Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
File:                     Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft (raw, json)
Hash identifier:          7hKmL9cC13uYAY6nU4vGgFPalSnKCeSoowCo70uvRR0=
Subject key identifier:   11:8A:8E:F9:BD:68:C1:49:F8:61:D0:8F:43:F6:D9:8F:08:37:36:D5
Authority key identifier: 51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB
Certificate issuer:       /CN=A91E9509/serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
Certificate serial:       02A0
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
Manifest number:          0296
Signing time:             Wed 13 May 2026 01:44:43 +0000
Manifest this update:     Wed 13 May 2026 01:44:42 +0000
Manifest next update:     Wed 20 May 2026 01:44:42 +0000
Files and hashes:         1: Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl (hash: AdlLRHL33OYUaVZZ+xBX9jtng7zviBswOBvq5CHkCek=)
                          2: F23AE0AE632D11ED8C102087C4F9AE02.roa (hash: r515GfkktRVsEjZ5VOujp3dI2GmJIY+xZnhY3UWMtM8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl
                          rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:44:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 672 (0x2a0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E9509, serialNumber=51BEA3609429D91B1C4E4022DA68BD643C33C3FB
        Validity
            Not Before: May 13 01:44:42 2026 GMT
            Not After : May 20 01:44:42 2026 GMT
        Subject: CN=6a03d78b-eb3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:46:e9:96:a4:7e:49:79:83:a2:38:9a:a7:2b:
                    89:9e:c1:3a:6f:33:66:cf:34:b9:82:29:7f:21:6a:
                    37:90:8f:b9:e3:0b:8e:0a:ad:56:85:e9:87:e8:93:
                    d5:c3:67:5c:29:2e:ce:5b:e0:f1:1b:3a:25:fe:40:
                    ec:63:87:f1:ec:e0:41:8b:54:26:91:6a:e6:83:95:
                    03:35:02:0a:19:d4:b9:d8:ad:2e:c7:30:76:08:a5:
                    57:46:82:5a:d2:81:f5:e4:ab:ce:64:6a:73:bc:dc:
                    23:a4:28:a6:93:83:75:89:f8:7f:9f:53:d6:e2:98:
                    69:11:44:1e:29:8c:90:43:be:bf:fa:b2:42:69:66:
                    b5:3f:48:2b:e3:5c:d5:8a:b2:59:0e:f2:30:3a:5c:
                    18:dd:3c:0a:6f:17:1e:43:a9:35:44:39:15:17:c5:
                    9b:2a:d2:d5:3b:e7:8d:96:b9:59:35:3e:45:dd:9a:
                    af:5b:13:2f:7a:19:b7:2f:c3:53:6a:ed:b5:66:6b:
                    df:1a:2d:9b:db:cf:f2:57:46:e6:5f:a6:ff:7f:37:
                    b6:6c:99:33:11:19:d1:6d:77:26:4c:2c:1e:b2:2a:
                    e2:1a:5e:9e:2a:d6:0c:35:cc:84:b6:61:a1:45:6d:
                    42:c4:05:5f:b7:3d:6d:89:56:79:ba:95:54:d1:bb:
                    2a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:8A:8E:F9:BD:68:C1:49:F8:61:D0:8F:43:F6:D9:8F:08:37:36:D5
            X509v3 Authority Key Identifier:
                keyid:51:BE:A3:60:94:29:D9:1B:1C:4E:40:22:DA:68:BD:64:3C:33:C3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E9509/274ED15E601A11EDB7416B6CC4F9AE02/Ub6jYJQp2RscTkAi2mi9ZDwzw_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b4:2b:7c:52:7e:6e:5d:47:d2:eb:b0:c7:cd:3a:24:a7:28:bf:
         76:0a:4a:9f:24:ea:07:53:d3:a7:df:b4:c5:86:fa:78:f9:fe:
         24:18:e6:8f:ce:4f:bd:38:9e:c8:e1:4b:95:62:4f:b9:92:ec:
         19:f6:2f:8e:10:a2:c2:1c:1c:9c:e6:66:52:09:39:bc:e2:7d:
         67:b3:02:f7:68:74:1e:dc:4f:bd:04:c3:f0:3f:14:09:49:1c:
         57:ab:92:93:ec:73:bc:0c:7b:58:1a:08:49:01:50:bb:5e:98:
         e6:6a:79:38:00:ff:84:d5:ac:f0:dd:d1:5c:aa:94:27:39:f6:
         b0:f1:fd:a1:df:da:64:ec:29:4b:5c:16:0b:d8:a0:16:f6:72:
         01:d1:f6:0e:43:f0:e5:b5:c7:10:a0:fa:a4:0d:e2:b2:0f:01:
         7e:17:b4:8f:b7:8b:ad:7c:51:80:20:b0:98:22:54:6d:ec:06:
         72:a4:8c:00:46:56:8e:46:ec:3c:c2:68:66:ee:b6:04:6e:14:
         f4:ba:cf:65:c2:93:ca:c1:51:50:a0:04:82:06:52:74:e5:2a:
         94:82:16:2d:fc:c8:79:d0:b2:ed:98:90:83:e4:fb:63:6d:83:
         cc:73:49:db:10:e5:7d:3e:d8:04:de:27:b1:91:75:48:23:1b:
         99:a4:6a:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:58:27 2026 by rpki-client