Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
File:                     sb1NsCH1THJj88NTX4g2hJui5g4.mft (raw, json)
Hash identifier:          SH/QBzQTit7suVhY1UYbqZ3fUgXkWWbkXzC5dNZuVbo=
Subject key identifier:   A7:46:5F:15:42:8A:C8:AE:FE:7A:81:3A:7A:A7:FC:EE:E5:9C:F4:06
Authority key identifier: B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E
Certificate issuer:       /CN=A91E520F/serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
Certificate serial:       011E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
Manifest number:          0116
Signing time:             Wed 13 May 2026 06:00:35 +0000
Manifest this update:     Wed 13 May 2026 06:00:35 +0000
Manifest next update:     Wed 20 May 2026 06:00:35 +0000
Files and hashes:         1: sb1NsCH1THJj88NTX4g2hJui5g4.crl (hash: BRU+4n4rAFDCRs+Ek1WzRRdynw/gWQUAEg1qvzXWSOM=)
                          2: A30B17FAA81911EF862F3A56C4F9AE02.roa (hash: PGZEC43Jrl4xxGDivGAOBx4e7We0intHItmZzFxukHM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl
                          rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 06:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 286 (0x11e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E520F, serialNumber=B1BD4DB021F54C7263F3C3535F8836849BA2E60E
        Validity
            Not Before: May 13 06:00:35 2026 GMT
            Not After : May 20 06:00:35 2026 GMT
        Subject: CN=6a041383-eac9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:49:09:37:25:9b:f1:88:86:75:9e:d3:24:d8:
                    51:d1:5d:74:dd:ea:ba:87:16:40:97:2f:73:0c:04:
                    f3:5f:ca:d6:06:7d:10:c4:09:bf:40:e9:00:74:59:
                    51:b9:f0:22:4b:14:11:05:98:30:0a:53:6b:af:eb:
                    09:28:7f:4b:47:93:23:54:c1:1e:33:cf:fd:55:1d:
                    1e:e1:49:a5:a0:67:85:1c:5b:bc:06:bb:37:6a:94:
                    21:d6:93:38:1d:3d:d5:f4:dd:52:d8:47:8b:78:2e:
                    08:e6:5d:7c:6e:25:3b:30:b8:68:5b:4d:6a:20:1d:
                    d6:31:ee:1f:ac:47:24:9f:95:9b:36:06:77:f5:34:
                    b4:69:04:52:a2:9b:52:84:ca:35:92:4e:9c:0e:40:
                    3f:02:42:0e:08:c6:6e:79:4c:15:66:41:6c:12:7f:
                    7c:20:41:81:f4:64:eb:e9:23:37:89:a8:11:18:cb:
                    79:d1:9e:75:d9:d7:96:be:22:28:d9:c6:5a:ab:7e:
                    7b:44:b9:48:49:4c:f8:a2:59:3f:f3:2c:80:be:f9:
                    7f:49:84:df:ee:34:fa:11:31:9a:63:27:d8:5a:1e:
                    b4:a8:86:ab:18:ee:df:21:7b:33:97:f5:76:eb:15:
                    43:d0:a1:fb:06:8c:30:c8:d9:db:94:36:c0:4e:55:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:46:5F:15:42:8A:C8:AE:FE:7A:81:3A:7A:A7:FC:EE:E5:9C:F4:06
            X509v3 Authority Key Identifier:
                keyid:B1:BD:4D:B0:21:F5:4C:72:63:F3:C3:53:5F:88:36:84:9B:A2:E6:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sb1NsCH1THJj88NTX4g2hJui5g4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E520F/41CCBC6EA81911EFB9BDED71C4F9AE02/sb1NsCH1THJj88NTX4g2hJui5g4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b2:84:a9:4d:60:a9:1c:82:3d:50:76:89:db:b9:25:fb:4d:1a:
         ba:94:6b:2f:e8:70:b1:8f:7a:f6:3c:43:8b:cb:be:23:05:f2:
         52:74:f1:b8:b8:66:c6:e7:f1:9e:0e:4e:54:c6:f0:b8:01:b4:
         d7:29:80:d5:0b:00:24:89:37:c3:d0:3b:c6:30:59:c4:53:74:
         86:a9:40:a4:e9:64:20:9a:80:7a:d7:26:50:4d:f2:fb:5a:ef:
         9f:31:9b:96:b6:88:ce:0f:d9:60:37:da:dd:f5:45:3a:bb:10:
         61:c4:79:46:15:a5:d7:5d:c2:1b:d0:fe:80:61:db:45:4e:68:
         d6:47:fc:78:ea:5c:e3:69:86:51:e1:17:16:21:98:ba:b3:5a:
         2c:35:0d:bb:15:0e:d2:c4:44:37:2b:4d:6a:23:3b:22:c7:df:
         78:7d:1f:58:67:62:f1:ec:1f:30:95:fd:a9:80:37:51:81:bb:
         6c:78:e1:25:11:3a:5a:ca:30:a2:5e:5e:86:b8:82:e4:b4:09:
         44:b0:74:ac:8d:ab:8c:aa:33:e7:a8:4a:c1:d9:27:48:65:00:
         47:9c:ec:db:a4:2c:ae:d5:c0:3a:61:7c:17:4c:3c:b9:e3:4f:
         fe:83:d9:0c:fd:af:21:c1:41:32:42:06:a6:e2:cb:49:06:0c:
         ab:4b:d1:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:14:32 2026 by rpki-client