Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
File:                     sXSj1LqbR24rMeR8cqKY0ETZh4U.mft (raw, json)
Hash identifier:          xLjQG7jC9GA00ePGJbcG+SDwnmmcYcFKSHOVFxykb08=
Subject key identifier:   6E:A1:90:5E:3C:2A:D3:13:9C:03:25:5C:02:C9:78:96:70:42:8E:39
Authority key identifier: B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85
Certificate issuer:       /CN=A91FBC89/serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
Manifest number:          FF
Signing time:             Mon 11 May 2026 06:35:53 +0000
Manifest this update:     Mon 11 May 2026 06:35:52 +0000
Manifest next update:     Mon 18 May 2026 06:35:52 +0000
Files and hashes:         1: sXSj1LqbR24rMeR8cqKY0ETZh4U.crl (hash: aUAsxmunI2hdMM3BXmZ/U0JpSOuU2V5I6r2rTsRGkcA=)
                          2: 84E249E030D711F1A9283A38AD833773.roa (hash: aZtgUaUAy3lxVZGUWdm5XWesfC7FySUXNi8hLQd8w2w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl
                          rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:35:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FBC89, serialNumber=B174A3D4BA9B476E2B31E47C72A298D044D98785
        Validity
            Not Before: May 11 06:35:52 2026 GMT
            Not After : May 18 06:35:52 2026 GMT
        Subject: CN=6a0178c9-a8a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:54:5e:30:a3:d0:78:3a:b1:6d:f2:a6:89:71:
                    ab:9c:74:6a:11:86:c9:61:58:c1:df:9e:39:74:64:
                    f7:f9:70:42:6c:32:6b:18:d5:e5:b8:00:5f:28:9a:
                    b4:06:a9:aa:a6:03:03:75:62:60:95:25:3b:ce:a9:
                    e8:6e:e3:ac:29:78:a8:cb:6f:8d:95:32:eb:20:58:
                    33:2f:fb:1b:1b:7b:d3:7f:00:ad:08:15:57:73:ea:
                    b5:26:0b:1d:80:05:e2:df:85:35:25:a1:6c:b3:c2:
                    5d:fb:2c:52:e9:9d:16:86:44:25:9b:64:e0:4a:b6:
                    74:32:1a:ec:d4:90:cd:ad:fc:68:4c:49:a1:cf:9f:
                    f0:86:52:38:35:f0:b7:60:f6:c8:62:c5:d4:30:34:
                    8f:80:05:4a:f4:a1:a6:24:9d:ac:50:b3:6f:82:e0:
                    5f:54:50:38:b8:d8:74:61:4f:f1:9d:3a:ff:2e:f8:
                    5b:c0:42:c0:a2:07:4c:93:e5:be:d1:75:b4:a6:be:
                    6c:08:6a:3c:67:94:18:96:a4:3d:85:3c:25:2e:3e:
                    3e:a8:62:04:87:7f:b8:5b:75:df:85:32:67:9f:e1:
                    cc:3a:bc:ae:89:27:45:91:35:10:db:87:50:f4:96:
                    30:67:a8:fb:1a:eb:1a:25:7b:39:68:db:34:53:28:
                    32:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:A1:90:5E:3C:2A:D3:13:9C:03:25:5C:02:C9:78:96:70:42:8E:39
            X509v3 Authority Key Identifier:
                keyid:B1:74:A3:D4:BA:9B:47:6E:2B:31:E4:7C:72:A2:98:D0:44:D9:87:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/sXSj1LqbR24rMeR8cqKY0ETZh4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FBC89/9E7262BEEFCE11EF893FF70EC4F9AE02/sXSj1LqbR24rMeR8cqKY0ETZh4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:67:93:c8:b1:1e:70:1d:9a:51:e7:a7:fb:97:c9:b2:9a:2a:
         e3:0c:56:1d:ba:5c:6d:5b:72:3a:8e:1f:63:c9:e8:27:75:8e:
         10:fd:83:ee:36:8b:77:b5:7e:73:ad:31:92:65:ae:5c:1d:f1:
         61:2f:9f:04:4b:16:db:d7:6b:20:06:ed:ca:79:16:c4:31:5d:
         30:da:91:5e:b8:01:f7:31:60:05:9d:e3:c3:12:9c:48:19:c4:
         b3:0b:97:d6:22:00:dd:40:31:d3:9f:db:18:a2:11:cb:38:bc:
         e6:26:06:a0:d7:a6:d1:d6:5c:7c:97:22:6a:89:65:b3:af:31:
         d1:ae:41:e6:bf:a9:91:ef:d4:bd:15:7b:b3:86:32:39:57:e5:
         38:74:fb:3d:58:e5:8b:12:b5:7b:c4:74:b7:4f:4b:00:75:e9:
         f2:fa:11:38:f2:2c:fa:c3:8e:fe:1d:7b:d6:0a:80:39:d4:d1:
         e8:b8:67:f2:05:ed:63:3a:ba:b3:93:ec:17:af:bd:f0:0b:27:
         7f:bf:f9:5d:38:c9:62:65:ea:d1:21:1e:cf:27:e6:7d:07:48:
         d1:89:ee:22:9b:6c:81:5a:75:b2:02:70:13:83:b2:78:95:1b:
         15:2f:a9:38:e8:ed:a5:30:7a:0c:0f:28:9a:af:56:25:13:58:
         a3:34:d4:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:44:22 2026 by rpki-client