Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
File:                     ABN5IHjRGy-UAw18O-71ATKibUA.mft (raw, json)
Hash identifier:          iFC8sqTvCpvdYypn35m13QINJyV5pzxVmCIecbCOS20=
Subject key identifier:   2A:BB:75:92:D3:AF:F1:4F:34:7B:FE:75:5A:0A:0C:2F:F8:F2:72:40
Authority key identifier: 00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40
Certificate issuer:       /CN=A91B9C74/serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
Certificate serial:       02AA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
Manifest number:          0299
Signing time:             Fri 17 Apr 2026 01:28:39 +0000
Manifest this update:     Fri 17 Apr 2026 01:28:38 +0000
Manifest next update:     Fri 24 Apr 2026 01:28:38 +0000
Files and hashes:         1: ABN5IHjRGy-UAw18O-71ATKibUA.crl (hash: LOmjTuqbP2U0s/mL6YRD9Hyabjyzc/QPEjIbxqDiWJQ=)
                          2: 273E7B284E2311EDB6F68A4AC4F9AE02.roa (hash: MbY6IL5kpc7/CsrHl9Dq+//Dc21bFOal48QqzlMkm3s=)
                          3: F853742A5A9911EDA14F453FC4F9AE02.roa (hash: JJGT3Nb5VCKirzUE1ySYS3IWcoQmYybrBNJaHh+4Dao=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl
                          rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 01:28:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 682 (0x2aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B9C74, serialNumber=0013792078D11B2F94030D7C3BEEF50132A26D40
        Validity
            Not Before: Apr 17 01:28:38 2026 GMT
            Not After : Apr 24 01:28:38 2026 GMT
        Subject: CN=69e18cc7-b6bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:f0:f9:c4:11:e9:8f:9e:0a:08:32:c9:45:09:
                    d2:54:29:3c:b0:3a:c7:46:2f:65:dd:ed:fa:c8:e5:
                    17:e0:63:82:15:cb:d6:d8:29:65:65:04:5a:1a:b8:
                    aa:59:f2:26:f2:c9:df:22:5e:70:d8:15:f9:66:82:
                    6e:99:84:92:50:ba:01:dd:5b:95:84:a5:89:62:63:
                    17:84:0a:45:ea:ba:31:b3:cf:8a:be:9d:91:f5:2a:
                    53:84:ce:cb:ea:63:e8:5f:c7:d3:ed:c5:09:bb:f5:
                    25:66:35:6e:0d:06:cc:16:fb:87:7b:57:13:4d:db:
                    41:c0:fb:3a:56:a4:3a:e4:d8:1e:b9:60:f2:e3:7a:
                    96:b1:d8:d2:30:47:6f:4b:70:d1:57:c4:7b:a0:68:
                    28:2a:ea:07:51:81:62:08:05:83:ad:f4:38:d1:29:
                    5f:83:23:0a:b1:f9:5e:e5:46:09:73:24:67:34:89:
                    e3:f6:46:9b:71:4f:90:4e:7c:17:70:7c:4a:59:56:
                    59:0d:76:8f:af:c4:d8:a9:dd:05:28:e2:80:73:62:
                    28:f7:09:a5:74:71:c7:15:ee:d3:b5:c0:70:83:8d:
                    a1:b8:3f:18:50:0c:85:4b:58:70:88:e9:d2:13:3f:
                    7b:71:41:3d:2f:94:d2:67:1a:93:59:59:26:8c:38:
                    2c:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:BB:75:92:D3:AF:F1:4F:34:7B:FE:75:5A:0A:0C:2F:F8:F2:72:40
            X509v3 Authority Key Identifier:
                keyid:00:13:79:20:78:D1:1B:2F:94:03:0D:7C:3B:EE:F5:01:32:A2:6D:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ABN5IHjRGy-UAw18O-71ATKibUA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B9C74/44CC971E4E1F11EDB3E6CC2FC4F9AE02/ABN5IHjRGy-UAw18O-71ATKibUA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:45:88:22:70:9c:29:2c:43:79:32:8f:ec:77:cf:c6:a4:61:
         ac:62:9f:84:f1:d9:c3:7f:53:8f:bc:df:a2:8c:65:65:ec:76:
         4a:c8:ce:a6:46:c5:6d:3e:70:d3:8f:bd:69:54:d1:59:82:78:
         10:a9:c0:d8:38:c7:8c:24:83:b9:0b:5b:04:5f:49:c9:f3:44:
         58:c6:e8:6c:1f:89:cf:99:f7:67:85:e5:ab:91:03:c9:6f:c4:
         a7:c4:7b:5d:b4:af:25:45:28:e5:70:a0:4e:39:36:f9:c7:7d:
         96:5f:ad:7c:c7:2c:b9:37:60:00:92:6a:68:3d:9b:c3:d0:85:
         0c:42:94:9b:58:96:fd:f3:f6:c8:0c:77:6e:3c:78:3d:8d:33:
         4b:8b:2c:cc:38:68:d1:67:f7:d5:7c:85:f5:98:16:6b:c7:9e:
         22:e5:73:d4:6f:95:63:f0:79:bb:a7:b6:cf:a0:25:56:a6:b7:
         bb:46:25:b8:8b:fa:48:33:92:9f:59:b7:e9:2f:87:79:50:99:
         50:aa:31:26:8c:80:f4:8d:7a:e2:63:8f:d2:28:fb:7c:fc:a2:
         c2:ce:db:74:a4:0f:da:ed:2b:cd:89:98:de:f0:9d:d9:0e:8d:
         27:bd:59:47:2a:c8:d0:46:2b:00:d2:45:39:82:07:99:a2:fb:
         8d:e1:28:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 09:26:05 2026 by rpki-client