Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
File:                     caPb4vD_0LEHymtXE7Fcl6jj4dE.mft (raw, json)
Hash identifier:          Dp64zXAO6SJ+AOic189fNzUszicmjJNmABrRGLN96y8=
Subject key identifier:   7A:F9:19:68:AE:8A:F3:60:53:E8:36:0F:73:8E:30:65:C4:4D:E0:00
Authority key identifier: 71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1
Certificate issuer:       /CN=A91EEE79/serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
Certificate serial:       62
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
Manifest number:          5C
Signing time:             Mon 11 May 2026 08:13:13 +0000
Manifest this update:     Mon 11 May 2026 08:13:12 +0000
Manifest next update:     Mon 18 May 2026 08:13:12 +0000
Files and hashes:         1: caPb4vD_0LEHymtXE7Fcl6jj4dE.crl (hash: MST1VlL8oze1cIprvAMRkHSVaW/KB7KquNOPXDEpFVc=)
                          2: 07EF6C98C45711F0A1027D38C4F9AE02.roa (hash: MKqJq2FumoKTrTwmyrH8ChMilgYTt/EL/h7r2rH2ApY=)
                          3: 078123C8C45711F09E1B7D38C4F9AE02.roa (hash: 77Ti4coJG6upOfWGSXiHZBgxkM1mBFKcvk6A/BW0GOQ=)
                          4: 0853E998C45711F080167D38C4F9AE02.roa (hash: q06BkXWxrAKL8dfnFJAQ0hKBleWRtfFz0FU/k9ATOTo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl
                          rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:13:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EEE79, serialNumber=71A3DBE2F0FFD0B107CA6B5713B15C97A8E3E1D1
        Validity
            Not Before: May 11 08:13:12 2026 GMT
            Not After : May 18 08:13:12 2026 GMT
        Subject: CN=6a018f99-7185
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:25:95:64:70:42:c3:53:95:bd:23:76:0b:91:
                    c9:a3:d9:8d:26:19:19:b1:03:2d:7d:5e:93:98:b2:
                    ce:70:03:3f:4a:a1:32:8f:61:9e:84:dd:31:67:74:
                    54:99:76:70:0b:73:ce:94:60:7f:2e:6f:41:8c:74:
                    1e:bf:c1:f3:c9:40:19:71:71:ea:92:32:07:d4:de:
                    86:33:c7:b7:87:75:f9:00:5e:0a:a0:29:25:f4:4d:
                    18:e1:5e:7b:3e:94:95:e8:0a:1a:02:bd:7a:a8:6a:
                    2f:7c:9b:6a:7e:55:ea:a5:f6:ec:45:a4:cb:c0:29:
                    0a:4a:91:da:41:cd:b7:32:b4:6a:62:89:39:3d:8c:
                    de:01:a3:7e:7f:58:c2:ae:0b:3c:fa:a5:2a:b1:12:
                    cb:23:27:0f:c5:ff:55:2b:60:b5:55:36:b4:32:5c:
                    f9:a8:42:34:99:b4:49:3f:f9:cc:62:9c:46:73:83:
                    d8:0e:57:4f:43:42:ee:3f:aa:10:1d:ca:56:1f:45:
                    3c:43:39:95:f1:a5:18:03:cc:13:75:38:c7:e7:10:
                    f4:de:57:ad:0c:79:6e:13:9d:41:55:dc:5a:8b:36:
                    28:38:30:b2:5f:b3:87:23:60:d3:d6:27:bb:5a:1c:
                    36:9b:34:ca:67:e9:f8:6f:aa:20:18:d7:16:c1:e3:
                    71:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:F9:19:68:AE:8A:F3:60:53:E8:36:0F:73:8E:30:65:C4:4D:E0:00
            X509v3 Authority Key Identifier:
                keyid:71:A3:DB:E2:F0:FF:D0:B1:07:CA:6B:57:13:B1:5C:97:A8:E3:E1:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/caPb4vD_0LEHymtXE7Fcl6jj4dE.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EEE79/951E28F8C45611F08E53920BC4F9AE02/caPb4vD_0LEHymtXE7Fcl6jj4dE.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         07:0f:68:ef:5c:2e:24:d6:ec:6f:b4:5f:ee:e5:5f:58:61:3e:
         03:40:45:40:51:6b:4c:f3:df:b3:7b:cb:71:19:b0:9f:28:e8:
         89:b6:c0:05:d7:39:0a:89:a2:7f:c5:19:2f:c2:54:b3:21:63:
         da:de:a1:93:b3:66:8f:c5:b7:79:9e:8d:0d:20:55:5a:39:33:
         3a:bc:96:d8:69:eb:e9:42:1e:03:7a:0a:b6:99:74:eb:ca:dc:
         93:22:af:bd:ef:d3:1c:21:39:6d:09:01:3e:30:e9:03:06:94:
         37:fc:ff:a5:e8:b0:a5:b2:eb:f9:50:a3:83:62:2b:65:6e:62:
         e6:af:dd:30:be:81:63:15:c7:8f:5b:1e:1a:b9:72:e5:d5:c1:
         70:19:25:cc:a5:dc:f7:be:02:ca:c6:be:b2:e9:60:12:a6:d8:
         df:91:10:f0:ad:de:c2:be:8a:2c:28:8d:fd:6b:1e:92:ea:cf:
         32:c5:7e:07:bb:29:73:99:03:f8:d7:12:1e:32:8d:21:e6:a4:
         f3:02:6c:3f:80:c4:c4:ea:7a:a5:22:e3:87:89:e3:e5:80:5c:
         df:0b:8c:08:79:ba:8b:a3:5d:0f:36:7e:ca:44:94:78:32:bd:
         4e:ab:b0:93:7c:e3:85:d7:0f:9e:1c:4a:3b:e5:99:b6:65:be:
         4c:30:4a:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 00:57:15 2026 by rpki-client