Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
File:                     4B6dNuokjcH2d8MUv2yRgpDmP_I.mft (raw, json)
Hash identifier:          O2hnitbXr3Vhsq3zBS1R+/t3n5HO838AyChMN4GH6hQ=
Subject key identifier:   8F:19:86:48:A8:C4:2B:56:6B:B7:6A:9E:90:67:BF:CC:5A:EA:8A:20
Authority key identifier: E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2
Certificate issuer:       /CN=A9143B87/serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
Certificate serial:       63
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
Manifest number:          61
Signing time:             Wed 13 May 2026 08:07:25 +0000
Manifest this update:     Wed 13 May 2026 08:07:25 +0000
Manifest next update:     Wed 20 May 2026 08:07:25 +0000
Files and hashes:         1: 4B6dNuokjcH2d8MUv2yRgpDmP_I.crl (hash: S+MtWRSrqcfYicgTANVIJijphmzO5lRJGN2Lp8aMprk=)
                          2: 2332E938BD3811F0B9AC9752C4F9AE02.roa (hash: j3RcIOxQafJaiJkb6d3Tg7sD8bBgOOkAr8+5HaXc9rU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl
                          rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 08:07:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9143B87, serialNumber=E01E9D36EA248DC1F677C314BF6C918290E63FF2
        Validity
            Not Before: May 13 08:07:25 2026 GMT
            Not After : May 20 08:07:25 2026 GMT
        Subject: CN=6a04313d-4c84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:fc:f8:f7:d3:ac:9a:4d:5b:89:60:16:18:ea:
                    f1:4a:b8:c1:2d:d3:25:9a:20:a9:7c:7e:02:f0:54:
                    4c:1d:41:15:1e:6d:62:5f:c1:04:35:09:de:87:65:
                    b2:1a:9d:b1:bf:8a:2e:64:19:96:c1:fb:e7:2f:a3:
                    77:93:b1:9b:26:b3:c7:4e:68:18:26:ba:8d:13:a2:
                    7c:e9:9a:75:19:b6:68:3c:01:2d:40:52:45:20:75:
                    4c:24:0c:df:cc:84:46:49:bc:92:3a:2e:68:f7:f0:
                    5d:e0:53:de:64:40:63:7e:d0:90:e4:2f:a9:ff:0f:
                    6c:af:7b:6d:06:ce:8e:5a:6b:39:5c:df:fd:f8:5c:
                    48:a6:4e:9b:9d:ee:14:6f:98:07:48:96:92:24:9f:
                    71:01:d8:f9:9d:02:19:a8:c3:1c:d8:27:a6:8b:5e:
                    f7:87:d5:a9:fd:a9:e8:7d:83:05:a1:47:22:e4:d0:
                    0e:d5:2e:fb:c9:72:2d:74:56:75:67:97:8a:f7:f4:
                    c6:a8:88:1e:ab:0f:d0:52:6b:8e:e5:1c:24:14:43:
                    73:e4:d0:88:95:18:c5:54:ec:b8:aa:6c:75:70:52:
                    d4:83:1e:29:4c:bf:0e:a7:1f:23:95:35:d1:9b:82:
                    da:25:ae:6b:05:18:82:df:80:ce:15:84:fb:90:cc:
                    f5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:19:86:48:A8:C4:2B:56:6B:B7:6A:9E:90:67:BF:CC:5A:EA:8A:20
            X509v3 Authority Key Identifier:
                keyid:E0:1E:9D:36:EA:24:8D:C1:F6:77:C3:14:BF:6C:91:82:90:E6:3F:F2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/4B6dNuokjcH2d8MUv2yRgpDmP_I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9143B87/2E26B482BCE311F098717048C4F9AE02/4B6dNuokjcH2d8MUv2yRgpDmP_I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         63:eb:56:d6:e2:da:d8:ec:6a:e6:77:e9:57:ad:ce:2c:79:96:
         bb:3c:5b:e3:71:67:83:19:73:8c:c9:2f:8c:e0:10:51:46:83:
         39:00:3d:bb:75:a1:c9:30:5a:7e:62:44:25:54:bb:b7:e0:c2:
         28:f6:82:19:fc:21:5d:f5:b0:3e:19:40:fe:28:e0:b0:24:25:
         04:94:e7:b8:23:5a:e3:55:e9:21:0b:0a:5a:d3:fe:74:a6:7c:
         d4:16:54:13:35:93:5f:61:7f:1c:3c:b2:af:af:66:e5:55:07:
         81:ba:db:fd:39:74:6e:a2:d0:8a:e2:b7:a7:96:b7:ba:52:e8:
         5f:41:bf:5c:f8:e9:84:d7:ca:e7:42:10:30:ee:a5:9e:4e:b1:
         ba:d6:ed:cc:3a:30:a8:90:0a:69:db:f8:0d:2d:d0:d8:bd:b7:
         0f:01:45:a0:18:e7:62:11:79:53:75:66:d0:af:4a:f9:33:56:
         93:50:b4:f4:81:3b:a2:65:a7:85:de:ff:7b:08:27:1d:fc:2c:
         99:af:99:32:0a:2d:06:55:8b:3d:bf:9f:c7:0a:f0:0d:10:c6:
         3e:6a:d7:68:b2:d2:ef:1a:c7:f1:96:a4:ec:d9:89:c5:d2:66:
         2b:77:5b:f1:c6:88:2c:01:1d:76:39:52:db:62:5e:fa:86:40:
         73:81:bd:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:20:22 2026 by rpki-client