Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
File:                     gYkRn4AeKAprTdViZT7xA2lh0Js.mft (raw, json)
Hash identifier:          IrW/QsWj6NutJHMei65tbWCdXeu4Fd53ujg7+2yWgno=
Subject key identifier:   22:D2:24:3B:C0:58:09:AB:B3:96:04:F1:C4:66:13:8F:17:6C:95:A2
Authority key identifier: 81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B
Certificate issuer:       /CN=A91D9CAE/serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
Certificate serial:       053B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
Manifest number:          0534
Signing time:             Tue 12 May 2026 23:36:45 +0000
Manifest this update:     Tue 12 May 2026 23:36:45 +0000
Manifest next update:     Tue 19 May 2026 23:36:45 +0000
Files and hashes:         1: gYkRn4AeKAprTdViZT7xA2lh0Js.crl (hash: f7So7nELtyTo9PVRlkL5RaEhyP1zPu3nucs2o0USmV4=)
                          2: D30098F6413111ECB71E086AC4F9AE02.roa (hash: yrbFlXX+Q20ODJMbiysSXJ6ACMYRj3dlttqVySrHsBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl
                          rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:36:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1339 (0x53b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D9CAE, serialNumber=8189119F801E280A6B4DD562653EF1036961D09B
        Validity
            Not Before: May 12 23:36:45 2026 GMT
            Not After : May 19 23:36:45 2026 GMT
        Subject: CN=6a03b98d-0105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:0c:0b:bf:77:d0:4c:dd:79:cb:de:11:1f:f9:
                    b5:03:c7:5a:f8:96:f4:b2:62:5c:c2:cc:bc:16:98:
                    be:a5:dd:7f:ef:a0:12:9b:e1:15:3c:9c:d0:0c:ab:
                    c2:d9:5e:fb:6f:03:30:77:1b:60:7b:6b:ee:7b:a7:
                    2f:3f:51:47:28:73:a4:f0:5a:89:c7:2a:32:5e:88:
                    b7:7a:11:70:5e:e3:cc:d0:6f:1f:8f:5f:f3:b2:62:
                    13:2e:bf:55:15:fd:11:0d:cc:45:70:a3:6b:94:bc:
                    de:37:9f:d6:93:ea:f3:1c:f1:e5:58:ca:c6:f4:45:
                    e0:a5:d0:4f:69:58:c7:02:44:4c:6d:1d:8d:22:22:
                    a1:ef:9b:47:ce:77:47:0d:de:17:74:da:fb:6c:6e:
                    d0:e8:3d:6d:bd:92:50:80:9a:02:85:0b:b8:bb:0f:
                    43:bb:b3:97:28:57:77:3b:15:6d:64:c4:8f:55:04:
                    5a:30:0b:b0:e1:a1:56:84:e4:8a:50:d2:f8:d8:b9:
                    26:7d:88:60:85:22:d0:3a:01:8c:4b:0d:48:8f:a3:
                    30:c5:72:9a:22:11:0b:39:26:42:d4:6d:2e:f2:ef:
                    df:ba:37:e1:0a:ba:79:4e:f0:44:a1:45:d4:eb:ea:
                    f9:ac:cd:62:41:c1:ac:a6:a1:53:6e:2e:e8:14:f6:
                    15:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:D2:24:3B:C0:58:09:AB:B3:96:04:F1:C4:66:13:8F:17:6C:95:A2
            X509v3 Authority Key Identifier:
                keyid:81:89:11:9F:80:1E:28:0A:6B:4D:D5:62:65:3E:F1:03:69:61:D0:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gYkRn4AeKAprTdViZT7xA2lh0Js.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D9CAE/FED5A2A8412E11ECABF7F566C4F9AE02/gYkRn4AeKAprTdViZT7xA2lh0Js.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3e:67:27:f4:fb:de:32:bd:60:9d:a6:f7:9c:24:75:1d:d8:58:
         fb:9d:6a:67:47:53:a6:26:43:54:8d:e4:e7:c5:15:15:03:b4:
         04:8e:ae:71:00:d8:e6:8e:73:8e:06:1b:25:53:8f:a4:20:e0:
         7b:a8:d3:26:6d:8d:2f:ed:84:c5:24:2a:a8:c0:36:db:a2:01:
         99:eb:a6:df:84:9e:47:af:19:72:12:bc:64:2b:05:de:b7:f7:
         f0:4e:c6:7c:33:07:e1:92:c0:35:d1:1b:9e:1d:9b:23:f6:21:
         28:63:77:80:b2:1e:f2:6d:10:ae:e7:e7:c8:99:c0:df:c0:79:
         5f:b7:bd:15:a7:62:53:c6:2e:58:80:bb:cc:bd:be:18:4a:03:
         86:70:0f:3f:d4:a8:ce:56:d7:60:51:58:82:9d:e0:11:51:0d:
         05:2f:b1:54:78:24:9e:44:19:49:31:5a:5d:9a:3e:42:17:93:
         69:04:57:3d:bd:0c:2d:76:36:db:e0:16:23:de:ab:3d:5a:9f:
         2e:0f:a2:b2:ed:cc:2f:7f:b5:1d:bd:03:eb:95:93:0d:58:31:
         f8:c9:6b:0d:bc:d0:42:f3:7a:3d:61:99:b8:49:eb:79:09:24:
         4b:09:e1:0c:db:88:9f:4d:a3:61:56:cc:18:4f:e3:02:b0:9b:
         71:fb:1b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:17:31 2026 by rpki-client