Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
File:                     -S21ujUS5Gp82_tLNRS9b_hcjz0.mft (raw, json)
Hash identifier:          1coLnL88cs92Tvp4tkoHRxeJeEl5Z3WIUNz9uXid/0c=
Subject key identifier:   96:95:46:87:E9:50:38:6A:82:29:4B:94:4E:4B:6C:14:3A:9D:F2:26
Authority key identifier: F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D
Certificate issuer:       /CN=A9131A30/serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
Certificate serial:       01B0
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
Manifest number:          01A8
Signing time:             Mon 11 May 2026 04:12:34 +0000
Manifest this update:     Mon 11 May 2026 04:12:33 +0000
Manifest next update:     Mon 18 May 2026 04:12:33 +0000
Files and hashes:         1: -S21ujUS5Gp82_tLNRS9b_hcjz0.crl (hash: 1OkYfya49a5Ejh2YKR1sA0OvuGwOmEuJe489Si8DgPI=)
                          2: C3CCADD2CAF211EEBA58E81EC4F9AE02.roa (hash: hyP5hyWhFWPlreh+e6A6bCDJj0Abi1rdTGbknl1HOPw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl
                          rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:12:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 432 (0x1b0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9131A30, serialNumber=F92DB5BA3512E46A7CDBFB4B3514BD6FF85C8F3D
        Validity
            Not Before: May 11 04:12:33 2026 GMT
            Not After : May 18 04:12:33 2026 GMT
        Subject: CN=6a015731-cbec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:75:86:c1:2a:84:26:ff:c9:fa:7e:b6:61:23:
                    18:1e:69:a7:0c:85:92:b7:57:96:90:a1:52:f3:50:
                    96:b1:73:02:12:9e:ad:05:ad:89:a2:53:c5:14:36:
                    51:58:ea:0a:e3:c3:a4:8d:d3:31:ae:35:18:65:f5:
                    9d:75:ef:f7:21:4b:f3:72:a3:01:f6:73:05:d2:ac:
                    e6:b2:b0:ed:9e:ca:07:b6:06:b6:7e:eb:6d:c1:82:
                    26:d2:24:55:5f:48:cb:8c:bb:3a:fd:6e:51:9c:e8:
                    01:04:ee:b6:2d:e4:33:43:6e:3d:23:77:a5:de:16:
                    bf:10:d4:b2:15:18:ab:e0:2d:0e:79:40:be:8c:09:
                    35:49:3f:4d:9a:27:7c:25:43:ed:c7:8e:dc:d5:05:
                    a3:73:94:4f:a4:f1:ac:18:aa:22:2c:28:52:c4:62:
                    a8:ee:92:14:e3:a6:4f:bd:19:8f:d3:2f:9a:5e:98:
                    5d:9d:ee:48:6a:85:77:57:f2:94:f5:9f:b1:f8:e8:
                    90:2a:c0:36:64:40:01:b3:80:5f:cf:e7:79:12:16:
                    87:df:d1:94:cc:c0:f3:ee:0b:e2:fa:c8:40:c0:54:
                    61:e5:5e:4b:e5:1d:31:6c:c2:43:b2:51:a9:99:01:
                    6d:16:11:63:f1:0c:20:59:8b:c6:77:17:ea:64:1a:
                    39:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:95:46:87:E9:50:38:6A:82:29:4B:94:4E:4B:6C:14:3A:9D:F2:26
            X509v3 Authority Key Identifier:
                keyid:F9:2D:B5:BA:35:12:E4:6A:7C:DB:FB:4B:35:14:BD:6F:F8:5C:8F:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/-S21ujUS5Gp82_tLNRS9b_hcjz0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9131A30/4B7A186ACAF211EEACDB2E1EC4F9AE02/-S21ujUS5Gp82_tLNRS9b_hcjz0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         38:01:e4:85:01:37:e8:d0:94:14:58:42:da:0d:29:8d:7a:c9:
         3e:33:79:4e:2a:78:38:67:ee:20:d5:1b:61:fd:46:59:86:0a:
         b3:e4:8b:e0:9e:67:4e:c8:df:b3:c6:df:0f:d1:63:4c:ea:47:
         e2:12:93:d0:59:54:51:c5:49:be:64:f5:86:3b:b8:52:e0:2d:
         5d:b4:64:c9:c6:ee:b7:90:73:08:a9:5d:61:b8:43:e1:81:20:
         b1:72:64:90:c9:b0:0c:0f:fe:34:f1:38:13:64:ba:ab:27:2e:
         84:5c:b9:0a:1a:c3:30:fc:0f:ba:a9:83:23:1f:de:88:ff:57:
         51:ca:7a:b2:76:5a:76:ce:10:8e:d8:9e:5a:0d:a7:3b:5a:60:
         da:e8:5a:e1:3e:39:b6:d1:5d:d3:7d:5e:af:14:b7:7e:c2:9b:
         4b:73:5a:b4:95:00:f4:e6:9f:0d:20:f6:c6:91:16:47:12:8d:
         50:22:ac:75:a4:ec:15:54:d2:35:67:03:65:a1:ed:62:98:a8:
         c2:78:f8:df:e8:8b:fd:20:00:b5:f2:01:ed:7d:3a:28:16:c2:
         7d:d6:36:50:04:5c:03:fb:0d:aa:6b:7d:04:1a:b3:63:7f:8f:
         a5:fb:61:e8:6b:1e:ee:04:ae:bc:66:23:b0:5f:38:c6:c1:6d:
         dd:93:cb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:46:13 2026 by rpki-client