Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
File:                     DrxJg4xa-JUImQoidYOOwMFWsLc.mft (raw, json)
Hash identifier:          jEcNL6dZkEOpO5C/JpAbaJi0bFChZerbPB5gTLyVkkM=
Subject key identifier:   25:ED:A7:AA:89:92:17:0C:25:AA:EA:91:D2:55:1D:A7:3A:60:04:02
Authority key identifier: 0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7
Certificate issuer:       /CN=A9139C18/serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
Certificate serial:       15
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
Manifest number:          14
Signing time:             Mon 11 May 2026 09:13:34 +0000
Manifest this update:     Mon 11 May 2026 09:13:34 +0000
Manifest next update:     Mon 18 May 2026 09:13:34 +0000
Files and hashes:         1: DrxJg4xa-JUImQoidYOOwMFWsLc.crl (hash: IPP7U2irGjPnm59JDwlnWe7RYn3uzISEjRYahmqtiFk=)
                          2: 87952B92341211F181A039BCC7833773.roa (hash: jihd2+gV5EBFkgpYBoUkD4cr1iajWa+KP7BF8vtY6VA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl
                          rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 09:13:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9139C18, serialNumber=0EBC49838C5AF89508990A2275838EC0C156B0B7
        Validity
            Not Before: May 11 09:13:34 2026 GMT
            Not After : May 18 09:13:34 2026 GMT
        Subject: CN=6a019dbe-aa96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:8f:68:bf:1b:29:c1:47:8f:da:fd:d0:8a:99:
                    d7:23:ad:e4:d6:cb:46:d2:ec:95:4b:72:8b:ae:67:
                    94:97:f6:df:9a:f8:1e:2c:19:13:32:97:ab:16:af:
                    9f:14:25:d8:b2:8b:6d:0f:66:0b:c1:5b:2d:3f:7e:
                    d5:cf:df:58:37:61:b8:bd:ef:81:96:ff:13:58:9b:
                    dd:c8:e7:38:3d:e0:41:78:13:83:a2:68:ba:7a:b8:
                    51:b7:73:80:2a:bc:c2:76:32:fe:89:b5:00:84:0f:
                    b7:a1:00:65:76:74:3d:dd:a2:e8:88:85:0b:e0:47:
                    7d:74:ed:f5:0f:ce:37:e5:9a:c5:40:7b:c2:1b:1b:
                    c8:1f:86:ae:d3:59:d0:ec:54:77:f4:8d:24:95:56:
                    93:d7:83:81:bd:d0:b4:ef:c1:3f:17:fb:5e:e6:92:
                    5c:8f:5b:0f:bd:b8:c2:c8:36:0f:a3:97:dc:6a:36:
                    26:46:04:a4:0c:21:1c:8a:87:21:07:67:a1:b0:72:
                    3b:a8:30:84:1c:38:5d:b7:66:f5:2c:ef:fc:85:3c:
                    94:2c:f0:42:33:49:e3:fb:e1:2d:53:b9:f5:4c:76:
                    23:21:d4:a2:2a:e2:ed:cb:9a:86:ff:3d:7a:c6:48:
                    8e:e2:0e:ff:cb:14:10:8a:10:19:95:85:f2:a0:29:
                    75:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:ED:A7:AA:89:92:17:0C:25:AA:EA:91:D2:55:1D:A7:3A:60:04:02
            X509v3 Authority Key Identifier:
                keyid:0E:BC:49:83:8C:5A:F8:95:08:99:0A:22:75:83:8E:C0:C1:56:B0:B7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DrxJg4xa-JUImQoidYOOwMFWsLc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9139C18/1599EC24335111F1872729B5C6833773/DrxJg4xa-JUImQoidYOOwMFWsLc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         d0:4d:91:9f:e4:84:1a:e3:4d:c0:6f:93:b5:b1:58:00:c0:97:
         71:76:26:c9:68:ea:0d:6c:48:cd:9e:d1:aa:db:48:f6:c4:8c:
         8d:d5:d1:ee:ba:e5:7e:97:c2:dd:28:93:f5:a0:c8:c0:ff:f7:
         d9:bc:3e:de:71:c1:72:2e:08:3e:b0:63:ab:03:54:34:19:2e:
         66:86:56:19:37:7c:7b:93:4e:b2:c8:38:ed:66:ad:b4:d3:39:
         c1:c9:d4:50:2e:ab:af:36:76:e3:fc:b1:b5:29:ae:58:39:0e:
         9a:d8:23:03:99:8c:b6:fd:ee:ed:d4:91:b8:e7:b7:77:18:d0:
         e9:e0:5a:b8:d7:5b:db:2c:f3:fa:34:71:71:65:40:7f:4f:01:
         fb:d5:9d:7e:89:cd:e0:db:25:3e:81:ac:16:05:55:58:58:54:
         25:41:4b:a6:ea:c4:81:8a:62:63:35:f4:1c:10:c5:88:91:b7:
         7b:94:11:8d:2e:7a:96:ea:ce:35:2c:e1:77:64:07:75:48:b4:
         32:03:5c:a6:de:46:39:32:14:dc:33:b1:a3:5d:fd:dc:91:1a:
         c0:4c:59:f9:0e:6a:49:a6:13:25:78:f7:f9:0b:e3:6b:30:4c:
         b9:57:77:88:2b:77:fc:aa:3a:be:88:99:18:ed:05:61:d9:82:
         fd:90:4c:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:07:28 2026 by rpki-client