Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
File:                     SLmUWYf2drRs7T3hKEmoo49AaLU.mft (raw, json)
Hash identifier:          fP7fi+h6IEykGNIc/uYYJ/a5eMDAxPCI9l0JpAzDhhA=
Subject key identifier:   FB:2F:96:EC:C6:C9:CE:19:E7:EB:ED:D9:C0:75:81:44:70:C8:49:9D
Authority key identifier: 48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5
Certificate issuer:       /CN=A91E1BAB/serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
Certificate serial:       089D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
Manifest number:          0883
Signing time:             Thu 16 Apr 2026 20:36:00 +0000
Manifest this update:     Thu 16 Apr 2026 20:35:59 +0000
Manifest next update:     Thu 23 Apr 2026 20:35:59 +0000
Files and hashes:         1: SLmUWYf2drRs7T3hKEmoo49AaLU.crl (hash: tHdKQrIbHT7g2KoKSwKwQoOAdIbznT25ZxYOeX9kaLo=)
                          2: 37A46070F6F211EA922F482BC4F9AE02.roa (hash: Vbr74q9xve9jPdFxxPBLIMyXEmdu/+7o68cL8ABmJn8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl
                          rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 23 Apr 2026 20:35:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2205 (0x89d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E1BAB, serialNumber=48B9945987F676B46CED3DE12849A8A38F4068B5
        Validity
            Not Before: Apr 16 20:35:59 2026 GMT
            Not After : Apr 23 20:35:59 2026 GMT
        Subject: CN=69e14830-868d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:4e:f2:09:98:a3:12:eb:40:ea:1c:b5:bb:8f:
                    e8:a3:06:eb:a8:d0:da:a8:83:e9:f5:5d:5a:a2:a4:
                    45:f1:e8:a2:b5:5f:4d:fa:1e:81:80:8c:e3:3c:8d:
                    af:03:52:22:ac:16:89:71:c6:1b:2e:8b:f4:3c:06:
                    19:97:b9:3a:03:05:50:2b:a1:e0:5d:9a:cd:54:3e:
                    b0:3a:f4:ce:f8:00:df:b5:dc:73:0d:b0:ce:41:f8:
                    dc:9d:05:7d:99:07:11:06:26:f5:de:05:0f:07:f7:
                    4d:65:d4:00:a1:70:60:a6:68:53:85:8f:5f:3f:2e:
                    5e:02:2b:53:28:cb:65:2b:7d:2f:87:46:d6:32:63:
                    ef:96:a0:50:ca:bc:f0:be:1d:81:ac:fe:a8:df:47:
                    e3:5f:cd:d5:76:c7:de:3a:da:67:0c:08:48:85:6f:
                    a6:03:99:bf:00:bb:11:7a:38:d9:46:26:94:3e:c1:
                    d2:cb:f3:d5:22:25:8f:f3:30:12:93:14:6c:a5:fc:
                    3c:5a:c1:33:70:37:0c:19:b8:48:ab:ed:30:3e:15:
                    8a:3c:c2:0c:e9:96:61:6f:6a:15:66:85:6f:73:8f:
                    24:3c:6e:63:4b:ae:11:aa:47:c0:54:6d:a8:c5:4c:
                    0a:78:59:2b:5e:c5:c6:17:6f:37:e6:3b:9e:21:90:
                    bf:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:2F:96:EC:C6:C9:CE:19:E7:EB:ED:D9:C0:75:81:44:70:C8:49:9D
            X509v3 Authority Key Identifier:
                keyid:48:B9:94:59:87:F6:76:B4:6C:ED:3D:E1:28:49:A8:A3:8F:40:68:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/SLmUWYf2drRs7T3hKEmoo49AaLU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E1BAB/0B97601AF66411EA91CD2A53C4F9AE02/SLmUWYf2drRs7T3hKEmoo49AaLU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b8:d4:a6:c5:e1:40:fd:a2:82:6a:6f:62:6d:c2:f4:d1:b4:dd:
         17:f0:b7:27:42:4b:13:9c:6e:7f:23:bd:54:f0:d6:42:a9:31:
         33:5e:d2:15:31:ad:f9:9d:7f:52:40:93:be:6b:1b:8c:90:6e:
         3e:36:e3:41:47:92:67:cf:62:c9:5a:00:e7:73:fc:2c:7b:ca:
         4e:21:d2:a2:f5:c6:99:0a:38:fa:02:39:58:12:83:1b:55:84:
         a7:ea:79:b6:8c:e8:ec:20:3b:1a:f6:b3:ca:6d:94:8a:fe:e5:
         33:f2:36:33:f5:0e:df:ec:41:f2:68:79:10:be:4d:ad:59:cb:
         b1:13:b2:d4:33:cc:8d:8e:63:4e:cc:74:e9:f7:ad:83:15:31:
         b6:72:67:ce:39:84:cb:64:59:6c:e7:dc:10:33:4a:3f:ed:09:
         89:f6:32:13:af:d4:9b:df:df:68:ca:5c:9e:36:c1:4e:9e:05:
         78:68:ee:2c:82:a9:cf:64:a8:57:2e:5e:8d:36:b1:6d:44:06:
         9e:65:31:73:b7:bc:b1:fa:d6:10:41:38:06:1c:ee:74:96:4a:
         70:68:82:8f:c7:b4:db:71:28:76:4d:06:86:77:a8:b0:a8:ed:
         e0:8d:e5:4e:76:ca:f2:01:c1:cd:0b:5f:30:b0:64:cb:b5:be:
         8d:f6:3a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:14:00 2026 by rpki-client