Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
File:                     lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft (raw, json)
Hash identifier:          hz44S4O3Kq4lPUVhoLHkUEHRTpekTWZyYxJo6WVCsPY=
Subject key identifier:   F0:41:03:2D:96:B7:B3:84:4B:1A:6A:83:0E:54:88:A1:39:29:C6:7F
Authority key identifier: 95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0
Certificate issuer:       /CN=A9118749/serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
Certificate serial:       FF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
Manifest number:          F8
Signing time:             Mon 11 May 2026 06:25:54 +0000
Manifest this update:     Mon 11 May 2026 06:25:53 +0000
Manifest next update:     Mon 18 May 2026 06:25:53 +0000
Files and hashes:         1: lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl (hash: YUlKUk+iiOxfT9eLVdrONvXoW0tTH/hRJL4fgevq0JQ=)
                          2: 0D9D8C8CDC2311EFAEB2F679C4F9AE02.roa (hash: zpf55g2EZGmJ8domoDiH0XWR0tTe31ZdyOLgVVw44Oo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl
                          rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 06:25:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 255 (0xff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118749, serialNumber=95459D5D1EB04095FD163F0D84D1F3A46C15E4F0
        Validity
            Not Before: May 11 06:25:53 2026 GMT
            Not After : May 18 06:25:53 2026 GMT
        Subject: CN=6a017671-a459
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f6:e3:4a:af:cc:c1:4c:a2:58:a0:27:da:a9:
                    d6:a1:b4:f2:88:18:02:73:db:d2:89:86:1c:cb:e7:
                    29:c7:c6:40:a4:c3:3c:86:01:48:1c:7c:df:59:7e:
                    a3:76:b6:ec:14:c7:84:c0:b8:ce:be:98:ac:7c:d2:
                    a7:94:36:7c:73:3d:6b:6a:de:98:14:e7:15:e3:b3:
                    1f:5c:51:34:84:7d:a6:ec:a6:5d:7e:cd:18:5d:be:
                    e2:17:73:46:c4:e4:e1:68:93:d6:63:72:c0:66:d8:
                    88:31:02:17:91:dd:73:7f:0e:40:86:45:5b:e9:1b:
                    0e:ec:39:c8:4a:2b:76:a2:38:a1:e4:dc:9f:f9:36:
                    d8:f3:10:9a:75:44:20:80:62:72:b6:9e:2d:04:80:
                    8b:3a:51:f0:8c:bd:59:58:6a:9e:7a:f5:8a:1b:15:
                    f0:fd:2b:9d:d8:57:c9:86:0c:4c:5b:f4:e0:15:1a:
                    e1:51:46:45:bb:2c:8e:af:7c:fa:b9:60:9a:e1:91:
                    8f:a6:c7:20:e0:93:fb:06:8f:05:fa:a0:ba:c1:36:
                    f7:25:77:e8:b3:97:4a:fc:b6:c9:1f:41:d1:90:f4:
                    a7:a4:8d:56:16:81:be:66:75:55:2d:47:4d:70:10:
                    ec:69:f0:7c:bc:36:69:d6:bd:80:75:2d:62:66:05:
                    d9:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:41:03:2D:96:B7:B3:84:4B:1A:6A:83:0E:54:88:A1:39:29:C6:7F
            X509v3 Authority Key Identifier:
                keyid:95:45:9D:5D:1E:B0:40:95:FD:16:3F:0D:84:D1:F3:A4:6C:15:E4:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118749/BA57DBA6DC2011EF91B5401EC4F9AE02/lUWdXR6wQJX9Fj8NhNHzpGwV5PA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         96:16:37:b6:97:60:2a:42:8a:b3:e3:0c:1e:86:11:de:b4:93:
         ad:5e:56:5f:d1:d4:20:5e:05:3a:e4:c1:9a:c1:1d:1b:d3:c1:
         a8:e9:4c:30:44:1b:00:dd:7f:46:f4:99:17:bd:e6:0c:fc:1a:
         81:47:6a:34:99:79:e3:1a:73:02:d1:59:41:94:c3:ec:1f:7a:
         c8:8c:ca:70:ac:2f:04:c1:4e:8a:44:b4:c9:71:2c:c6:18:4d:
         4c:82:82:2d:c8:d4:a8:bf:b5:45:7b:f7:d5:70:31:9e:89:d2:
         48:95:ed:5f:7b:b8:f0:09:bf:f4:f9:e7:11:71:52:1e:6d:4f:
         4f:f4:f4:64:71:78:92:b2:c6:b2:88:25:37:d6:a0:a1:5e:58:
         cb:98:33:3e:db:a5:20:83:79:96:a3:8f:2a:bd:1f:c7:35:84:
         78:2c:e6:16:75:b7:fe:34:78:5b:88:2d:2c:10:e8:bf:7f:5f:
         29:04:91:b2:7b:53:9b:b7:4b:16:cf:61:a5:3d:77:b1:28:4e:
         49:26:c3:a4:5c:39:5c:3b:a9:58:5f:28:f6:cf:a7:da:b2:c2:
         4a:82:23:b3:cf:16:14:70:05:9e:03:c8:df:18:6e:72:6c:c0:
         e4:c9:8a:1b:8e:1e:9c:ee:83:ec:07:c6:b0:c8:76:30:9c:63:
         12:8e:af:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:05:20 2026 by rpki-client