Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
File:                     A9h0_y9dMgjn62Jadzf81EzuKsI.mft (raw, json)
Hash identifier:          uYn3fm81oa7YhBD/QzDSuxh/GsiOiva7WOVLJBsFl/0=
Subject key identifier:   C6:02:CF:E9:08:1E:73:92:27:EF:3D:A7:09:EF:59:38:13:ED:63:2D
Authority key identifier: 03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2
Certificate issuer:       /CN=A91D901E/serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
Certificate serial:       90
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
Manifest number:          8E
Signing time:             Wed 13 May 2026 07:39:01 +0000
Manifest this update:     Wed 13 May 2026 07:39:01 +0000
Manifest next update:     Wed 20 May 2026 07:39:01 +0000
Files and hashes:         1: A9h0_y9dMgjn62Jadzf81EzuKsI.crl (hash: +32gHtK/gTI1kBzSXcS5NwcIrTV6ERoTw3fiOJ3HZ6A=)
                          2: 58893B2878DC11F084C71D2BC4F9AE02.roa (hash: cA1zRf5hGPx366nz55tbLEUSAsNqCtNhxK7+ift/7Yw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl
                          rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:14:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D901E, serialNumber=03D874FF2F5D3208E7EB625A7737FCD44CEE2AC2
        Validity
            Not Before: May 13 07:39:01 2026 GMT
            Not After : May 20 07:39:01 2026 GMT
        Subject: CN=6a042a95-54d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:0f:cf:1a:54:a6:5f:80:4f:08:de:8a:c1:c1:
                    b9:c7:b1:b5:df:a6:5a:c2:58:60:8b:bf:8b:e2:fb:
                    1d:12:5b:2a:86:0d:3b:84:45:8d:36:f7:c9:73:88:
                    f9:82:ba:49:01:b9:9f:5d:84:07:5e:66:01:f0:35:
                    7b:a7:ca:3d:09:14:d1:ca:28:02:23:2a:b4:56:6b:
                    c5:fa:be:fc:b4:14:bd:eb:2e:c9:6e:1c:49:6b:3b:
                    56:17:2d:2f:62:d0:70:6f:cb:e7:10:ce:d2:22:95:
                    b6:b9:17:7c:32:42:00:46:bb:63:04:0e:db:4f:7d:
                    35:ff:64:d1:83:28:25:82:8b:da:68:7b:10:ef:84:
                    c5:24:1e:66:b8:92:a4:13:ab:6b:73:bc:4c:a1:d0:
                    a6:c1:7d:39:23:0c:bf:d7:32:f2:11:63:17:28:79:
                    fd:63:48:db:64:38:c5:bc:54:22:8c:3b:f8:de:52:
                    58:ab:c6:df:0a:a0:33:0d:76:a7:66:6b:4d:a7:d1:
                    91:bb:0e:9a:7a:a4:35:1d:48:5e:3c:c2:23:73:1b:
                    32:b6:a4:d1:e9:0b:77:b9:2d:80:5e:0e:b4:99:78:
                    28:0e:85:31:44:35:01:a3:3b:9f:bd:a9:56:90:d6:
                    77:86:93:4a:35:96:e3:8b:a7:0b:1c:f1:01:f3:04:
                    f8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:02:CF:E9:08:1E:73:92:27:EF:3D:A7:09:EF:59:38:13:ED:63:2D
            X509v3 Authority Key Identifier:
                keyid:03:D8:74:FF:2F:5D:32:08:E7:EB:62:5A:77:37:FC:D4:4C:EE:2A:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/A9h0_y9dMgjn62Jadzf81EzuKsI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D901E/DE2D64EA78DA11F0B0FBE216C4F9AE02/A9h0_y9dMgjn62Jadzf81EzuKsI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         30:a8:d0:32:29:46:6e:b9:55:4d:13:f3:4f:1a:35:a4:c6:cb:
         0c:a4:2d:fb:3f:27:cc:24:3b:71:62:bf:f1:d2:01:a5:8d:cc:
         70:4a:d6:ba:00:3e:ec:cc:f0:ba:1b:31:10:43:c4:53:22:4d:
         19:ea:97:0e:a1:3a:92:81:59:8b:1f:f9:85:ad:69:31:92:b8:
         b8:e6:42:61:aa:1e:3f:bc:50:b9:06:18:11:56:8c:be:b6:9a:
         0f:44:73:2f:a9:52:72:d3:25:e5:c4:b0:d5:63:a8:6e:fb:c2:
         c2:db:78:70:c7:16:d4:d9:88:45:88:48:21:56:c7:ed:c1:f6:
         ce:6f:cf:e2:06:f7:1b:da:92:e1:2e:82:67:ca:ed:f2:b3:a6:
         91:0a:83:a0:63:e5:27:e9:70:2c:6a:16:58:38:03:57:1b:52:
         ac:6d:09:d2:48:f3:41:ac:95:99:16:03:62:a9:f6:c1:c4:92:
         25:67:79:92:5f:db:b9:bb:93:00:30:60:b3:7b:a9:aa:98:08:
         b1:20:65:2e:9c:18:5e:87:e5:dd:04:53:8a:61:76:1f:22:20:
         fe:61:2b:0c:91:78:f7:33:e9:e1:0c:68:0c:09:b4:40:0a:9b:
         6f:e9:60:f7:4f:9e:9a:8d:6a:f5:06:76:3d:23:c9:b2:4e:a5:
         11:96:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:46:34 2026 by rpki-client