Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
File:                     Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft (raw, json)
Hash identifier:          o5IAPLaLgILaY4y5wvZgFCY0oTP7bvsdyrgAh6luL74=
Subject key identifier:   96:8C:8B:DD:3B:2D:B7:52:53:65:4D:76:FB:D5:3E:50:EC:CD:EB:1D
Authority key identifier: 1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C
Certificate issuer:       /CN=A91F7BE4/serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
Certificate serial:       1099
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
Manifest number:          108D
Signing time:             Tue 12 May 2026 17:23:18 +0000
Manifest this update:     Tue 12 May 2026 17:23:17 +0000
Manifest next update:     Tue 19 May 2026 17:23:17 +0000
Files and hashes:         1: Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl (hash: DAwASZ/QFzpjB+FAUNThIpO5lX4WjFdql89jh3RyM10=)
                          2: DB63DD0C511311E998B6E814C4F9AE02.roa (hash: Ao3jfGsh9U1xkNSfRtTIAsdPf+38NYLkOVbSpZBnBWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl
                          rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 17:23:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4249 (0x1099)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91F7BE4, serialNumber=1E6B3944B6788E90E997D8A8E8067C5969B8898C
        Validity
            Not Before: May 12 17:23:17 2026 GMT
            Not After : May 19 17:23:17 2026 GMT
        Subject: CN=6a036206-3086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:0a:ea:10:41:98:a6:e7:20:f8:9a:ef:b2:18:
                    96:c7:af:68:e2:dc:fa:c8:bc:c6:34:2c:85:3b:5a:
                    4c:0c:11:ce:e4:99:ea:f5:1d:a3:7f:95:9f:e6:4d:
                    fe:80:cc:23:e3:53:9d:90:b3:77:0e:bb:2c:1b:3c:
                    2e:c7:ff:75:eb:3c:89:37:bd:b3:2a:33:67:55:94:
                    f0:9f:b4:62:9f:93:19:4f:f6:01:5e:27:63:4d:9d:
                    dd:a0:15:46:ff:e2:41:c3:43:2c:5f:9c:e6:77:22:
                    11:49:67:db:5c:f0:73:48:8c:6c:13:bb:7f:bf:2b:
                    7e:bf:a5:c2:fa:04:bf:4a:75:01:51:43:33:f3:e2:
                    09:86:f3:46:49:4a:99:d1:bf:30:6e:52:f2:74:11:
                    e6:50:4f:7b:15:fb:bc:33:67:6e:f2:9f:62:56:57:
                    fb:e9:a5:bf:29:47:34:36:52:01:14:a2:a7:39:37:
                    4d:b2:eb:7e:fd:f2:8d:d8:92:6b:80:04:8a:51:2f:
                    d6:87:80:43:1f:86:38:b1:4d:b3:33:5f:c0:46:19:
                    52:d0:99:ea:73:cc:78:99:df:8a:df:58:a0:63:76:
                    71:71:0d:bd:6b:da:24:6e:f8:22:c4:d9:57:d8:34:
                    26:c9:dd:35:57:fb:56:b7:2d:a5:bc:a5:74:22:54:
                    65:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:8C:8B:DD:3B:2D:B7:52:53:65:4D:76:FB:D5:3E:50:EC:CD:EB:1D
            X509v3 Authority Key Identifier:
                keyid:1E:6B:39:44:B6:78:8E:90:E9:97:D8:A8:E8:06:7C:59:69:B8:89:8C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F7BE4/A06305C2511111E98C4BF10FC4F9AE02/Hms5RLZ4jpDpl9io6AZ8WWm4iYw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3b:ce:1f:05:88:5d:9e:0c:97:60:52:07:ba:34:50:84:9a:ec:
         21:93:6a:c0:75:f7:f4:57:ea:a6:d8:19:35:0e:e5:28:d2:be:
         12:d7:4a:64:4b:35:e4:03:c5:8c:01:8b:b9:94:1a:ab:55:59:
         7d:d0:d7:e9:98:70:78:50:01:99:4a:1c:ba:89:be:0d:df:f7:
         16:e9:d6:0d:9d:79:46:34:fb:0f:db:ae:0d:11:1c:44:70:b1:
         70:27:d5:25:5b:f3:69:1c:f8:2e:01:75:6b:21:6e:6b:e3:83:
         60:68:ae:7a:3d:cd:8f:a4:74:17:a4:2a:86:96:50:66:3f:68:
         1b:23:63:09:47:30:a4:8c:6d:f6:ef:d4:6c:ab:f7:7c:fb:c7:
         e5:47:8c:2d:73:05:b3:c4:ef:a7:c5:3e:fd:f0:70:05:e3:76:
         ed:70:24:27:40:1b:11:0e:6b:89:48:b5:1a:12:89:58:7b:5a:
         bf:17:93:c1:a9:ce:cf:7b:f3:73:17:8a:95:0c:b6:84:2a:07:
         13:f5:f3:1e:89:d5:fe:7c:31:72:52:c1:68:6f:c5:6d:fe:0e:
         57:26:c7:af:2e:90:31:2c:5b:2d:f3:79:5c:c8:71:8c:aa:0a:
         f6:d1:0a:e8:84:88:8a:2a:d1:57:aa:f4:15:d5:d4:8d:5c:25:
         0c:30:45:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 04:15:28 2026 by rpki-client