:d0:ca:
                    57:ba:f7:f2:df:cb:13:96:c6:ad:ac:7e:f4:03:f8:
                    2c:d8:82:24:25:68:21:0e:59:ec:a9:38:4a:7d:04:
                    14:54:37:14:62:9e:18:39:a3:cc:5f:d6:da:53:fd:
                    97:6a:bb:78:7b:05:d1:68:a6:f0:31:b2:49:b3:43:
                    ec:00:21:ec:49:ac:e5:b9:1f:22:cd:4e:cd:13:2f:
                    2c:f6:56:4a:f3:df:93:49:62:23:39:b9:fb:d3:65:
                    59:a2:36:6e:c3:22:b1:9b:e0:4c:f7:1c:87:5b:ca:
                    d5:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:D5:9A:45:94:94:59:80:1C:0B:A2:55:DA:14:18:22:4E:96:7E:F7
            X509v3 Authority Key Identifier:
                keyid:F7:EF:3C:87:42:95:B8:1F:A1:0F:14:0F:EB:55:BC:9C:5C:ED:F9:D9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9-88h0KVuB-hDxQP61W8nFzt-dk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D8218/4E240F22B4A611F08AD3B075C4F9AE02/9-88h0KVuB-hDxQP61W8nFzt-dk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         34:5e:2f:43:cc:8c:d2:a5:5c:55:7a:a4:25:3d:f7:ad:6e:29:
         92:50:ee:c3:51:ec:c6:6e:39:b3:ed:7a:15:ff:dd:bd:eb:82:
         a2:35:38:0b:2a:66:d9:f2:05:18:07:55:53:62:b1:cd:f0:3c:
         1d:82:7a:0e:b3:d1:e0:80:04:cc:e6:ea:21:1c:f3:b6:a4:4e:
         d3:e0:3d:04:35:6d:51:30:cf:ca:45:2d:14:58:8a:71:4f:a8:
         b3:49:36:e5:29:4a:0d:18:13:ad:d9:1c:36:5f:d0:e3:5d:bf:
         51:90:71:27:d1:77:81:6b:39:64:c9:89:41:e9:78:43:c1:87:
         75:e7:9b:3b:9c:b3:ec:17:d4:2f:38:cb:dc:db:43:6c:93:91:
         44:a0:61:26:ee:45:35:64:4c:54:e4:5e:4b:50:0a:20:9c:0c:
         d3:7e:68:51:65:fd:9b:ad:bd:7c:d1:b3:5e:d4:e1:66:05:58:
         e0:15:60:82:24:82:ed:49:60:e2:57:bf:83:0f:21:19:07:ae:
         ca:11:fb:0a:60:aa:99:68:38:4d:6e:73:2d:92:61:b9:03:01:
         f3:4d:ba:b5:b9:2e:d5:c7:63:fe:de:a6:4f:28:44:cd:55:2f:
         6f:c4:e6:ee:0f:ea:0e:12:51:e9:2d:b8:31:e3:3f:00:cb:d7:
         67:41:78:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:50:50 2026 by rpki-client