Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
File:                     rXHewTibFKASABB2mR9Zq-LKseY.mft (raw, json)
Hash identifier:          l395dZu9J0qmZXdtaxseNLBI7IT5sWnK7e9/eLrVR3c=
Subject key identifier:   90:F3:BD:EC:6C:94:7A:98:F2:81:C8:78:48:22:80:81:2E:D7:3E:8F
Authority key identifier: AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6
Certificate issuer:       /CN=A91EAF4B/serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
Certificate serial:       01D8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
Manifest number:          0D56
Signing time:             Tue 12 May 2026 19:07:05 +0000
Manifest this update:     Tue 12 May 2026 19:07:04 +0000
Manifest next update:     Tue 19 May 2026 19:07:04 +0000
Files and hashes:         1: rXHewTibFKASABB2mR9Zq-LKseY.crl (hash: a3abMg2YFSC4g1/JelnzQl2NfTchatblQMhsPLAYGTk=)
                          2: 6360524E03D311F0A6C64177C4F9AE02.roa (hash: HcqMW++sZJHjGMxO2JSw3bS/+sZh101Hrd0Zjhq70t8=)
                          3: 58EC5A1A8F3E11EF9B5DE37CC4F9AE02.roa (hash: wkggX/6qysF9Egk0xQyYTUInBulm7AKxdFFCyBP8GUk=)
                          4: FF5213E8A81D11EFA74FFD31C4F9AE02.roa (hash: ls1HDtDX8ZrpUxCkm4TRRKjqrY+zASGFi8PHUEE3XHs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl
                          rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 19:07:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EAF4B, serialNumber=AD71DEC1389B14A012001076991F59ABE2CAB1E6
        Validity
            Not Before: May 12 19:07:04 2026 GMT
            Not After : May 19 19:07:04 2026 GMT
        Subject: CN=6a037a58-b2bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:4b:4a:a3:a3:34:3c:f3:b7:dd:ce:90:8c:23:
                    d6:e7:f0:3e:0a:97:eb:dd:ba:b8:dc:c8:8e:ce:df:
                    c8:50:d9:6c:93:af:62:a8:32:2e:39:70:62:2f:02:
                    fe:aa:43:41:2d:7c:44:2e:30:48:e1:83:21:cd:41:
                    5a:df:55:6b:6c:e4:cb:01:03:55:ab:eb:49:b7:cb:
                    81:db:14:cf:c1:8b:4a:b3:18:dd:4f:73:81:6c:3f:
                    ae:93:fa:7d:c0:05:d2:59:5b:69:24:7a:ac:17:ac:
                    eb:e7:7e:f6:0a:69:fd:ea:e6:cb:81:04:cf:c6:4d:
                    37:42:52:69:f5:89:95:e4:80:9f:10:82:cb:f4:af:
                    c5:d3:ec:10:66:50:7a:fc:89:d4:cf:bd:a5:c9:88:
                    e4:dc:6f:23:cc:2b:d3:0f:9a:0e:37:97:b2:d2:1c:
                    34:31:72:45:66:ed:89:53:9a:26:27:3a:ee:a6:87:
                    97:4b:26:c4:12:a3:08:01:c6:c4:ae:a6:bd:97:df:
                    40:85:83:f4:6f:29:0d:1b:b5:82:5c:64:a6:b0:b3:
                    39:55:43:9b:2b:f5:15:34:35:60:2b:25:fc:c3:3c:
                    38:d1:4b:3e:41:a8:68:52:f6:b1:d4:22:90:d0:4e:
                    95:b1:2b:d2:87:cc:7d:33:c7:08:d4:21:b5:2e:e2:
                    8f:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:F3:BD:EC:6C:94:7A:98:F2:81:C8:78:48:22:80:81:2E:D7:3E:8F
            X509v3 Authority Key Identifier:
                keyid:AD:71:DE:C1:38:9B:14:A0:12:00:10:76:99:1F:59:AB:E2:CA:B1:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/rXHewTibFKASABB2mR9Zq-LKseY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EAF4B/84858F6A471911EA90863072C4F9AE02/rXHewTibFKASABB2mR9Zq-LKseY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8e:62:b8:1e:ab:ca:4d:ac:00:be:ef:7c:5f:d8:61:98:6a:85:
         72:b9:d9:5c:5d:58:85:df:f5:e4:7b:aa:dc:d2:3a:27:21:15:
         18:c1:27:b5:9f:d6:0b:e2:3e:7a:bf:94:83:c2:63:09:f1:e6:
         3a:c5:f9:d8:12:ac:fb:1c:64:b7:4c:d2:7a:86:72:f4:43:6f:
         24:ac:22:01:f4:2b:26:8d:29:e7:71:83:79:26:27:ac:53:f7:
         0a:68:ea:ab:56:96:44:74:f6:c4:5f:fe:37:15:df:ab:f4:bc:
         27:27:2d:df:c9:25:58:be:55:8e:e8:bc:00:61:b9:28:2c:ac:
         3b:24:ed:53:ea:71:b0:64:a8:0b:fa:30:ee:d6:8f:91:66:5a:
         bc:b2:f9:f8:b0:0e:0e:76:0c:78:e2:d2:fa:15:47:51:bf:6e:
         d4:5b:cb:df:30:59:9e:5a:69:4b:46:c8:8d:76:53:9e:d3:eb:
         14:c6:86:8c:1e:98:d5:11:3b:1e:ba:e6:15:e7:8e:5e:50:15:
         6c:02:cb:07:a7:d8:72:bc:61:81:46:20:9e:ca:67:dc:52:c4:
         d2:b0:24:c5:06:44:ae:15:39:62:8a:cb:73:2c:d2:05:f4:cc:
         42:92:46:3c:32:b1:5c:34:75:1b:92:59:c7:5f:10:7a:52:ef:
         11:d8:38:72
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAdgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUFGNEIxMTAvBgNVBAUTKEFENzFERUMxMzg5QjE0QTAxMjAwMTA3Njk5MUY1OUFC
RTJDQUIxRTYwHhcNMjYwNTEyMTkwNzA0WhcNMjYwNTE5MTkwNzA0WjAYMRYwFAYD
VQQDEw02YTAzN2E1OC1iMmJjMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAuktKo6M0PPO33c6QjCPW5/A+Cpfr3bq43MiOzt/IUNlsk69iqDIuOXBiLwL+
qkNBLXxELjBI4YMhzUFa31VrbOTLAQNVq+tJt8uB2xTPwYtKsxjdT3OBbD+uk/p9
wAXSWVtpJHqsF6zr5372Cmn96ubLgQTPxk03QlJp9YmV5ICfEILL9K/F0+wQZlB6
/InUz72lyYjk3G8jzCvTD5oON5ey0hw0MXJFZu2JU5omJzrupoeXSybEEqMIAcbE
rqa9l99AhYP0bykNG7WCXGSmsLM5VUObK/UVNDVgKyX8wzw40Us+QahoUvax1CKQ
0E6VsSvSh8x9M8cI1CG1LuKPiwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJDzvexs
lHqY8oHIeEgigIEu1z6PMB8GA1UdIwQYMBaAFK1x3sE4mxSgEgAQdpkfWaviyrHm
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQUY0Qi84NDg1OEY2QTQ3
MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZLQVNBQkIybVI5WnEtTEtz
ZVkuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3JYSGV3VGliRktBU0FCQjJtUjlacS1MS3NlWS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QUY0Qi84NDg1OEY2QTQ3MTkxMUVBOTA4NjMwNzJDNEY5QUUwMi9yWEhld1RpYkZL
QVNBQkIybVI5WnEtTEtzZVkubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAjmK4HqvKTawAvu98X9hhmGqFcrnZXF1Yhd/15Huq3NI6JyEVGMEntZ/WC+I+
er+Ug8JjCfHmOsX52BKs+xxkt0zSeoZy9ENvJKwiAfQrJo0p53GDeSYnrFP3Cmjq
q1aWRHT2xF/+NxXfq/S8Jyct38klWL5Vjui8AGG5KCysOyTtU+pxsGSoC/ow7taP
kWZavLL5+LAODnYMeOLS+hVHUb9u1FvL3zBZnlppS0bIjXZTntPrFMaGjB6Y1RE7
HrrmFeeOXlAVbALLB6fYcrxhgUYgnspn3FLE0rAkxQZErhU5YorLcyzSBfTMQpJG
PDKxXDR1G5JZx18QelLvEdg4cg==
-----END CERTIFICATE-----
Generated at Wed May 13 05:49:25 2026 by rpki-client