Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
File:                     8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft (raw, json)
Hash identifier:          gdsIuvZOneJjt9vK7MFrqdXYuIeKKNpJ3W+M1Dhfsm0=
Subject key identifier:   1D:0B:C6:7F:02:CE:F1:AC:F8:90:4D:B4:EE:84:B8:1E:C4:1B:AC:4B
Authority key identifier: F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F
Certificate issuer:       /CN=A91FDC84/serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
Certificate serial:       64
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
Manifest number:          5F
Signing time:             Mon 11 May 2026 08:13:47 +0000
Manifest this update:     Mon 11 May 2026 08:13:46 +0000
Manifest next update:     Mon 18 May 2026 08:13:46 +0000
Files and hashes:         1: 8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl (hash: vPGX0dZWHS/5oIgAmC7rOlWcjDtDd239jgZh3mHAQbQ=)
                          2: 635E7900C51211F093EC3E85C4F9AE02.roa (hash: mjo3hh7WWuFxyFUKnVZbsH/uC4E6yqFulVk1pK4NVdw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl
                          rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 08:13:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 100 (0x64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FDC84, serialNumber=F0FD9E5A6DC9459A88E0113F24F561A6FDD7405F
        Validity
            Not Before: May 11 08:13:46 2026 GMT
            Not After : May 18 08:13:46 2026 GMT
        Subject: CN=6a018fba-29f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:68:bc:95:e4:38:46:d5:ce:52:3b:0c:57:2d:
                    82:62:5d:91:44:09:77:a7:51:f5:d6:cf:5f:4e:66:
                    c2:66:67:9d:5a:9a:2b:bb:9c:52:2c:1e:95:6d:85:
                    6b:cf:4c:3a:2f:29:6a:e1:9c:af:3e:b0:22:22:1a:
                    ab:c9:3f:86:61:b5:2f:d1:07:59:eb:91:4b:42:d4:
                    f6:4a:f1:8c:28:36:00:38:8b:3e:12:77:ab:d8:fa:
                    d6:84:6c:fa:81:3c:db:41:ad:53:63:58:57:76:d1:
                    8b:1c:ac:be:4c:c4:de:04:2e:c1:7c:32:c7:d7:7d:
                    95:c2:8f:6f:9c:b8:e2:fa:44:d6:d4:52:a2:23:3a:
                    90:41:77:db:e3:8d:5e:01:32:18:38:98:e5:5e:bc:
                    bd:19:59:b6:c5:aa:ad:e9:26:21:ec:a8:38:b3:ae:
                    35:1c:56:97:ec:a7:14:aa:9f:7a:ac:6d:99:ae:d6:
                    42:10:2d:05:39:a6:a2:54:fe:d8:1f:1e:66:d7:00:
                    b1:ad:0a:b9:94:0d:b5:2b:07:2c:22:c4:bf:ec:e8:
                    84:f6:84:03:9a:c5:88:4c:15:8e:05:fb:f8:fd:67:
                    09:95:0d:8d:32:3a:43:78:54:19:54:0f:de:69:a3:
                    28:00:5f:d4:ca:0f:4f:53:56:4a:a8:56:dc:cd:d5:
                    2f:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:0B:C6:7F:02:CE:F1:AC:F8:90:4D:B4:EE:84:B8:1E:C4:1B:AC:4B
            X509v3 Authority Key Identifier:
                keyid:F0:FD:9E:5A:6D:C9:45:9A:88:E0:11:3F:24:F5:61:A6:FD:D7:40:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/8P2eWm3JRZqI4BE_JPVhpv3XQF8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FDC84/DFB49C48C51011F09D8DB75FC4F9AE02/8P2eWm3JRZqI4BE_JPVhpv3XQF8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:5e:65:72:74:a0:6f:68:72:f3:7d:bf:18:ea:8c:24:e3:47:
         d9:85:ed:24:54:fd:f0:ac:82:d1:49:1f:cf:1b:eb:d3:35:16:
         49:e5:fa:57:2e:b6:d8:b2:ec:21:87:e7:c3:d3:b8:90:f0:40:
         83:8d:46:cb:75:d9:9a:9b:32:0d:30:6b:b4:1d:ce:b0:ff:37:
         ab:a4:65:37:bd:50:8e:a8:a3:4f:c8:40:8b:5f:30:09:02:b8:
         4c:cb:b9:72:47:c8:e6:9c:7a:5c:15:5e:37:4b:82:45:44:4c:
         0e:ad:20:d1:84:e1:14:10:af:d6:99:4f:8d:b1:3f:7f:f8:89:
         07:34:51:2c:79:18:7d:21:93:db:cd:69:d0:de:6a:82:cb:8b:
         be:fe:72:fa:0e:b0:99:1c:19:a4:59:5c:af:fe:d0:b3:e8:04:
         dd:85:94:34:2e:44:ff:57:7b:ec:c8:e6:c7:1b:ed:f7:d8:98:
         e9:7b:5b:71:80:d3:35:6f:29:23:c7:97:65:6a:fb:d9:08:cd:
         c0:a7:43:98:20:a3:0e:d1:93:c7:5c:1b:61:9d:74:b0:74:59:
         1d:e7:76:10:81:cb:55:99:3c:39:85:6b:b2:22:73:86:44:d7:
         94:9e:6e:5d:ec:f5:d0:93:dd:ca:40:33:d0:12:e2:f5:05:8f:
         95:08:ba:63
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBZDANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFG
REM4NDExMC8GA1UEBRMoRjBGRDlFNUE2REM5NDU5QTg4RTAxMTNGMjRGNTYxQTZG
REQ3NDA1RjAeFw0yNjA1MTEwODEzNDZaFw0yNjA1MTgwODEzNDZaMBgxFjAUBgNV
BAMTDTZhMDE4ZmJhLTI5ZjcwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDGaLyV5DhG1c5SOwxXLYJiXZFECXenUfXWz19OZsJmZ51amiu7nFIsHpVthWvP
TDovKWrhnK8+sCIiGqvJP4ZhtS/RB1nrkUtC1PZK8YwoNgA4iz4Sd6vY+taEbPqB
PNtBrVNjWFd20YscrL5MxN4ELsF8MsfXfZXCj2+cuOL6RNbUUqIjOpBBd9vjjV4B
Mhg4mOVevL0ZWbbFqq3pJiHsqDizrjUcVpfspxSqn3qsbZmu1kIQLQU5pqJU/tgf
HmbXALGtCrmUDbUrBywixL/s6IT2hAOaxYhMFY4F+/j9ZwmVDY0yOkN4VBlUD95p
oygAX9TKD09TVkqoVtzN1S8/AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHQvGfwLO
8az4kE207oS4HsQbrEswHwYDVR0jBBgwFoAU8P2eWm3JRZqI4BE/JPVhpv3XQF8w
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZEQzg0L0RGQjQ5QzQ4QzUx
MDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpxSTRCRV9KUFZocHYzWFFG
OC5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjNBMjRGMjAxRDY2MTFFMjhBQzg4MzdDNzJG
RDFGRjIvOFAyZVdtM0pSWnFJNEJFX0pQVmhwdjNYUUY4LmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUZE
Qzg0L0RGQjQ5QzQ4QzUxMDExRjA5RDhEQjc1RkM0RjlBRTAyLzhQMmVXbTNKUlpx
STRCRV9KUFZocHYzWFFGOC5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCEXmVydKBvaHLzfb8Y6owk40fZhe0kVP3wrILRSR/PG+vTNRZJ5fpXLrbYsuwh
h+fD07iQ8ECDjUbLddmamzINMGu0Hc6w/zerpGU3vVCOqKNPyECLXzAJArhMy7ly
R8jmnHpcFV43S4JFREwOrSDRhOEUEK/WmU+NsT9/+IkHNFEseRh9IZPbzWnQ3mqC
y4u+/nL6DrCZHBmkWVyv/tCz6ATdhZQ0LkT/V3vsyObHG+332Jjpe1txgNM1bykj
x5dlavvZCM3Ap0OYIKMO0ZPHXBthnXSwdFkd53YQgctVmTw5hWuyInOGRNeUnm5d
7PXQk93KQDPQEuL1BY+VCLpj
-----END CERTIFICATE-----
Generated at Wed May 13 03:41:29 2026 by rpki-client