Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
File:                     umn8tA4zSXV_ok-OM1eRxfAEXVg.mft (raw, json)
Hash identifier:          fNhfcrj3zFkXxfrzJEA173d55/KzMolB2HNIxRpIcRg=
Subject key identifier:   27:61:7B:CD:86:7D:11:AE:49:6D:F3:79:06:53:52:D9:DA:5C:90:10
Authority key identifier: BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58
Certificate issuer:       /CN=A91EBA81/serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
Certificate serial:       04D1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
Manifest number:          04C4
Signing time:             Wed 13 May 2026 00:00:21 +0000
Manifest this update:     Wed 13 May 2026 00:00:20 +0000
Manifest next update:     Wed 20 May 2026 00:00:20 +0000
Files and hashes:         1: umn8tA4zSXV_ok-OM1eRxfAEXVg.crl (hash: oaDyf5sRssSRTRpO+Bpt+pELs2hXK6QE5ebMe3DyJDE=)
                          2: 159DA092E9B711EFB8454123C4F9AE02.roa (hash: 7ShatlVB6jSiCRe5XmNvlt4TSEhHSPt1cgEmAve1hIw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl
                          rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 00:00:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1233 (0x4d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EBA81, serialNumber=BA69FCB40E3349757FA24F8E335791C5F0045D58
        Validity
            Not Before: May 13 00:00:20 2026 GMT
            Not After : May 20 00:00:20 2026 GMT
        Subject: CN=6a03bf15-a902
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:87:67:cf:04:8e:9f:62:f6:71:50:6b:0b:30:
                    17:48:db:90:eb:3f:46:bb:70:c2:8e:39:43:ae:04:
                    74:c1:56:ea:d5:c1:25:35:f3:19:ef:d1:4b:e5:8a:
                    c0:93:5d:ea:fd:40:8c:bd:4c:84:38:a7:05:68:6a:
                    1d:fb:bb:7b:ed:bf:e0:c6:11:96:4f:90:37:9d:fd:
                    77:f6:ef:cd:b7:1e:09:a4:4a:2f:70:e0:c0:6a:9e:
                    95:64:46:32:4b:fd:46:95:2d:1a:6b:ad:4e:35:32:
                    c5:a1:02:2b:8b:45:ef:8d:bc:b5:e0:53:89:5c:06:
                    ea:cd:58:8a:fd:be:0a:23:96:31:70:7f:c6:94:d5:
                    b6:50:88:aa:b3:e6:9a:c8:b2:8e:88:ec:f0:85:63:
                    3a:4d:3c:4d:c3:2f:5a:ec:a6:8d:fd:19:96:56:a3:
                    af:74:bb:51:b6:30:d9:a1:e2:4f:19:ed:b3:06:0f:
                    b3:12:43:0e:4a:6c:d7:6e:56:5f:ef:4b:be:f6:3f:
                    7d:dc:94:df:32:2e:81:0f:57:6a:5a:56:06:4e:32:
                    e8:2f:d3:83:86:9d:a0:ee:60:16:b8:0d:ac:1b:21:
                    0f:a0:d5:3c:3e:aa:6a:15:0c:bb:67:c7:b8:5f:42:
                    d7:89:93:72:64:f1:0b:fe:60:72:de:54:39:bc:3a:
                    9f:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:61:7B:CD:86:7D:11:AE:49:6D:F3:79:06:53:52:D9:DA:5C:90:10
            X509v3 Authority Key Identifier:
                keyid:BA:69:FC:B4:0E:33:49:75:7F:A2:4F:8E:33:57:91:C5:F0:04:5D:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/umn8tA4zSXV_ok-OM1eRxfAEXVg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EBA81/CE136BD0745711ECB3987518C4F9AE02/umn8tA4zSXV_ok-OM1eRxfAEXVg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:42:2c:5c:c6:ee:ac:43:c2:f5:1d:19:2e:4a:78:5d:ac:83:
         3c:fd:6a:50:54:69:23:b2:a3:81:13:62:9d:d1:0b:4c:6e:5f:
         c0:c2:f4:11:b7:a9:df:ae:28:0a:48:ef:08:91:0e:7f:2c:89:
         5a:c6:e1:8e:47:95:28:3a:01:0a:c3:e2:a4:83:42:ea:df:50:
         88:7b:6f:12:0b:d9:9c:39:83:3b:b2:ee:d4:a7:60:a3:df:88:
         02:6a:b1:62:06:a9:ba:eb:0a:63:8d:ee:37:29:e9:db:05:05:
         55:d3:99:bf:77:55:e9:f7:bf:e1:81:39:17:66:2e:d3:ff:46:
         55:55:d6:bb:4f:fe:05:bb:6c:0d:96:2e:dc:02:5a:b8:3c:07:
         92:16:6f:2e:33:4e:4d:a6:51:e9:07:69:46:a8:1c:24:b5:9a:
         91:ab:06:dc:5d:73:59:00:3e:eb:94:2c:d0:74:16:86:0b:7b:
         f7:bc:a4:eb:87:5d:31:76:da:50:0d:cb:09:f4:56:7d:48:53:
         2f:1f:8b:4a:fd:72:96:e0:99:e2:02:18:5b:65:e3:37:0b:d0:
         32:15:a2:f8:1f:12:db:68:7a:f0:53:d2:94:b6:8c:93:51:01:
         29:0b:c4:19:7c:cf:00:ee:94:c6:60:a5:d4:c5:37:87:9b:76:
         0f:12:52:5f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBNEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUJBODExMTAvBgNVBAUTKEJBNjlGQ0I0MEUzMzQ5NzU3RkEyNEY4RTMzNTc5MUM1
RjAwNDVENTgwHhcNMjYwNTEzMDAwMDIwWhcNMjYwNTIwMDAwMDIwWjAYMRYwFAYD
VQQDEw02YTAzYmYxNS1hOTAyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA2YdnzwSOn2L2cVBrCzAXSNuQ6z9Gu3DCjjlDrgR0wVbq1cElNfMZ79FL5YrA
k13q/UCMvUyEOKcFaGod+7t77b/gxhGWT5A3nf139u/Ntx4JpEovcODAap6VZEYy
S/1GlS0aa61ONTLFoQIri0Xvjby14FOJXAbqzViK/b4KI5YxcH/GlNW2UIiqs+aa
yLKOiOzwhWM6TTxNwy9a7KaN/RmWVqOvdLtRtjDZoeJPGe2zBg+zEkMOSmzXblZf
70u+9j993JTfMi6BD1dqWlYGTjLoL9ODhp2g7mAWuA2sGyEPoNU8PqpqFQy7Z8e4
X0LXiZNyZPEL/mBy3lQ5vDqfEQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCdhe82G
fRGuSW3zeQZTUtnaXJAQMB8GA1UdIwQYMBaAFLpp/LQOM0l1f6JPjjNXkcXwBF1Y
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQkE4MS9DRTEzNkJEMDc0
NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNYVl9vay1PTTFlUnhmQUVY
VmcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3Vtbjh0QTR6U1hWX29rLU9NMWVSeGZBRVhWZy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QkE4MS9DRTEzNkJEMDc0NTcxMUVDQjM5ODc1MThDNEY5QUUwMi91bW44dEE0elNY
Vl9vay1PTTFlUnhmQUVYVmcubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAAEIsXMburEPC9R0ZLkp4XayDPP1qUFRpI7KjgRNindELTG5fwML0Ebep364o
CkjvCJEOfyyJWsbhjkeVKDoBCsPipINC6t9QiHtvEgvZnDmDO7Lu1Kdgo9+IAmqx
YgapuusKY43uNynp2wUFVdOZv3dV6fe/4YE5F2Yu0/9GVVXWu0/+BbtsDZYu3AJa
uDwHkhZvLjNOTaZR6QdpRqgcJLWakasG3F1zWQA+65Qs0HQWhgt797yk64ddMXba
UA3LCfRWfUhTLx+LSv1yluCZ4gIYW2XjNwvQMhWi+B8S22h68FPSlLaMk1EBKQvE
GXzPAO6UxmCl1MU3h5t2DxJSXw==
-----END CERTIFICATE-----
Generated at Wed May 13 14:56:19 2026 by rpki-client