Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
File:                     bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft (raw, json)
Hash identifier:          A8iXQ9JvxexCHbomZIgl7jbx02/zEneM8HYVv22rYD0=
Subject key identifier:   CF:5D:02:36:C5:A9:54:E2:76:9F:79:AF:01:E7:C0:82:AD:50:97:D9
Authority key identifier: 6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5
Certificate issuer:       /CN=A91DDDA7/serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
Certificate serial:       0710
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
Manifest number:          0705
Signing time:             Tue 12 May 2026 19:57:39 +0000
Manifest this update:     Tue 12 May 2026 19:57:38 +0000
Manifest next update:     Tue 19 May 2026 19:57:38 +0000
Files and hashes:         1: bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl (hash: P3erJ4QiBEh3ZGaAObqbf5vXBYUKaRkK7DrZlX2/x+s=)
                          2: 815931708D5411EB9DA31875C4F9AE02.roa (hash: soeXAXHkILnd67DHL4JHu+zMCSMiMUbgDnhdT/ehP9E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl
                          rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1808 (0x710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91DDDA7, serialNumber=6E3F6A4CBD2C7651B490EB64904BBFF1F46201D5
        Validity
            Not Before: May 12 19:57:38 2026 GMT
            Not After : May 19 19:57:38 2026 GMT
        Subject: CN=6a038633-8f2d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:1f:ab:9f:18:d2:fa:ef:b9:4c:b2:b0:7f:2b:
                    7c:20:81:1f:23:85:7e:e8:44:08:2f:6f:4e:94:42:
                    72:59:0a:d7:c3:a7:15:a6:92:8a:21:dc:7c:c9:8c:
                    4a:d8:a0:e8:4a:a1:88:b2:66:aa:c8:d7:dd:b1:5b:
                    59:47:ce:34:4a:9c:86:64:22:2c:9f:98:9b:64:e5:
                    6c:2e:50:98:09:36:81:ce:90:5d:ca:91:05:e2:9b:
                    4e:ca:30:e0:cb:60:1e:f4:66:db:1c:3d:6e:43:01:
                    b0:23:a4:58:2b:7b:1e:34:ec:e2:27:6a:75:46:ec:
                    73:20:12:57:56:54:d7:af:82:bf:3e:04:83:36:a6:
                    01:15:e8:12:57:d3:eb:5f:c6:22:e0:4a:73:c3:ca:
                    2e:29:a7:78:f9:ca:02:a7:ca:83:0c:67:eb:35:15:
                    0a:e6:58:73:03:3f:c3:74:b0:07:7b:f3:4f:71:47:
                    78:a3:55:7d:61:70:24:8a:f1:5e:80:27:d6:76:80:
                    cf:e3:7e:38:20:6d:99:72:61:9e:c6:e9:64:b0:d7:
                    7a:44:7d:1e:d0:3b:07:27:43:21:07:4b:bb:51:52:
                    c4:96:6a:4c:6f:2f:58:5b:90:33:6b:36:94:bf:b8:
                    9e:1b:81:50:1c:f2:1e:fd:39:7e:75:4a:14:9c:8b:
                    72:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:5D:02:36:C5:A9:54:E2:76:9F:79:AF:01:E7:C0:82:AD:50:97:D9
            X509v3 Authority Key Identifier:
                keyid:6E:3F:6A:4C:BD:2C:76:51:B4:90:EB:64:90:4B:BF:F1:F4:62:01:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/bj9qTL0sdlG0kOtkkEu_8fRiAdU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91DDDA7/3C95319C8D5411EB9840E05FC4F9AE02/bj9qTL0sdlG0kOtkkEu_8fRiAdU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a6:a3:e3:03:dc:dc:d6:58:5e:eb:dd:4c:7e:1d:03:14:18:36:
         e0:b8:c4:7d:05:58:e6:11:34:86:e9:de:50:85:70:93:c8:c4:
         39:14:e2:ab:49:6c:48:27:8e:ee:80:3f:f9:7a:5e:7b:bc:31:
         9e:2c:fa:e7:3a:a3:ae:e7:c4:9d:bc:f3:b8:62:5b:0d:01:fe:
         de:80:f0:e7:0f:31:51:f5:35:4b:7c:c9:28:e2:d7:0f:8b:3c:
         a1:4c:d4:29:9e:7a:ed:12:55:b7:f8:de:16:55:3b:ee:7e:d7:
         3a:c3:74:ab:0e:4e:ad:dd:7a:9b:9a:ef:7e:99:a8:65:6d:f8:
         2b:c3:a3:e2:6f:2f:1f:39:fa:03:1d:15:92:ec:1d:a8:9f:4f:
         e9:85:23:0c:62:79:70:7c:df:db:54:de:b4:81:a5:24:14:42:
         4b:55:cb:82:e2:70:c1:42:00:48:45:7d:2e:ea:03:06:79:93:
         68:24:26:71:55:c2:d3:20:b3:54:81:a0:92:54:09:00:0d:d1:
         10:79:cb:97:f9:f9:2f:44:31:a6:db:04:41:ee:c0:e7:9b:45:
         99:97:3d:cb:8d:a7:d6:27:00:29:51:8f:f4:3a:dd:cf:7a:ac:
         5d:6d:49:dc:6d:42:2c:e9:a2:6a:b9:8e:67:2b:4e:8d:05:94:
         92:04:1d:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:19:08 2026 by rpki-client