Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
File:                     gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft (raw, json)
Hash identifier:          FiE/mQdfmdk91VkHmwctZY6EeJpZSDZqRezwXFgciaY=
Subject key identifier:   F4:B8:5B:86:74:AC:BA:55:D4:DC:05:63:AC:A4:4F:74:F4:57:5B:A9
Authority key identifier: 80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB
Certificate issuer:       /CN=A91D959F/serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
Certificate serial:       0835
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
Manifest number:          082D
Signing time:             Tue 12 May 2026 21:04:20 +0000
Manifest this update:     Tue 12 May 2026 21:04:20 +0000
Manifest next update:     Tue 19 May 2026 21:04:20 +0000
Files and hashes:         1: gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl (hash: HakRF2Ab0iEgQJYtlnjsupPN1pu5z5wtS/eoFZFM5rs=)
                          2: F75AEA8A13F111EB950DBC4EC4F9AE02.roa (hash: jOVkHlbZCBgwXHvRYiey/5/5qsAljK9sG8lXCEjLe4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl
                          rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 21:04:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2101 (0x835)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D959F, serialNumber=808401723C2E418456AF9A0FB25F8C321C4970CB
        Validity
            Not Before: May 12 21:04:20 2026 GMT
            Not After : May 19 21:04:20 2026 GMT
        Subject: CN=6a0395d4-8a64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:47:91:16:39:35:98:c7:ad:36:c8:eb:ec:af:
                    25:3e:ea:63:72:a4:af:65:46:07:49:39:e8:f4:e0:
                    fa:16:f5:b1:05:28:97:e9:5a:9b:61:8a:3a:7c:aa:
                    4d:86:8a:0f:28:74:7a:f5:5b:58:63:19:18:0d:13:
                    de:90:9b:42:77:b1:30:95:ed:20:b0:73:70:9e:92:
                    8c:f3:99:4e:cd:f7:2e:16:cb:a5:6e:3d:b6:b9:c8:
                    79:c2:87:13:7e:c6:1e:a3:4d:0b:50:7d:37:17:fb:
                    25:49:54:6f:2c:26:dd:e0:48:04:70:ef:e4:0c:fc:
                    38:b6:81:84:02:37:11:35:bc:cc:0d:1d:03:67:87:
                    ac:08:00:bf:2f:8e:a2:90:4c:a2:de:a0:2c:e6:4d:
                    28:72:f6:df:3c:7d:24:03:4f:da:13:a2:64:52:02:
                    c6:08:91:ac:c4:0b:ff:ec:21:ba:65:5d:38:ad:e0:
                    d7:9d:06:18:47:8d:df:6a:97:f9:2d:4e:76:e4:0f:
                    a9:a3:11:9c:b0:57:53:5d:16:30:f1:0a:30:6e:27:
                    89:aa:7d:fe:f3:ef:67:26:9e:57:0d:14:b0:f0:34:
                    72:a4:e4:99:fb:ba:e0:c2:bb:a1:ce:4a:a6:ad:19:
                    99:20:45:de:e6:a9:79:80:b5:50:d1:fc:eb:45:c7:
                    65:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B8:5B:86:74:AC:BA:55:D4:DC:05:63:AC:A4:4F:74:F4:57:5B:A9
            X509v3 Authority Key Identifier:
                keyid:80:84:01:72:3C:2E:41:84:56:AF:9A:0F:B2:5F:8C:32:1C:49:70:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gIQBcjwuQYRWr5oPsl-MMhxJcMs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D959F/068100EA13F111EB974D974EC4F9AE02/gIQBcjwuQYRWr5oPsl-MMhxJcMs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9e:49:65:7b:35:2d:5e:de:fd:6b:c8:0c:54:2d:fb:b8:7c:ee:
         79:99:b0:3f:cb:d1:6d:70:bf:ec:5c:08:fb:ac:bb:34:4a:7f:
         ac:be:64:b0:9a:9f:3b:79:d0:0d:cf:b6:d9:c7:04:9d:6f:1b:
         b2:3f:52:b9:f2:f4:50:85:a4:a1:d8:07:0c:7a:bf:df:c0:cd:
         45:2c:60:56:0a:75:17:45:3c:9a:c0:4d:47:d2:51:d6:c8:19:
         88:17:bd:91:25:00:dc:cb:95:c8:4a:84:1d:9f:ad:ce:fb:3e:
         b2:63:d8:93:6f:ce:44:9d:62:47:77:30:2b:9d:02:cb:22:96:
         0e:d5:ae:9e:d2:62:21:be:ef:42:bc:13:66:d4:24:1f:3d:38:
         52:c9:ca:ee:9c:bf:68:5b:b7:1f:01:1d:af:92:99:d9:2b:be:
         35:9c:ad:e5:ce:8c:22:ff:39:4d:57:9f:aa:3b:b3:e4:68:5c:
         e5:f7:e4:61:e4:75:8b:e7:0e:86:57:76:04:08:21:10:4e:67:
         01:7d:4b:38:f9:19:2c:67:53:46:2b:1b:f8:ea:2b:d5:31:3c:
         24:c8:b2:71:17:2a:0c:d9:3e:a5:36:6c:df:61:ee:a7:e9:d0:
         bd:7f:85:b8:6d:7c:7e:dc:72:e3:7f:e0:16:0c:ff:37:bd:ea:
         09:66:ea:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:17:40 2026 by rpki-client