Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
File:                     NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft (raw, json)
Hash identifier:          pp1bj+4T6sKRymozVjPZmYjcGUA3EfdIuVeS/0fo4NE=
Subject key identifier:   68:78:8E:BB:EF:F2:DC:78:82:D9:1D:0C:D0:FC:73:8F:A6:64:78:23
Authority key identifier: 35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85
Certificate issuer:       /CN=A91E2EFF/serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385
Certificate serial:       AD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
Manifest number:          AB
Signing time:             Mon 11 May 2026 07:19:10 +0000
Manifest this update:     Mon 11 May 2026 07:19:09 +0000
Manifest next update:     Mon 18 May 2026 07:19:09 +0000
Files and hashes:         1: NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl (hash: uEzZ/mlHWG1q2L2cLNfBGatex4+JWSegLxMJsIUBJhM=)
                          2: 370DA046484A11F0B96B9D10C4F9AE02.roa (hash: 2C2sOivYWsfKN0PHSEL43JM0n0rxZssOB/cieKzKbtM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl
                          rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:19:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 173 (0xad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E2EFF, serialNumber=35433C9EC408099F7018BC51441D22C4C11FC385
        Validity
            Not Before: May 11 07:19:09 2026 GMT
            Not After : May 18 07:19:09 2026 GMT
        Subject: CN=6a0182ee-f336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:f0:b4:28:ef:dc:fb:62:03:3b:55:a4:45:49:
                    c8:68:85:aa:50:85:93:c6:41:1e:c5:fe:c0:96:6c:
                    34:40:a0:89:d4:ea:32:71:2a:0c:15:b0:ef:d5:4a:
                    02:8c:cb:94:de:25:80:bd:e0:03:89:e9:3c:d1:5a:
                    ac:b8:5a:7e:3c:32:ff:08:bd:76:89:e0:fc:d9:b6:
                    27:b2:0c:fc:32:1e:01:93:63:fe:2b:e9:93:40:2b:
                    53:a5:c4:23:1d:43:5b:fb:52:96:b7:7e:63:2a:05:
                    d3:6b:98:4d:41:8a:d5:5d:44:53:6f:55:7a:f9:01:
                    62:6a:ae:25:7d:20:2e:ec:81:81:cf:65:2c:41:ed:
                    af:7a:06:ed:45:cb:09:31:60:d9:31:54:ee:ac:d3:
                    04:64:bf:58:08:14:d5:8e:66:2a:ec:d2:ae:e4:01:
                    dd:eb:2f:4e:7b:71:77:b6:b6:2d:11:f3:07:41:1a:
                    ef:aa:cb:95:1d:4e:f6:de:dc:bf:ed:aa:51:22:17:
                    9c:cf:d5:8a:93:88:02:20:e4:26:ec:c3:34:16:dc:
                    7e:88:29:ff:13:1e:7e:51:f6:14:3e:53:3a:0f:8f:
                    52:99:ba:a7:42:6c:40:50:ad:24:d3:e3:0e:ac:8f:
                    83:f4:10:8a:c0:85:19:a7:7e:dd:97:2d:73:0b:a4:
                    7e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:78:8E:BB:EF:F2:DC:78:82:D9:1D:0C:D0:FC:73:8F:A6:64:78:23
            X509v3 Authority Key Identifier:
                keyid:35:43:3C:9E:C4:08:09:9F:70:18:BC:51:44:1D:22:C4:C1:1F:C3:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/NUM8nsQICZ9wGLxRRB0ixMEfw4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E2EFF/AB975BCE484911F0BF070370C4F9AE02/NUM8nsQICZ9wGLxRRB0ixMEfw4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:84:21:0f:65:b1:34:2c:86:39:fc:00:35:c3:85:94:4d:c3:
         a6:20:ee:04:b1:5f:7a:30:da:c1:6a:ee:20:9c:90:60:cc:c4:
         b1:77:12:b5:9d:65:88:83:fb:8d:d6:1a:94:06:54:4b:7c:89:
         d2:3f:d8:e4:d0:38:b8:ad:be:a6:b3:ed:e4:6d:61:3b:d0:09:
         22:15:d6:b4:a8:0b:9f:00:3d:0c:16:09:4b:77:47:09:e6:da:
         f9:2a:6f:81:96:9c:2d:dc:8b:08:21:46:ee:97:d6:57:69:18:
         35:b9:6e:36:ce:ef:70:73:0f:f3:06:2a:57:ad:22:c5:26:b1:
         b7:c9:3c:3c:9e:54:16:8d:7d:3c:01:46:1e:64:17:ea:b7:1d:
         17:89:59:e6:b0:78:87:b7:6c:12:3c:17:d7:3d:03:f0:0d:dd:
         49:88:bc:df:5a:e1:20:ad:d9:08:b5:8a:89:94:21:45:83:5f:
         f1:ca:9a:91:af:3c:b6:e0:b9:b9:0a:c7:84:d3:6c:2e:6d:af:
         31:97:cd:c8:e3:14:f8:3c:85:12:6f:90:85:a4:44:f9:5d:e0:
         18:52:47:e4:e9:01:6d:26:a8:85:74:0f:db:60:3f:e7:83:d7:
         e6:ce:13:71:8d:75:c9:cd:08:79:c4:20:d3:c8:52:40:42:2e:
         2c:f8:be:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:18:34 2026 by rpki-client