Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
File:                     5Ihhomij6U17foS6dO6vR3KJZwk.mft (raw, json)
Hash identifier:          UqoqSiGAXlPyPShxwRTvEer1vtREKMAR669pCSvjpOI=
Subject key identifier:   5B:33:ED:91:DB:CE:6C:7E:7F:1E:97:F3:15:02:C9:F2:D9:45:F2:7B
Authority key identifier: E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09
Certificate issuer:       /CN=A91D3060/serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
Certificate serial:       6A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
Manifest number:          68
Signing time:             Fri 17 Apr 2026 07:37:07 +0000
Manifest this update:     Fri 17 Apr 2026 07:37:07 +0000
Manifest next update:     Fri 24 Apr 2026 07:37:07 +0000
Files and hashes:         1: 5Ihhomij6U17foS6dO6vR3KJZwk.crl (hash: ApgRLxIYo4bcNXOIYJoB6gN1wnAJtN6niiCkcNlPk0I=)
                          2: 0FCEAD129CF111F0A76B5F3AC4F9AE02.roa (hash: GsR/Ts01CmpABMN4kDyTQIg4MbBkjEEMhLEdWWuFsZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl
                          rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 07:37:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D3060, serialNumber=E48861A268A3E94D7B7E84BA74EEAF4772896709
        Validity
            Not Before: Apr 17 07:37:07 2026 GMT
            Not After : Apr 24 07:37:07 2026 GMT
        Subject: CN=69e1e323-5c8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:04:64:fd:31:1a:3c:a6:84:30:47:96:4f:19:
                    8e:86:79:1f:fe:70:ff:0e:30:24:dc:b4:f1:3b:11:
                    7d:ae:0f:76:3c:3f:3e:22:e6:70:2a:42:86:33:56:
                    9b:a4:8f:0b:52:2e:92:84:7f:df:ad:4e:8d:75:99:
                    cb:4b:99:b0:28:b9:5c:b1:5b:21:72:72:20:1e:d9:
                    e9:40:c4:84:65:ff:cb:75:ee:4a:4a:e4:00:9d:5b:
                    ae:35:10:57:4a:0a:f8:bd:ba:2a:3c:ac:e4:8f:d6:
                    cc:dc:80:08:19:cc:d8:44:bd:1c:8d:95:c5:51:13:
                    98:94:d9:ee:ab:b6:5d:a7:8a:c8:10:2b:ba:e8:57:
                    46:2c:84:9b:42:05:e9:68:54:9a:99:5e:c4:58:55:
                    73:da:49:b2:33:47:d1:47:0d:e9:d0:8d:47:0f:df:
                    4e:df:5e:30:59:8e:76:a5:34:a6:cf:6c:17:37:6f:
                    f6:66:ff:2a:a9:4f:f9:65:43:60:65:27:04:30:15:
                    84:c8:49:67:57:86:cf:3a:89:42:29:ec:33:4a:10:
                    19:2e:41:19:df:49:5d:97:b4:ee:78:05:ad:eb:7b:
                    bb:6a:75:ba:bb:20:7e:6b:a5:97:1d:22:11:52:20:
                    46:2f:36:86:a8:cc:97:7e:87:25:16:fc:70:ae:f9:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:33:ED:91:DB:CE:6C:7E:7F:1E:97:F3:15:02:C9:F2:D9:45:F2:7B
            X509v3 Authority Key Identifier:
                keyid:E4:88:61:A2:68:A3:E9:4D:7B:7E:84:BA:74:EE:AF:47:72:89:67:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/5Ihhomij6U17foS6dO6vR3KJZwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D3060/EF941A109CEF11F096497C37C4F9AE02/5Ihhomij6U17foS6dO6vR3KJZwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:0c:29:61:4d:76:47:24:d0:d2:04:14:f6:33:ff:e1:d0:94:
         76:a8:3d:65:59:b1:f3:3e:b7:9f:81:9c:56:9b:62:e1:03:09:
         d5:70:4e:9b:0b:cd:0a:cb:9d:d9:db:02:db:2d:d5:93:86:4f:
         a5:7a:96:d3:1f:c6:39:54:cc:a3:7a:13:ef:2f:e7:d7:c2:da:
         6f:f2:ef:b9:56:f9:57:3b:07:04:5c:32:f6:d8:da:82:27:0c:
         2e:e1:c8:48:bb:6a:98:b9:40:ef:f3:a2:b5:d4:f0:f1:64:82:
         07:c6:c5:bd:0e:87:42:81:8d:ea:76:c5:d1:18:a0:3d:b6:5a:
         30:f5:8b:72:ed:d8:c3:a1:e3:e7:4b:eb:7c:e0:6e:47:4e:92:
         d8:8d:39:74:a3:ad:bc:be:ce:94:eb:e9:5e:53:e7:80:15:8e:
         85:84:76:2a:21:93:7d:35:ff:0e:5e:f4:33:b9:74:89:ed:b3:
         eb:d3:74:8a:cc:6a:d4:cf:0e:ea:f9:58:54:a9:b5:1c:28:e2:
         2b:02:fd:79:8c:13:eb:6f:5d:4f:fb:7d:f2:0d:fa:8c:e0:50:
         e7:49:27:fe:51:82:c1:4f:c0:a1:f4:7a:a8:b7:b6:81:9b:97:
         60:bd:9f:17:59:31:4a:2f:86:52:c4:4a:39:0d:ae:27:09:75:
         b4:4b:42:1c
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBajANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTFE
MzA2MDExMC8GA1UEBRMoRTQ4ODYxQTI2OEEzRTk0RDdCN0U4NEJBNzRFRUFGNDc3
Mjg5NjcwOTAeFw0yNjA0MTcwNzM3MDdaFw0yNjA0MjQwNzM3MDdaMBgxFjAUBgNV
BAMTDTY5ZTFlMzIzLTVjOGYwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQDUBGT9MRo8poQwR5ZPGY6GeR/+cP8OMCTctPE7EX2uD3Y8Pz4i5nAqQoYzVpuk
jwtSLpKEf9+tTo11mctLmbAouVyxWyFyciAe2elAxIRl/8t17kpK5ACdW641EFdK
Cvi9uio8rOSP1szcgAgZzNhEvRyNlcVRE5iU2e6rtl2nisgQK7roV0YshJtCBelo
VJqZXsRYVXPaSbIzR9FHDenQjUcP307fXjBZjnalNKbPbBc3b/Zm/yqpT/llQ2Bl
JwQwFYTISWdXhs86iUIp7DNKEBkuQRnfSV2XtO54Ba3re7tqdbq7IH5rpZcdIhFS
IEYvNoaozJd+hyUW/HCu+VKXAgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUWzPtkdvO
bH5/HpfzFQLJ8tlF8nswHwYDVR0jBBgwFoAU5Ihhomij6U17foS6dO6vR3KJZwkw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQzMDYwL0VGOTQxQTEwOUNF
RjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUxN2ZvUzZkTzZ2UjNLSlp3
ay5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvNUloaG9taWo2VTE3Zm9TNmRPNnZSM0tKWndrLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MUQz
MDYwL0VGOTQxQTEwOUNFRjExRjA5NjQ5N0MzN0M0RjlBRTAyLzVJaGhvbWlqNlUx
N2ZvUzZkTzZ2UjNLSlp3ay5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQCrDClhTXZHJNDSBBT2M//h0JR2qD1lWbHzPrefgZxWm2LhAwnVcE6bC80Ky53Z
2wLbLdWThk+lepbTH8Y5VMyjehPvL+fXwtpv8u+5VvlXOwcEXDL22NqCJwwu4chI
u2qYuUDv86K11PDxZIIHxsW9DodCgY3qdsXRGKA9tlow9Yty7djDoePnS+t84G5H
TpLYjTl0o628vs6U6+leU+eAFY6FhHYqIZN9Nf8OXvQzuXSJ7bPr03SKzGrUzw7q
+VhUqbUcKOIrAv15jBPrb11P+33yDfqM4FDnSSf+UYLBT8Ch9Hqot7aBm5dgvZ8X
WTFKL4ZSxEo5Da4nCXW0S0Ic
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:06:03 2026 by rpki-client