Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
File:                     bV1Q6IudZeiv2ijCzqYVAScDhgg.mft (raw, json)
Hash identifier:          zXukalJac3qRRF66aqPS0oEnPLkO28N5HdwWUXa7C2w=
Subject key identifier:   E3:6B:7C:0D:DE:54:1A:32:D7:0B:6B:31:D6:7C:60:DE:08:37:75:A5
Authority key identifier: 6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08
Certificate issuer:       /CN=A91E91BC/serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
Certificate serial:       0425
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
Manifest number:          03D6
Signing time:             Wed 13 May 2026 00:49:34 +0000
Manifest this update:     Wed 13 May 2026 00:49:33 +0000
Manifest next update:     Wed 20 May 2026 00:49:33 +0000
Files and hashes:         1: bV1Q6IudZeiv2ijCzqYVAScDhgg.crl (hash: Nzty6SlgSMx/JXFChLtsArC6qHhj6l0zT4MNCHHYPoE=)
                          2: 328C9E7CDC1A11EC89244C2FC4F9AE02.roa (hash: SKfW4daROkL79U1lqA8R/sqQZ+TNV9o/ZUq25H/qMII=)
                          3: D1A4CFBA4FBE11EF97812B80C4F9AE02.roa (hash: Sg47+AxlxCK2XX0hEgjt14qUmvnvlCt8GjGyJgpeWz4=)
                          4: 142EA3A84FEF11EF9A822A21C4F9AE02.roa (hash: lK+6g1dFg3Vz3OBJu6Pg0Z8gk/MbJN6sYU86kkiDIvM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl
                          rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:49:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1061 (0x425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E91BC, serialNumber=6D5D50E88B9D65E8AFDA28C2CEA6150127038608
        Validity
            Not Before: May 13 00:49:33 2026 GMT
            Not After : May 20 00:49:33 2026 GMT
        Subject: CN=6a03ca9e-d629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8e:0a:32:41:f2:b8:fa:08:59:05:2d:90:59:
                    e6:7a:4a:8e:7c:17:54:5a:cf:23:0a:6f:43:b5:e4:
                    5e:ef:9b:8a:aa:fa:af:bf:3b:7c:0b:b0:32:1e:45:
                    9e:a7:5a:58:24:d2:c1:11:e6:e6:1f:9a:1c:72:97:
                    17:3b:a0:40:8f:1b:78:89:b6:24:30:92:aa:8c:ff:
                    77:9b:0f:98:10:ea:99:c8:52:3e:ed:6f:9c:6b:4a:
                    bf:07:3c:a3:da:c1:aa:cd:f2:58:ad:32:40:9c:5b:
                    72:c0:77:18:3d:eb:70:70:49:b8:9a:48:40:9e:cc:
                    04:74:b4:7e:e6:04:34:fc:c8:8a:de:49:79:40:84:
                    18:a7:3c:c3:3a:02:91:f3:a9:84:dc:84:cd:7c:1d:
                    1f:5d:ab:b9:a0:b6:e2:ad:24:64:9a:19:ed:83:d4:
                    ca:b3:42:7d:60:11:9a:d9:6d:75:3f:2d:22:be:9f:
                    bc:19:6e:2a:31:86:cc:2c:78:d1:a6:0d:11:f9:3a:
                    ca:83:f7:27:f7:3a:30:41:be:ce:c2:e6:c0:48:83:
                    4a:f3:81:e3:18:ba:6c:28:df:8c:90:07:90:72:4b:
                    11:f5:1b:e4:93:23:10:9b:36:52:95:e6:c3:1e:66:
                    7a:d4:9e:e4:a8:59:f6:e6:14:ab:5e:50:a4:2f:e7:
                    f8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:6B:7C:0D:DE:54:1A:32:D7:0B:6B:31:D6:7C:60:DE:08:37:75:A5
            X509v3 Authority Key Identifier:
                keyid:6D:5D:50:E8:8B:9D:65:E8:AF:DA:28:C2:CE:A6:15:01:27:03:86:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/bV1Q6IudZeiv2ijCzqYVAScDhgg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E91BC/AE44D24ADBE911EC95110515C4F9AE02/bV1Q6IudZeiv2ijCzqYVAScDhgg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:cf:1d:0f:48:05:30:1e:27:9b:d5:d0:83:72:a7:32:25:58:
         07:b4:79:b2:e3:1f:5b:ee:50:3f:4f:7b:39:79:bf:7c:83:35:
         b8:50:50:51:9c:d1:1b:fa:4d:28:a7:b6:35:dc:78:f5:89:fd:
         82:22:54:cc:bf:f1:34:38:68:f1:5a:44:55:2f:9d:27:7b:a7:
         bf:73:78:35:ff:e1:4c:fb:65:66:ed:8d:08:e0:a3:05:d4:ef:
         0f:cd:5d:99:db:e6:25:06:8a:5f:cb:16:c4:24:de:13:d4:0b:
         65:ab:bf:0c:ec:09:2f:2f:33:2e:f9:c7:92:d5:b8:67:f6:ca:
         6e:e6:72:86:00:ee:ae:34:ac:cc:35:0e:e4:c7:5d:f7:02:23:
         fc:47:09:87:88:e5:a6:8e:e4:79:b1:22:75:86:db:ff:a3:bf:
         2e:d3:88:a6:da:4a:11:ac:51:6f:9f:5d:91:8c:f0:97:78:15:
         30:ff:a1:1b:f6:0d:4d:d2:cc:61:78:90:5b:7d:40:44:ec:90:
         76:90:6b:fb:66:90:fb:54:fc:91:70:98:d3:6c:ca:46:4a:0b:
         c0:26:86:b1:4f:94:65:1f:ea:95:4e:85:86:61:06:b6:b4:67:
         c4:12:cf:4e:ae:65:69:06:dd:6b:67:ec:f9:77:7b:f9:51:18:
         3c:18:cd:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:26 2026 by rpki-client