Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
File:                     C5I347CGtYw82c5v1JrCYffVJaM.mft (raw, json)
Hash identifier:          27NKus8DqllxRMbeU5dbi2McCniSQewpRovRzAozFqc=
Subject key identifier:   89:65:6B:C8:B3:D0:5A:F0:8F:2F:95:37:0D:09:E3:D8:99:8F:82:33
Authority key identifier: 0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3
Certificate issuer:       /CN=A91F08FA/serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
Certificate serial:       0103
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
Manifest number:          F3
Signing time:             Mon 11 May 2026 06:30:28 +0000
Manifest this update:     Mon 11 May 2026 06:30:28 +0000
Manifest next update:     Mon 18 May 2026 06:30:28 +0000
Files and hashes:         1: C5I347CGtYw82c5v1JrCYffVJaM.crl (hash: ovcYbR03X0yqNLSwu9c9tB4LufXuuU7ak/ZuUNJCdHI=)
                          2: 24E20F9E6B7011F0ACA1BB56C4F9AE02.roa (hash: RLjdUAVnjKgzwqmaXAIPV1P+6YSNLAkKqfL9Zn2hSIQ=)
                          3: B4F27262FA2911EFA783CE2DC4F9AE02.roa (hash: uufA5ZmNxri3hkizmrTV+/5I7T9shm+y03oLPhZQF5k=)
                          4: 9C9C1046F7CD11EF9245601CC4F9AE02.roa (hash: DZs/ioNjiGTQdREG+zE+daNHAc/dwChZtpeTTorEq9w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl
                          rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:30:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 259 (0x103)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F08FA, serialNumber=0B9237E3B086B58C3CD9CE6FD49AC261F7D525A3
        Validity
            Not Before: May 11 06:30:28 2026 GMT
            Not After : May 18 06:30:28 2026 GMT
        Subject: CN=6a017784-a960
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:3d:27:cd:90:e8:51:c9:df:79:72:c4:0f:19:
                    ae:1a:64:33:70:31:13:5f:1d:2b:89:99:c5:85:6d:
                    84:69:39:96:40:ce:98:0a:e8:05:db:eb:43:0a:57:
                    6f:73:d9:1a:b7:4e:13:2a:f0:7f:15:4c:d8:0b:f6:
                    bd:a7:e8:71:6b:62:99:ee:43:1b:ed:f1:82:c9:60:
                    29:5c:a8:9d:e6:b3:a3:b9:c2:7f:ad:0d:dc:38:0b:
                    09:f7:94:66:74:96:e0:39:d2:ba:58:cc:f2:ee:39:
                    a9:b3:9b:12:a8:3b:07:7a:06:e1:bc:0a:d8:ee:79:
                    ef:bf:ba:e9:a6:69:f1:04:2b:99:d0:a0:46:49:a0:
                    97:0d:29:15:ed:fb:22:a2:99:f6:ec:b2:ca:f6:3d:
                    67:7a:57:cf:23:0a:8c:df:e2:3a:fd:58:47:e1:87:
                    c8:1f:22:fd:62:2d:cd:23:9c:bb:ae:8f:e5:e0:71:
                    a8:0d:f9:20:dd:60:57:f6:b5:8a:73:29:49:3b:45:
                    6e:51:b4:e4:ef:d7:ce:f3:e5:74:ef:81:cf:2a:44:
                    85:b0:84:62:a3:7e:4f:f8:b5:75:c8:89:81:a0:2b:
                    16:ad:22:e3:17:77:61:c2:43:8e:df:75:bf:cb:39:
                    14:27:42:c8:09:ed:bc:ea:88:b0:41:59:9f:4c:bb:
                    2c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:65:6B:C8:B3:D0:5A:F0:8F:2F:95:37:0D:09:E3:D8:99:8F:82:33
            X509v3 Authority Key Identifier:
                keyid:0B:92:37:E3:B0:86:B5:8C:3C:D9:CE:6F:D4:9A:C2:61:F7:D5:25:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/C5I347CGtYw82c5v1JrCYffVJaM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F08FA/D37F625CE73D11EF8A046217C4F9AE02/C5I347CGtYw82c5v1JrCYffVJaM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:82:bd:5c:88:d0:ba:ff:fd:ff:07:71:b4:48:79:66:a6:38:
         7b:39:e1:8a:05:f4:11:3e:db:3e:90:2f:ed:fc:e0:b6:3c:c2:
         1e:8e:78:1d:7b:e6:45:52:c0:79:37:92:be:27:ce:97:08:e9:
         7e:cd:5a:f2:80:fd:43:8e:84:08:e2:c4:cf:97:7c:4b:01:45:
         c8:0b:b0:2d:17:ff:90:fa:53:68:45:b8:b9:1c:e2:a3:99:d0:
         04:a5:4e:7f:12:09:3a:e3:e8:da:c9:52:c6:95:4b:21:3b:15:
         15:13:ce:70:fe:e6:71:69:2b:1e:cf:f8:32:8a:a6:98:f1:79:
         54:26:cc:e2:7b:99:a5:3f:a4:6b:16:f8:91:9e:f1:7a:a7:51:
         f2:11:fc:ec:55:16:fb:e7:0b:00:62:e1:ae:79:28:4f:ab:35:
         e1:18:64:28:cc:bb:d4:fa:de:a8:a6:ca:c1:20:3d:2d:8e:93:
         3f:2a:b9:18:c0:a5:a2:3e:62:67:9b:3e:e7:2b:65:c9:87:19:
         61:dd:63:bc:cd:58:0d:6f:31:53:fa:38:5b:34:75:8c:58:b9:
         e1:31:a6:0d:82:6a:4b:71:a7:37:e1:be:f5:17:90:12:e1:b7:
         a4:32:42:31:53:c7:01:b5:15:46:01:e8:a7:29:8c:fc:dc:dd:
         99:36:3d:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:53:47 2026 by rpki-client