Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
File:                     dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft (raw, json)
Hash identifier:          IzaahZHi7HFIThc0IeB3AT8b+GV9eZ2veqaHgCSlBpc=
Subject key identifier:   8F:E8:CB:7A:DC:A3:3C:D2:60:72:B6:5D:36:4B:DE:CF:5C:71:0E:A5
Authority key identifier: 74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F
Certificate issuer:       /CN=A91E01AF/serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
Certificate serial:       068C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
Manifest number:          0683
Signing time:             Tue 12 May 2026 22:37:00 +0000
Manifest this update:     Tue 12 May 2026 22:37:00 +0000
Manifest next update:     Tue 19 May 2026 22:37:00 +0000
Files and hashes:         1: dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl (hash: 3RMWtDH8hzSPm5fjZ+F4YO2yOaYdNA3hpf7C31gM0nI=)
                          2: 129AA26CBD2111EBA76A3E11C4F9AE02.roa (hash: cbfqMcMwqjcXfTnCUXdYhPSWB3uKfxrHrfD55mLoBo0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl
                          rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:57:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1676 (0x68c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E01AF, serialNumber=74480F37C4B65762A8FD81BC7EDBEBDE6C81645F
        Validity
            Not Before: May 12 22:37:00 2026 GMT
            Not After : May 19 22:37:00 2026 GMT
        Subject: CN=6a03ab8c-0ff4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0e:86:46:07:65:a6:1c:64:0b:4c:f0:cb:b0:
                    88:5a:a1:37:ce:ce:06:61:8b:5b:ff:b5:65:38:99:
                    68:59:19:ea:a4:13:61:bb:c5:75:6f:62:d1:24:5a:
                    8e:ae:73:a8:ac:7a:56:1e:9a:60:27:34:51:41:90:
                    87:c0:66:20:96:8a:ec:2f:b7:d5:5b:bd:a2:f2:7f:
                    8a:2d:6d:8d:cd:64:4e:14:25:18:6e:ad:98:7c:0e:
                    52:06:52:c2:27:c3:ca:b7:87:86:9e:72:d1:f2:13:
                    a5:3b:78:20:0c:96:c2:19:1f:b2:b4:a3:24:8d:68:
                    e2:16:bc:01:71:15:b9:d7:c3:97:f1:3e:87:78:66:
                    57:c0:45:db:12:67:58:c8:ab:74:d1:fe:60:0c:8d:
                    55:b9:6a:a9:89:2d:e2:3f:49:6a:43:a3:25:49:bb:
                    06:b5:df:9c:81:75:71:45:b9:6c:eb:dc:8f:cb:14:
                    06:04:30:5c:bf:94:51:2c:d2:23:82:7a:75:51:4a:
                    93:66:a6:61:17:3c:5b:5e:fc:42:f6:f4:3d:a5:ee:
                    2a:38:04:d7:ff:19:4a:d5:e4:eb:ed:c5:74:0d:41:
                    96:30:14:cf:58:88:dd:d1:f2:76:a5:bb:66:17:f4:
                    98:8c:21:44:21:3f:76:d9:d3:ed:04:17:96:79:f7:
                    0f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:E8:CB:7A:DC:A3:3C:D2:60:72:B6:5D:36:4B:DE:CF:5C:71:0E:A5
            X509v3 Authority Key Identifier:
                keyid:74:48:0F:37:C4:B6:57:62:A8:FD:81:BC:7E:DB:EB:DE:6C:81:64:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dEgPN8S2V2Ko_YG8ftvr3myBZF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E01AF/8CB85456BD1F11EBBAFD3D10C4F9AE02/dEgPN8S2V2Ko_YG8ftvr3myBZF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         28:d0:33:e9:3b:00:76:f9:66:bc:17:17:17:0f:bf:5d:41:e8:
         2d:ad:f3:33:75:6c:6a:9f:78:7f:42:d0:a7:02:77:7f:a7:af:
         b8:0b:a8:1e:15:41:2e:a6:39:25:88:89:82:a4:01:6f:1a:7a:
         e9:a0:d9:0a:17:50:a1:9c:d3:c4:7f:2d:aa:60:df:00:6b:27:
         ec:e5:f1:f0:12:6e:4d:39:42:63:35:20:c4:51:a0:63:00:90:
         df:9a:2a:89:6e:0b:1d:f8:06:86:cc:19:8a:b7:84:81:15:6c:
         80:01:6d:58:62:81:f8:f8:3e:3b:4c:4c:e2:7f:25:07:27:0d:
         e6:d1:cf:82:84:51:aa:2b:ca:ac:8a:cc:14:28:a8:0a:f4:0e:
         28:07:be:4f:0b:14:8b:76:f9:01:0a:84:4c:c6:6b:24:e7:ea:
         61:71:e1:27:66:b5:eb:3c:86:a9:92:ae:e1:a6:a9:5c:f7:bc:
         4e:5a:74:ee:d6:7e:97:bd:7b:d1:ea:00:3d:60:24:96:24:f8:
         30:00:f3:a9:50:73:e6:94:91:ec:8c:0f:9f:b6:14:84:d7:bd:
         07:22:6c:5f:01:f1:b1:ad:8a:c2:ad:1a:ff:8d:9f:50:2f:c0:
         92:00:a5:b6:c8:fc:70:8b:e8:ce:db:bb:37:71:ab:45:39:f4:
         3a:97:fd:57
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBowwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RTAxQUYxMTAvBgNVBAUTKDc0NDgwRjM3QzRCNjU3NjJBOEZEODFCQzdFREJFQkRF
NkM4MTY0NUYwHhcNMjYwNTEyMjIzNzAwWhcNMjYwNTE5MjIzNzAwWjAYMRYwFAYD
VQQDEw02YTAzYWI4Yy0wZmY0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAkQ6GRgdlphxkC0zwy7CIWqE3zs4GYYtb/7VlOJloWRnqpBNhu8V1b2LRJFqO
rnOorHpWHppgJzRRQZCHwGYglorsL7fVW72i8n+KLW2NzWROFCUYbq2YfA5SBlLC
J8PKt4eGnnLR8hOlO3ggDJbCGR+ytKMkjWjiFrwBcRW518OX8T6HeGZXwEXbEmdY
yKt00f5gDI1VuWqpiS3iP0lqQ6MlSbsGtd+cgXVxRbls69yPyxQGBDBcv5RRLNIj
gnp1UUqTZqZhFzxbXvxC9vQ9pe4qOATX/xlK1eTr7cV0DUGWMBTPWIjd0fJ2pbtm
F/SYjCFEIT922dPtBBeWefcPDwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFI/oy3rc
ozzSYHK2XTZL3s9ccQ6lMB8GA1UdIwQYMBaAFHRIDzfEtldiqP2BvH7b695sgWRf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFMDFBRi84Q0I4NTQ1NkJE
MUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYyS29fWUc4ZnR2cjNteUJa
RjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL2RFZ1BOOFMyVjJLb19ZRzhmdHZyM215QlpGOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
MDFBRi84Q0I4NTQ1NkJEMUYxMUVCQkFGRDNEMTBDNEY5QUUwMi9kRWdQTjhTMlYy
S29fWUc4ZnR2cjNteUJaRjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAKNAz6TsAdvlmvBcXFw+/XUHoLa3zM3Vsap94f0LQpwJ3f6evuAuoHhVBLqY5
JYiJgqQBbxp66aDZChdQoZzTxH8tqmDfAGsn7OXx8BJuTTlCYzUgxFGgYwCQ35oq
iW4LHfgGhswZireEgRVsgAFtWGKB+Pg+O0xM4n8lBycN5tHPgoRRqivKrIrMFCio
CvQOKAe+TwsUi3b5AQqETMZrJOfqYXHhJ2a16zyGqZKu4aapXPe8Tlp07tZ+l717
0eoAPWAkliT4MADzqVBz5pSR7IwPn7YUhNe9ByJsXwHxsa2Kwq0a/42fUC/AkgCl
tsj8cIvoztu7N3GrRTn0Opf9Vw==
-----END CERTIFICATE-----
Generated at Wed May 13 01:46:08 2026 by rpki-client