Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
File:                     EcBLr8HLQLBzED91iraOWH9b_gQ.mft (raw, json)
Hash identifier:          SXRR+hSQNucNGqsa81pCnWSANja+pzYBY4koLoyrvKw=
Subject key identifier:   19:73:DD:25:EA:27:0F:F2:10:E8:DD:8D:3E:CC:8F:12:BD:B7:E2:06
Authority key identifier: 11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04
Certificate issuer:       /CN=A91FE295/serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
Certificate serial:       0448
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
Manifest number:          043F
Signing time:             Mon 11 May 2026 00:20:16 +0000
Manifest this update:     Mon 11 May 2026 00:20:15 +0000
Manifest next update:     Mon 18 May 2026 00:20:15 +0000
Files and hashes:         1: EcBLr8HLQLBzED91iraOWH9b_gQ.crl (hash: 33G4fjQU0iffceGP9yreh3S2UE/swJloUYNrn8DLwmY=)
                          2: 4153181E1D4211ED99608059C4F9AE02.roa (hash: jD+RZZ+awTn3b0dsK5nF4kAR3h29O9n6oxGPNxy3s7w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl
                          rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 00:20:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1096 (0x448)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FE295, serialNumber=11C04BAFC1CB40B073103F758AB68E587F5BFE04
        Validity
            Not Before: May 11 00:20:15 2026 GMT
            Not After : May 18 00:20:15 2026 GMT
        Subject: CN=6a0120bf-9b37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:13:70:3f:61:34:16:72:5f:d2:28:f2:97:6b:
                    8f:ae:35:5d:e4:c7:17:35:5f:48:c5:5b:57:9a:eb:
                    0d:dc:6c:5d:49:8e:17:3b:f6:50:f4:a8:1a:d8:53:
                    c3:3e:61:43:21:f2:af:ed:33:12:23:60:8d:42:86:
                    7b:29:92:8c:64:e1:d9:04:37:cb:4b:f2:b6:88:e3:
                    f1:0b:58:83:67:4a:2c:21:b5:43:c4:07:97:d2:a8:
                    b4:75:de:84:2c:ca:59:65:a2:3d:b3:0a:2b:dc:5a:
                    f8:a5:7c:50:04:6d:7a:b4:a9:87:7a:c2:bc:92:a4:
                    be:cf:7a:c6:87:6d:43:58:48:df:c8:2b:6a:94:60:
                    36:d5:f7:aa:b4:a6:84:5f:a7:cf:3f:e6:83:d6:43:
                    db:31:1f:e5:45:95:5d:d8:5b:28:b5:ad:66:c9:c2:
                    5b:62:74:b2:c7:a6:8a:3b:cf:a1:04:29:cf:4d:61:
                    8f:d8:14:f8:f0:96:8f:54:fb:23:0c:c4:ef:a4:a6:
                    16:4a:59:5b:0d:18:93:79:f5:b4:46:b6:46:36:f7:
                    62:47:a8:13:90:58:3f:28:68:4b:8c:58:82:e9:67:
                    2b:4b:3d:9e:f6:10:41:32:e0:7c:18:51:2f:2b:62:
                    8b:a1:0b:9e:a1:f8:20:21:04:e3:82:7e:67:7a:c1:
                    a9:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:73:DD:25:EA:27:0F:F2:10:E8:DD:8D:3E:CC:8F:12:BD:B7:E2:06
            X509v3 Authority Key Identifier:
                keyid:11:C0:4B:AF:C1:CB:40:B0:73:10:3F:75:8A:B6:8E:58:7F:5B:FE:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/EcBLr8HLQLBzED91iraOWH9b_gQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FE295/6F96C0DCA01911EC9484D12FC4F9AE02/EcBLr8HLQLBzED91iraOWH9b_gQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         11:96:48:47:72:f7:28:dd:42:11:cd:26:00:f5:f4:af:00:a5:
         da:21:c7:eb:89:b1:6b:9c:e6:66:fe:43:02:46:a4:97:dd:26:
         2e:2a:93:22:e2:7d:45:d1:4e:0d:56:6c:86:0f:95:26:9c:cf:
         c8:cc:12:88:93:c8:3e:94:8a:bb:03:57:66:a6:3a:22:a6:e7:
         e5:51:75:96:94:de:e5:22:0f:9a:18:c9:db:75:66:f5:bb:c1:
         af:2b:0a:76:ad:3b:0b:f3:2a:c6:52:db:5e:51:7a:02:bc:7f:
         c7:25:9d:22:d2:ce:8c:d8:d4:bd:ea:a1:7d:a5:51:1d:04:1f:
         ad:9e:c5:77:ed:ce:76:a2:19:69:45:7c:3a:c7:e2:eb:78:79:
         43:b5:00:64:12:39:1d:df:48:ea:50:86:dc:10:11:fc:28:df:
         ff:eb:81:57:2a:d9:55:4e:78:b7:bb:f0:7b:9f:94:1d:d5:e3:
         ad:7b:63:f9:fa:05:08:b4:f8:5c:f9:1c:86:87:9c:30:e2:e7:
         89:6c:7b:57:3f:9e:42:23:8f:45:05:9a:3a:3a:50:0f:2d:7e:
         22:3b:5d:8d:a4:9b:05:03:0a:f4:00:3e:02:31:c8:0c:a3:20:
         51:30:69:4d:3d:e7:15:2c:0a:02:2f:66:18:4d:1d:38:ef:b7:
         a9:d9:20:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:52:45 2026 by rpki-client