Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
File:                     MMBAdim7T5_NgVSJo3jcGjU9r-w.mft (raw, json)
Hash identifier:          /5bNVnDR7/K9BEJMFThuxTk3kjAuR4DltTtsw8CB/yY=
Subject key identifier:   31:D2:39:40:9D:D3:32:DE:DC:C7:60:99:E8:1E:A3:56:6A:4D:E1:F6
Authority key identifier: 30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC
Certificate issuer:       /CN=A91DC5E3/serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
Certificate serial:       19CA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
Manifest number:          19BD
Signing time:             Tue 12 May 2026 16:23:07 +0000
Manifest this update:     Tue 12 May 2026 16:23:06 +0000
Manifest next update:     Tue 19 May 2026 16:23:06 +0000
Files and hashes:         1: MMBAdim7T5_NgVSJo3jcGjU9r-w.crl (hash: CaZ364UZGorbbK2c2XLJrtn6894dKKpnV9dHjJgTwVE=)
                          2: AE929D88823711E782F9A440C4F9AE02.roa (hash: VGW6op9Jt58zCIJmnt9wzfxbg01YKQLR1kaa8y0ck8k=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl
                          rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:23:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6602 (0x19ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DC5E3, serialNumber=30C0407629BB4F9FCD815489A378DC1A353DAFEC
        Validity
            Not Before: May 12 16:23:06 2026 GMT
            Not After : May 19 16:23:06 2026 GMT
        Subject: CN=6a0353eb-1d44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:6e:7c:df:f4:63:84:db:36:f4:66:16:a8:81:
                    50:91:64:37:d5:12:65:f0:17:e3:ad:b0:77:e8:a5:
                    a6:b7:a8:30:3c:f8:08:71:30:27:a0:4a:8f:e0:e7:
                    73:4d:3e:4e:4b:9b:5d:cb:f4:de:c2:e8:78:09:ea:
                    33:5c:c1:b3:e3:6e:1e:1f:c1:a5:57:2e:58:a8:aa:
                    82:a7:61:8d:c7:81:17:0f:7a:2d:ca:15:25:ab:74:
                    54:17:4e:d2:b9:23:b1:2f:52:2a:f1:28:d2:c3:9b:
                    a9:12:16:a5:ad:7e:ee:81:0e:ed:7c:58:c5:de:8f:
                    99:62:f7:a5:ac:c2:9d:52:fe:91:ee:fd:f8:79:47:
                    64:f0:4e:ad:7c:b7:b4:19:18:a0:83:75:99:56:8d:
                    93:1d:54:8c:81:5c:61:36:a7:15:37:2b:b1:c7:b4:
                    d3:95:ab:23:a4:5a:42:93:ee:82:d1:3b:00:e7:96:
                    25:70:3f:9d:53:25:db:0e:89:d4:86:31:25:0b:31:
                    8c:5a:80:e5:21:98:0d:4a:f9:bd:32:0b:eb:46:66:
                    b4:f1:a2:35:fc:91:a9:32:d6:ea:20:b1:41:32:fe:
                    72:52:0e:df:67:d4:01:6c:e6:2f:28:50:38:b7:7e:
                    b3:b6:a7:f0:37:db:d7:26:71:0c:f4:c5:4b:7a:42:
                    a4:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D2:39:40:9D:D3:32:DE:DC:C7:60:99:E8:1E:A3:56:6A:4D:E1:F6
            X509v3 Authority Key Identifier:
                keyid:30:C0:40:76:29:BB:4F:9F:CD:81:54:89:A3:78:DC:1A:35:3D:AF:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/MMBAdim7T5_NgVSJo3jcGjU9r-w.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DC5E3/B709A5DA823511E78DB3B139C4F9AE02/MMBAdim7T5_NgVSJo3jcGjU9r-w.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:68:96:75:3d:ce:2d:8c:74:d3:3a:9f:5c:0f:3b:8c:74:39:
         c9:9d:55:be:71:55:87:12:87:ae:c0:5e:2b:e5:af:53:b4:09:
         a1:19:cc:60:61:c8:c9:f8:e7:45:21:e1:77:00:8d:96:c8:9e:
         77:26:c6:30:06:23:80:cd:a5:5f:59:9b:32:e2:77:0d:8f:65:
         1c:6c:a7:96:0f:68:5f:23:b7:ef:84:a9:4c:f0:6d:24:66:89:
         cd:b9:0f:54:bf:84:a5:46:9a:b0:88:96:8f:36:fa:d9:b8:66:
         1c:f0:90:7e:ae:6d:35:08:9e:fb:0e:2b:69:76:b8:a8:09:74:
         b6:e0:2c:10:15:b7:f8:cf:ef:b0:4b:52:e5:2e:dd:c2:95:8f:
         35:e9:74:45:ee:a9:ca:82:54:9f:9d:4a:2e:44:8f:1d:2f:0f:
         66:1e:53:06:a0:6c:ea:92:a4:6e:f8:8b:8f:81:44:95:ae:87:
         6c:94:f6:b4:42:7e:19:cf:6b:dc:b2:78:d3:02:60:c3:27:e1:
         41:ac:9d:98:a1:36:2a:2b:c6:11:0e:5d:33:e4:3e:f5:cb:48:
         fd:42:0a:4e:27:0f:3f:fa:1d:b9:14:52:20:06:26:fe:97:54:
         9b:d5:2e:9d:2d:72:fe:aa:11:74:8d:ff:cc:59:18:77:18:f4:
         91:3d:59:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:41:49 2026 by rpki-client