Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
File:                     _dVXSqazoje0NmmVfYUzlZPcHpo.mft (raw, json)
Hash identifier:          OU53yqSOKI7erzC711i11qmpD0F7khw+kB+nuGv6/3E=
Subject key identifier:   26:CC:FC:98:A5:F9:D2:F9:56:AD:65:0A:34:99:A3:6F:BB:5B:F9:F7
Authority key identifier: FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A
Certificate issuer:       /CN=A91F609C/serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
Certificate serial:       034D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
Manifest number:          0345
Signing time:             Wed 13 May 2026 01:07:12 +0000
Manifest this update:     Wed 13 May 2026 01:07:11 +0000
Manifest next update:     Wed 20 May 2026 01:07:11 +0000
Files and hashes:         1: _dVXSqazoje0NmmVfYUzlZPcHpo.crl (hash: de1jubuMuPGH4hX7omQGG2hgdEJiEJEX5jkFisKGrFE=)
                          2: 06E87B54046711ED95A3495FC4F9AE02.roa (hash: R9jdVpy+qpEyzogbluazuQ5kKtc3aY56mxNQcSBuCZs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl
                          rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 01:07:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 845 (0x34d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F609C, serialNumber=FDD5574AA6B3A237B43669957D85339593DC1E9A
        Validity
            Not Before: May 13 01:07:11 2026 GMT
            Not After : May 20 01:07:11 2026 GMT
        Subject: CN=6a03cebf-5813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:ad:4f:ec:08:8c:75:2d:f5:93:c9:4e:07:45:
                    f3:2f:e6:cd:f9:52:f2:02:c8:4b:1f:29:a7:6f:fd:
                    29:83:e9:a6:25:67:77:03:eb:58:e6:a9:d3:8e:f6:
                    64:4f:5b:c8:9c:7f:bb:8c:3a:48:6a:c1:e0:a8:09:
                    80:59:cd:fa:f2:db:45:62:c5:55:9e:b8:0b:a5:27:
                    24:d3:6f:0c:f6:3d:c6:a0:b2:15:3d:41:a6:e9:ac:
                    eb:a1:ed:a7:c5:31:73:72:98:2a:27:00:85:bf:56:
                    0c:03:54:5f:20:08:86:0f:b3:1e:19:cf:0f:6f:6d:
                    ea:f9:79:d0:c5:3d:c1:f3:a8:2f:e4:62:f4:c7:22:
                    fb:68:e3:d7:d6:01:28:5b:a8:9f:7b:60:07:c8:8d:
                    13:e5:06:be:ee:af:a7:8c:45:99:8b:a8:13:21:fb:
                    53:b6:56:c6:a2:b6:bc:a1:6a:e4:dc:37:86:24:5a:
                    13:43:63:54:1a:75:fb:09:0b:a8:9f:20:7a:1d:9a:
                    ff:2a:12:5b:44:52:eb:4c:06:b5:5f:d6:cb:b6:98:
                    7c:9a:4a:d4:71:d2:01:5c:0e:b8:27:0a:fd:e4:69:
                    ef:bb:2d:b7:b5:5d:15:55:7a:75:82:bd:bf:dc:07:
                    37:f4:68:d2:7f:cf:67:f4:29:5b:2e:24:72:98:3c:
                    c3:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:CC:FC:98:A5:F9:D2:F9:56:AD:65:0A:34:99:A3:6F:BB:5B:F9:F7
            X509v3 Authority Key Identifier:
                keyid:FD:D5:57:4A:A6:B3:A2:37:B4:36:69:95:7D:85:33:95:93:DC:1E:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_dVXSqazoje0NmmVfYUzlZPcHpo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F609C/0AA57C6C046511ED9C85F15EC4F9AE02/_dVXSqazoje0NmmVfYUzlZPcHpo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4e:97:08:3a:42:f5:fb:d5:9e:d0:a9:8a:ca:cb:69:23:bd:0a:
         79:64:2e:bd:6c:a9:fd:d7:05:c3:9b:5c:81:57:5a:8a:cb:31:
         6f:f6:77:4d:04:b0:b5:ae:14:39:69:75:b3:f5:b9:af:89:fa:
         a8:55:df:87:c7:0a:28:c7:2a:cb:c2:0b:12:06:97:7f:b4:39:
         1d:24:b8:8d:c3:18:5d:68:55:5b:bb:62:5d:f2:db:b4:b2:5c:
         a5:c2:e8:59:27:33:e3:d3:2b:5d:92:8f:1e:c2:5a:b4:fe:d2:
         90:94:d9:8d:ba:16:c8:10:78:e7:b9:68:be:40:9a:53:f3:0d:
         b2:41:f4:d2:88:05:07:3a:a9:30:2d:cf:42:23:58:d0:45:9b:
         0a:24:9a:bb:e1:e9:4a:b6:d9:ce:50:9a:96:e5:9c:f8:c9:b8:
         b3:c1:1b:9d:19:94:81:2e:5e:d4:b1:68:ac:51:42:89:7d:eb:
         d3:14:de:25:e2:14:f5:17:e1:43:66:44:90:d5:aa:cf:37:b9:
         79:e3:49:a6:9d:83:52:07:90:aa:b8:a5:43:ed:4a:c1:c9:be:
         70:be:bf:f8:e4:84:dd:6f:f4:4a:b9:90:b3:77:d9:fc:c5:da:
         7a:f5:e2:cf:cb:f3:60:f3:d6:9b:69:3c:79:ff:6e:37:e9:8c:
         55:b2:f6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:16:11 2026 by rpki-client