Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
File:                     9ES43awaKuycmNiYFhxzSCwu1Ig.mft (raw, json)
Hash identifier:          vKeZpjqEOAxxWN18lZx3/N8NpzNDdSSigoQ7DDDlaQk=
Subject key identifier:   71:5B:A4:B8:B2:69:BF:4D:0B:38:20:BA:C3:06:AA:06:39:E2:5D:98
Authority key identifier: F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88
Certificate issuer:       /CN=A91427E2/serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
Manifest number:          0124
Signing time:             Mon 11 May 2026 05:49:34 +0000
Manifest this update:     Mon 11 May 2026 05:49:34 +0000
Manifest next update:     Mon 18 May 2026 05:49:34 +0000
Files and hashes:         1: 9ES43awaKuycmNiYFhxzSCwu1Ig.crl (hash: LLuksnW9z3yUKWCatTz0FY4d+jwoqa9n6dmmG061uTc=)
                          2: 52EADE54935111EF98AA8C86C4F9AE02.roa (hash: VhIuGtFPo2Cv8cAGYxGtYUO/7hhyF5U43Aacg6GF4jM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl
                          rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 05:49:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91427E2, serialNumber=F444B8DDAC1A2AEC9C98D898161C73482C2ED488
        Validity
            Not Before: May 11 05:49:34 2026 GMT
            Not After : May 18 05:49:34 2026 GMT
        Subject: CN=6a016dee-1522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:36:44:f3:db:4d:5b:59:2b:56:ba:50:fa:5b:
                    0c:cd:ba:07:06:69:be:42:bc:37:18:c7:f0:5b:3c:
                    e5:d9:96:ea:9b:d2:3b:51:00:69:29:44:2d:50:5c:
                    80:35:90:3a:ed:f5:34:f3:9a:9c:15:47:bb:67:f9:
                    26:ea:a0:01:72:bf:b4:33:30:ef:c7:91:34:71:4d:
                    b9:b6:2d:fc:8c:56:32:b9:6f:8b:62:78:a9:88:9f:
                    1e:00:c5:fd:d3:08:3b:a7:31:16:ec:93:0f:73:96:
                    ed:5d:b8:85:3a:8c:56:ec:c9:a2:33:e5:88:91:7a:
                    6c:4e:93:0b:16:91:ce:bf:de:2c:cd:31:dc:8c:ea:
                    75:35:30:04:74:d2:35:f5:09:42:40:46:8a:6c:c0:
                    6c:c2:1d:3d:a2:e7:27:cc:31:61:bd:b3:68:fc:b5:
                    87:c2:9e:cf:eb:7c:5d:bb:8a:a4:44:b4:13:81:52:
                    71:7d:f7:9a:5e:fc:57:3f:f1:36:5c:c1:03:5e:38:
                    28:45:2c:51:06:07:5e:ee:8e:7f:04:f0:ff:60:b8:
                    08:dd:fe:b0:e5:db:6b:b9:cc:88:ee:1a:c4:28:64:
                    8c:a6:da:68:0f:74:75:ce:52:5f:2b:f2:ac:f6:73:
                    e9:1c:07:51:8a:b2:86:6a:8a:ca:d6:bc:f1:50:7c:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5B:A4:B8:B2:69:BF:4D:0B:38:20:BA:C3:06:AA:06:39:E2:5D:98
            X509v3 Authority Key Identifier:
                keyid:F4:44:B8:DD:AC:1A:2A:EC:9C:98:D8:98:16:1C:73:48:2C:2E:D4:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/9ES43awaKuycmNiYFhxzSCwu1Ig.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91427E2/7031A1EC935011EFBACE004CC4F9AE02/9ES43awaKuycmNiYFhxzSCwu1Ig.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:43:b1:89:fa:ae:72:8c:a7:97:ba:e3:f5:2f:6b:97:18:10:
         ec:89:87:91:68:dc:63:f9:3f:ac:a7:eb:62:2b:6a:3f:03:4f:
         b7:84:cb:12:4f:20:97:ed:ee:5e:70:16:53:73:3a:aa:d9:21:
         8c:06:86:e0:d0:7a:95:d7:19:c4:3f:67:53:c1:97:67:aa:a8:
         a5:33:83:2e:5e:0f:45:78:42:06:2b:8d:ca:e0:51:00:e9:d5:
         9d:14:ef:95:84:09:a0:fd:bf:1f:b7:0c:b9:76:44:3d:58:3a:
         5b:7a:63:2b:56:5f:e0:73:d3:b9:82:9d:1b:35:27:10:d4:21:
         0c:4d:67:5e:d6:61:bb:36:08:50:cc:13:02:c1:ae:c8:30:92:
         19:e8:f7:a0:be:aa:d3:97:64:75:4d:54:27:13:ae:f7:30:74:
         5e:df:ba:8c:e1:6e:fa:d9:f4:a3:71:e1:f1:9a:30:cd:39:55:
         ae:c3:cb:0d:9c:19:f4:9c:29:51:94:94:56:59:69:44:64:a5:
         75:50:24:7f:8c:1d:a1:50:fd:ed:bb:c2:66:1c:a9:af:f7:e1:
         98:56:86:4e:79:25:c2:ed:39:7d:95:54:c5:0a:20:1a:8e:18:
         7f:36:d3:73:ae:28:c0:3e:dd:a8:51:af:70:4e:40:06:92:e3:
         3a:a3:e5:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:38:10 2026 by rpki-client