Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
File:                     t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft (raw, json)
Hash identifier:          ah1j6SB9gZfNBNaf02S5trZpgYtMkVV2ean/c8V/N3s=
Subject key identifier:   71:A7:B0:69:C3:D7:95:81:AC:A2:E2:C1:26:9B:00:E5:81:57:D9:70
Authority key identifier: B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A
Certificate issuer:       /CN=A91EF72D/serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A
Certificate serial:       04B8
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
Manifest number:          04B2
Signing time:             Tue 12 May 2026 23:59:44 +0000
Manifest this update:     Tue 12 May 2026 23:59:44 +0000
Manifest next update:     Tue 19 May 2026 23:59:44 +0000
Files and hashes:         1: t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl (hash: Hh15dJjL4bTyUORmCV5F1fC1WY2fDtFed1ezet6cj8M=)
                          2: 46F09F74546A11EF9B82D11DC4F9AE02.roa (hash: 2RXStLDjyOeuSTsmkifmHRekLcbCRcqX4watjvDv81g=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl
                          rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:59:43 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1208 (0x4b8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EF72D, serialNumber=B772917CB5C0767DD8B9E94C40C1A7AAA659DF2A
        Validity
            Not Before: May 12 23:59:44 2026 GMT
            Not After : May 19 23:59:44 2026 GMT
        Subject: CN=6a03bef0-93b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:da:e2:fb:b2:f0:e8:e3:0d:26:10:2e:36:90:
                    7a:bb:3a:2c:31:b8:bf:c4:2e:23:1a:63:bb:c6:1c:
                    94:0c:2c:f0:13:2a:5c:28:c3:ef:e5:9e:2e:9a:c3:
                    a8:b4:72:5d:73:bb:13:a1:ba:a8:1b:08:4e:2b:aa:
                    0b:1c:cc:ae:45:66:f8:28:12:ab:01:d3:f9:e0:66:
                    46:a7:fb:9b:21:f2:9f:dc:f5:9c:a8:db:2d:de:73:
                    c5:5c:d9:d5:b9:a1:f1:3c:3b:2d:c8:c9:0f:44:9d:
                    c4:f8:8e:8e:e2:7b:c5:2a:d8:78:40:5b:11:4a:ba:
                    dd:be:f5:b0:e3:e4:8f:50:fc:df:5b:15:40:78:ee:
                    69:57:0e:29:fe:65:34:6b:85:11:9f:5c:7d:a7:de:
                    01:92:d9:9c:67:2a:0c:55:dc:88:b2:2d:e2:c5:55:
                    60:d8:fe:ae:dd:47:3a:20:d7:3f:dc:ca:8a:5a:1d:
                    e4:4d:a2:93:35:80:b5:b4:bc:73:a8:8c:26:9c:10:
                    87:0d:9d:d4:0b:b1:be:ef:24:3c:38:b8:e9:2b:66:
                    34:4d:3d:7f:15:0f:bf:8b:03:8f:e6:b1:fd:31:d6:
                    8f:e6:78:33:eb:11:4f:14:a4:8e:94:9c:57:76:a1:
                    1c:45:02:da:c0:1a:a6:e0:f9:66:1d:8e:7a:f4:78:
                    56:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:A7:B0:69:C3:D7:95:81:AC:A2:E2:C1:26:9B:00:E5:81:57:D9:70
            X509v3 Authority Key Identifier:
                keyid:B7:72:91:7C:B5:C0:76:7D:D8:B9:E9:4C:40:C1:A7:AA:A6:59:DF:2A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/t3KRfLXAdn3YuelMQMGnqqZZ3yo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EF72D/8485F24A73CF11ECBC355485C4F9AE02/t3KRfLXAdn3YuelMQMGnqqZZ3yo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         59:cb:3a:20:78:a6:96:1f:69:a9:72:fb:73:06:c4:1f:3c:04:
         bb:b3:61:aa:51:3b:83:ef:35:9c:66:57:63:e1:18:68:83:f6:
         ee:06:c2:65:2e:fc:a3:ec:63:a5:5b:0d:c8:ac:dd:08:09:96:
         76:24:1c:af:fa:d0:ae:12:0f:83:b6:b9:23:a0:69:ef:17:5c:
         d6:d2:88:80:e3:1a:80:f8:ef:60:7a:c0:5a:b8:f6:7a:f5:a4:
         60:a0:4f:f1:45:ce:69:b3:e1:54:dc:e2:7f:f0:23:5c:bf:e5:
         48:97:30:eb:16:93:39:6e:fa:ec:a9:c8:73:85:ae:ed:e7:94:
         36:87:ec:5c:e4:40:92:6a:28:18:85:45:76:17:94:54:74:45:
         73:bb:2b:1f:e8:1a:e8:a4:68:c4:d6:4e:1d:7b:b2:81:05:cb:
         2c:81:00:68:ff:95:2d:81:97:4f:25:56:92:f7:e0:c2:31:67:
         f3:bb:09:e3:f1:47:b0:19:b9:19:b7:1a:b9:4d:ea:63:2d:7b:
         ac:a6:2f:6f:04:dd:56:38:a7:27:ba:ee:d7:36:e5:e2:d8:53:
         bc:8a:bf:11:78:8f:1a:5e:7b:de:c7:c0:b5:77:27:f4:53:ff:
         39:b2:5a:40:50:e9:44:fc:f0:9e:fa:ff:b9:ac:1f:0f:a7:3f:
         8a:0d:2d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:14:15 2026 by rpki-client