Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
File:                     3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft (raw, json)
Hash identifier:          0oN/PpKcDF1VZmoM0vYvBmGRn80fShzHV99mEWe5Srk=
Subject key identifier:   7A:A9:74:90:29:4A:EC:04:72:8D:65:C9:19:EE:04:21:4A:3D:2C:E3
Authority key identifier: DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55
Certificate issuer:       /CN=A9133A27/serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
Certificate serial:       0192
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
Manifest number:          0189
Signing time:             Wed 13 May 2026 04:32:25 +0000
Manifest this update:     Wed 13 May 2026 04:32:25 +0000
Manifest next update:     Wed 20 May 2026 04:32:25 +0000
Files and hashes:         1: 3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl (hash: MYQ1jhZOOk9yKuAUCoSklwlQ729rGDhrWqJUm2FrzsE=)
                          2: 90195128FAC411EEB1CDF882C4F9AE02.roa (hash: 6f62DrCIqXQzH0Me6UWUB3Obo/TfW+7iKkRiIr7raYQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl
                          rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:32:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9133A27, serialNumber=DCAD644705CF18C27D7FC2017385D23EE7203955
        Validity
            Not Before: May 13 04:32:25 2026 GMT
            Not After : May 20 04:32:25 2026 GMT
        Subject: CN=6a03fed9-904a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a6:0c:8c:5f:e8:71:db:9d:71:77:b7:33:9a:
                    a2:e2:72:3f:ed:21:41:46:03:88:f0:93:60:3a:e5:
                    24:90:ce:66:1f:57:9f:a2:b0:b7:54:3d:b2:55:31:
                    02:38:8e:ff:ff:fa:a6:ab:b5:8d:ef:62:ff:8d:f3:
                    17:19:0d:c9:07:a7:32:5b:cf:7e:75:40:7b:c8:5a:
                    9b:b1:4c:60:aa:b2:a4:d5:75:97:5c:0e:0a:c3:3a:
                    38:0d:99:a1:84:4b:5b:bc:17:c8:6c:3c:eb:93:34:
                    47:a1:d9:5c:cf:a5:15:6a:4d:be:7e:82:66:2c:a3:
                    e0:12:d3:ee:9c:34:8a:e9:3b:b9:b3:6c:05:68:9b:
                    fc:e2:70:35:06:90:8e:81:8e:8b:28:fd:67:1d:50:
                    0f:59:95:86:b9:a0:89:c6:fc:fe:0c:51:1b:b5:0e:
                    3e:be:57:cd:d7:e2:c4:f8:5b:99:9b:0e:32:e4:95:
                    44:53:5e:a9:9f:9f:6d:2a:cb:fa:1c:9c:e3:e0:4d:
                    e1:ba:c0:38:33:9f:e7:70:bf:53:f1:15:28:6c:8d:
                    1e:53:bb:21:f5:0b:8f:14:b0:76:32:74:24:16:e4:
                    83:25:49:e6:c6:33:ea:a1:da:19:e5:91:e2:10:44:
                    6a:47:33:65:92:55:8d:89:ba:b7:e2:a7:83:92:7c:
                    53:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:A9:74:90:29:4A:EC:04:72:8D:65:C9:19:EE:04:21:4A:3D:2C:E3
            X509v3 Authority Key Identifier:
                keyid:DC:AD:64:47:05:CF:18:C2:7D:7F:C2:01:73:85:D2:3E:E7:20:39:55

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/3K1kRwXPGMJ9f8IBc4XSPucgOVU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9133A27/E26646E4F70311EEA31F5D7AC4F9AE02/3K1kRwXPGMJ9f8IBc4XSPucgOVU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:47:ac:51:08:0b:2a:bf:5c:32:b0:ca:09:cd:d3:ae:70:fe:
         e2:ca:a5:d5:ca:8f:0e:02:0b:a6:80:4c:dd:b3:68:8f:31:bc:
         62:60:d1:a5:90:ad:f6:3f:0b:44:99:d9:1b:01:86:42:9f:5f:
         69:ee:e3:76:d9:22:c7:bf:15:75:04:82:aa:b4:93:9e:e3:9d:
         48:0c:65:d7:0f:bd:ad:7c:eb:3a:79:5e:11:4f:6f:51:4b:02:
         49:b0:ec:31:d8:0e:08:25:57:18:14:80:c4:d8:eb:f1:31:34:
         56:95:24:ae:67:99:4e:6a:70:50:d7:61:e0:1d:11:ba:37:0b:
         82:bb:e5:31:db:e6:de:39:b1:d1:f4:29:3f:24:9c:f1:de:75:
         b4:44:60:a1:39:9c:b7:0d:d9:96:44:55:05:c6:74:e7:0e:24:
         1c:16:a4:ba:61:bd:a3:63:1d:0a:f1:45:30:f5:23:74:e9:b2:
         a2:53:7f:bb:6a:b6:df:61:56:d0:89:3a:92:08:8f:1c:54:d1:
         5b:9d:f3:0c:db:f2:df:a2:1b:2e:d8:cf:59:ae:cd:eb:bc:41:
         10:87:58:a9:de:4b:b7:7b:fc:9d:e9:40:b6:66:19:dd:b7:a0:
         68:7a:0e:df:8a:c5:9d:5f:c7:ce:0e:59:59:ba:7b:82:52:0a:
         6c:53:35:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:29 2026 by rpki-client