Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft
File:                     -a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft (raw, json)
Hash identifier:          xeAvgHRyxHn0FSqw9kqLN5W+OTQtZyRWJQU7X8H5K8Y=
Subject key identifier:   C8:38:7B:35:72:53:AB:F5:17:74:94:5C:36:61:BB:92:8A:F1:2D:F7
Authority key identifier: F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63
Certificate issuer:       /CN=A91DBAA3/serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63
Certificate serial:       5A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft
Manifest number:          54
Signing time:             Mon 11 May 2026 08:26:29 +0000
Manifest this update:     Mon 11 May 2026 08:26:28 +0000
Manifest next update:     Mon 18 May 2026 08:26:28 +0000
Files and hashes:         1: -a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl (hash: +ccRkVQnuH8t+Wip0MSKrOZfWYf5KQDL/FgHKpwsxnI=)
                          2: CF0F37FA1D1B11F1ACF733B0103D8C67.roa (hash: H5fMs/4SHZ+R2ioXCxpygGkCRluzXa/ZhyiVh3gWuO4=)
                          3: D0B6868A1D1B11F1ACF733B0103D8C67.roa (hash: jWdMxZZFTY4CsUZBn1lrTkWtYy/fDMYlI5r04PJk980=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl
                          rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:26:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DBAA3, serialNumber=F9AE5E2A9DC80B51EAA7577278C3DE061A80AB63
        Validity
            Not Before: May 11 08:26:28 2026 GMT
            Not After : May 18 08:26:28 2026 GMT
        Subject: CN=6a0192b5-cf07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:8c:ce:ea:31:35:6c:c5:c4:66:dd:e0:1a:09:
                    03:35:12:fc:24:d3:00:35:b3:92:1f:84:2c:f1:3c:
                    ab:9e:76:c3:4f:c5:7a:ac:f1:a2:77:75:b8:fa:de:
                    5f:37:1b:41:a5:5f:56:f0:75:1e:ef:44:83:a1:1d:
                    20:5f:05:24:0b:4c:f9:9b:23:5a:dc:7c:63:54:1e:
                    8e:b0:25:bd:0f:45:e3:2f:ae:bf:6d:0b:7c:b2:8b:
                    8a:fd:6d:c1:c3:da:0c:24:40:1e:e2:da:78:80:79:
                    3e:23:ed:b5:7d:8d:28:0f:3b:7a:88:d5:ed:be:f2:
                    cb:08:9c:46:f3:f0:34:8b:b2:e1:66:17:5f:38:ee:
                    3e:e6:b1:91:7e:e6:65:6f:15:9b:1d:51:91:36:82:
                    4c:cb:48:d5:f0:8f:8d:90:6a:69:5f:52:54:6b:5c:
                    65:9e:42:25:a4:25:29:99:de:cd:74:73:e6:b4:07:
                    c6:4f:1d:7f:9a:06:5c:84:70:ec:1e:da:d3:86:04:
                    c4:53:5e:2f:78:68:f4:19:01:88:88:e7:e8:ba:40:
                    65:64:b4:f2:b2:ae:96:7a:e9:1a:1c:7d:f4:2a:af:
                    79:a0:e4:9f:00:c9:22:e9:fe:ae:e9:33:e3:4a:f2:
                    ef:b3:7a:21:57:d3:38:57:19:8a:e6:9e:23:30:fc:
                    a4:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:38:7B:35:72:53:AB:F5:17:74:94:5C:36:61:BB:92:8A:F1:2D:F7
            X509v3 Authority Key Identifier:
                keyid:F9:AE:5E:2A:9D:C8:0B:51:EA:A7:57:72:78:C3:DE:06:1A:80:AB:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DBAA3/1C17913AD90D11F08680D5F17CD3641D/-a5eKp3IC1Hqp1dyeMPeBhqAq2M.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         43:14:6f:9e:cb:67:a1:d2:fb:97:59:88:c8:20:d7:13:c1:f3:
         7a:af:0f:97:ce:41:8a:da:38:b7:72:5f:b4:6c:d6:59:d5:25:
         c3:46:dc:61:75:b3:55:dc:8e:dd:17:7a:c7:e6:d5:cf:c5:22:
         a2:41:5a:dc:73:32:d5:74:26:bb:9a:73:ed:f9:6f:93:49:93:
         db:48:f4:d8:fd:7a:6a:e6:05:50:66:b1:b6:8c:f2:37:fd:f4:
         40:56:c5:b8:49:1b:20:18:b0:ab:9a:eb:07:8f:a1:4a:de:99:
         83:9c:80:de:b6:2b:26:7c:2b:84:61:17:9c:d9:eb:b7:a4:09:
         aa:b9:37:54:36:e9:98:c7:64:e0:ea:2b:1a:3d:25:b3:f9:8b:
         7f:d1:68:96:57:0e:54:42:85:57:81:a0:19:fb:c9:27:45:eb:
         83:b0:d7:66:49:56:00:11:46:09:f4:d3:1d:94:21:99:54:10:
         dd:e8:a5:29:45:68:2c:a8:2b:ca:0a:7d:6f:ce:95:7d:d3:c3:
         93:29:8e:22:ed:b4:5b:b4:30:bd:76:08:ae:eb:cd:a7:3c:35:
         a7:74:a2:f6:03:d0:73:a4:d7:bc:85:1f:df:fc:3e:00:c0:90:
         b1:01:2e:c3:c9:ce:39:e5:c3:3c:c2:48:20:2e:fc:ad:64:89:
         5f:a7:94:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:54:41 2026 by rpki-client