Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
File:                     aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft (raw, json)
Hash identifier:          fVLTYIQr2ITdqN6TODcpGNEPAzI9NscNQ4PR05WApvc=
Subject key identifier:   72:F6:DC:6B:0B:11:AF:45:F4:22:E8:FE:11:28:C9:90:DE:AD:AA:EC
Authority key identifier: 68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7
Certificate issuer:       /CN=A91EA9BD/serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
Certificate serial:       316A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
Manifest number:          3163
Signing time:             Tue 12 May 2026 15:26:24 +0000
Manifest this update:     Tue 12 May 2026 15:26:23 +0000
Manifest next update:     Tue 19 May 2026 15:26:23 +0000
Files and hashes:         1: aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl (hash: LExj5LerlGFuliSQUMZKbNT1yN5SlvOmoxS/YbS6Oag=)
                          2: 93C0837AA52911EC9D2DAE83C4F9AE02.roa (hash: 0vDdF5Q2CBbIYCt1K0qEfBzpG6K1ble6M+V06+WiDaY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl
                          rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 15:26:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12650 (0x316a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EA9BD, serialNumber=686A0057164D1438EC59586DA8BAA5465FD829C7
        Validity
            Not Before: May 12 15:26:23 2026 GMT
            Not After : May 19 15:26:23 2026 GMT
        Subject: CN=6a03469f-e954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:9d:f4:f2:72:7f:44:8b:78:21:2f:6a:58:
                    89:96:20:16:73:95:86:fc:3b:02:3c:f3:ff:a4:72:
                    70:15:e0:37:a4:73:70:82:0c:f9:11:14:f4:56:fe:
                    c2:43:74:44:98:3c:b7:30:fa:4c:93:c5:ee:01:b0:
                    63:74:80:2a:77:fa:ec:fb:35:86:27:2d:6b:2d:b5:
                    ed:0f:35:9d:54:28:df:a0:c6:4b:a0:70:ee:c5:ab:
                    e4:8c:fe:f4:05:08:f4:d7:9d:c1:42:ae:e7:dc:3c:
                    fa:1e:0f:7a:d2:06:ba:89:b1:6d:c3:4d:34:55:0b:
                    85:74:ac:35:d2:43:db:d0:58:c7:b0:7d:03:70:dd:
                    14:64:39:07:74:81:59:55:8b:60:55:16:c0:20:7f:
                    a8:0a:55:44:c4:aa:1e:79:ca:54:c0:99:72:a1:49:
                    9d:e8:18:2c:8b:90:0c:e2:b9:07:38:06:80:5e:26:
                    92:15:3e:aa:f6:b9:7a:2a:a6:a5:18:08:8d:8c:3f:
                    c5:6e:6d:2c:16:09:cb:ca:ad:fb:20:75:fc:c7:be:
                    c1:f8:a8:11:e5:d8:f7:6b:04:60:9e:58:ef:95:3e:
                    ce:3c:a0:01:19:43:f7:4d:04:1a:f1:1d:43:5d:39:
                    19:1e:47:1f:e4:01:38:40:ca:b6:ef:df:af:63:51:
                    bc:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F6:DC:6B:0B:11:AF:45:F4:22:E8:FE:11:28:C9:90:DE:AD:AA:EC
            X509v3 Authority Key Identifier:
                keyid:68:6A:00:57:16:4D:14:38:EC:59:58:6D:A8:BA:A5:46:5F:D8:29:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aGoAVxZNFDjsWVhtqLqlRl_YKcc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EA9BD/03B80F38DF5C11E2972A94275911EA32/aGoAVxZNFDjsWVhtqLqlRl_YKcc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:f4:d4:b8:31:5d:b0:cc:67:aa:7c:7e:0f:f5:f0:20:4e:42:
         80:d8:c5:da:35:b8:39:58:72:54:6c:5a:3b:23:d7:8e:f8:89:
         e6:fe:86:57:16:99:82:06:81:e4:6c:b8:57:da:75:14:10:34:
         1e:7e:b8:4e:2f:c8:44:22:32:bc:a5:5a:55:b2:d7:01:34:5d:
         b4:82:ec:68:97:c9:30:70:d4:b6:09:6d:6e:1f:be:40:cc:42:
         64:9a:0a:90:c6:ad:ee:76:ce:04:ae:3e:88:37:f4:98:c8:ed:
         5a:19:e2:57:33:27:42:8e:65:37:c5:76:07:df:33:58:0f:90:
         4a:96:2f:9a:a5:1f:07:e2:b1:a1:ab:f1:a2:ee:08:10:06:84:
         8a:ec:2e:5b:17:98:4b:25:3b:80:51:62:0e:47:c9:77:db:90:
         ee:ef:1b:bb:06:0e:3b:c5:e6:1e:96:0d:6a:b0:e0:d1:83:15:
         b5:ed:45:50:98:2f:29:c5:53:84:87:17:b4:f0:72:07:7c:81:
         3e:50:5d:11:3a:13:fd:68:c4:b0:04:e3:69:9d:56:1f:38:7b:
         0b:1d:11:b9:e9:72:dc:2e:5a:76:9d:4a:ec:f5:c1:aa:96:4b:
         1b:db:a0:86:b3:f9:79:85:c4:0f:16:41:a1:f2:73:1d:9b:b3:
         cd:94:ec:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:06:00 2026 by rpki-client