Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
File:                     F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft (raw, json)
Hash identifier:          YLpftMnkaNEqrjXP/fH2E+X66d1lZ+qZkFF6f10wl3E=
Subject key identifier:   05:0E:2B:E5:BF:A7:C2:F7:8E:CA:A7:AB:2B:E1:41:06:6B:FC:B8:4E
Authority key identifier: 17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D
Certificate issuer:       /CN=A91ED17F/serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
Certificate serial:       089C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
Manifest number:          0880
Signing time:             Tue 12 May 2026 20:45:56 +0000
Manifest this update:     Tue 12 May 2026 20:45:56 +0000
Manifest next update:     Tue 19 May 2026 20:45:56 +0000
Files and hashes:         1: F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl (hash: 4rUsDX0jxEb+74vGOVwW2DtwxfS8iYJzpTt7i/+zvq0=)
                          2: 70F65056CDB911F0BDBD9948C4F9AE02.roa (hash: +r2m4LZBOfeFC8llerWWOPpo5aVgzOjABbJBM71Zx6w=)
                          3: 42BB5BC2CB8A11F089E0C00EC4F9AE02.roa (hash: ffFlZZGQ0iwDML1pEzeR++cufgSgn2eJebqm0V7/KKc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl
                          rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:45:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2204 (0x89c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91ED17F, serialNumber=17F4FB128756EBB0BAC59D4E0F4B7E087279760D
        Validity
            Not Before: May 12 20:45:56 2026 GMT
            Not After : May 19 20:45:56 2026 GMT
        Subject: CN=6a039184-135f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:fa:bc:b1:97:c5:b0:9f:ba:e2:7a:c8:95:8f:
                    7b:3e:ed:f4:1c:0f:90:72:a2:e7:28:fd:25:e5:c9:
                    7f:9a:dd:58:9a:16:f1:90:2a:eb:85:be:25:26:c1:
                    73:ff:6e:e4:4d:8e:b9:f8:32:d4:02:38:7d:69:75:
                    e5:7c:72:44:1c:a2:ac:e9:4c:cf:98:50:8a:4e:b6:
                    cf:c3:3a:74:9d:f9:c0:70:6f:d5:4f:e0:b3:41:b4:
                    e9:97:bb:54:e9:eb:35:b9:17:f9:93:b8:7e:4f:e7:
                    88:6a:3e:1e:98:af:d9:ca:d9:42:5a:25:90:e5:35:
                    d3:bd:cf:82:6b:32:a4:4d:5e:6c:3f:97:5b:37:62:
                    09:3b:45:e8:52:52:e2:c2:c3:5b:c1:72:41:4a:db:
                    88:4c:c6:78:81:5f:9f:87:ce:01:6a:4d:da:58:5a:
                    84:3b:07:47:52:40:46:b5:18:4a:c3:54:81:1a:97:
                    08:96:33:e2:7f:d4:7b:2f:5f:71:76:c7:78:f7:0f:
                    c0:0c:c9:04:89:f7:a6:cc:34:c7:e2:06:30:6f:dd:
                    25:e2:c0:ba:f4:fc:33:52:a9:ab:72:f8:06:55:ef:
                    bf:bf:66:e9:e1:06:e7:a6:9c:44:05:05:50:14:fd:
                    df:0e:48:03:f9:c9:38:b1:0e:94:e4:b6:eb:03:fe:
                    69:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0E:2B:E5:BF:A7:C2:F7:8E:CA:A7:AB:2B:E1:41:06:6B:FC:B8:4E
            X509v3 Authority Key Identifier:
                keyid:17:F4:FB:12:87:56:EB:B0:BA:C5:9D:4E:0F:4B:7E:08:72:79:76:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F_T7EodW67C6xZ1OD0t-CHJ5dg0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91ED17F/A56D5F40FB4711EABEF47D3EC4F9AE02/F_T7EodW67C6xZ1OD0t-CHJ5dg0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         03:cd:73:5b:61:12:72:74:b6:5a:b9:95:eb:c6:7d:21:b3:78:
         d4:19:fe:de:d0:03:64:76:f8:9d:21:28:92:b1:7b:a3:d6:3f:
         37:6c:a5:6d:f7:35:e7:f0:f5:82:34:1b:a9:2b:e0:33:5b:a3:
         7d:50:27:74:12:94:00:cd:cd:6b:21:88:54:b3:cb:78:ab:27:
         3e:b9:18:ad:3f:fa:24:ee:b8:ff:97:40:ba:92:1f:b0:97:5b:
         64:6b:5a:07:71:91:f1:0c:1b:9a:51:bf:a0:f1:18:9a:5d:79:
         bc:95:a8:32:69:13:d2:1d:6a:bc:de:68:3f:ae:ff:c4:1a:65:
         9c:25:9b:bb:78:fc:0e:87:3f:61:26:82:35:90:0f:0e:42:f3:
         a2:5b:75:09:2a:4f:a6:62:3b:67:ee:43:c8:00:26:f3:e8:77:
         57:18:ae:cd:8e:c3:75:6a:64:40:22:b4:c3:17:da:a9:37:cc:
         73:76:3d:6c:d0:62:b0:2a:21:81:e5:c4:89:8d:a3:d4:23:b7:
         8e:16:1c:e9:08:b2:49:95:7b:f0:5c:a6:9d:fd:18:78:96:f6:
         c2:c1:9e:f7:7b:80:31:5c:39:91:91:33:0e:b6:7e:a1:70:ec:
         2c:59:bd:7e:64:e1:9f:35:23:3f:b3:46:4d:f3:ff:9d:23:38:
         17:bd:9e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:42:25 2026 by rpki-client