Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
File:                     U-fOlDUz-NPAVknylGgqJvgU8V8.mft (raw, json)
Hash identifier:          JoKjtQH3KnNkZC13oxNniiE9FHjsffKVn757Mz6aiX0=
Subject key identifier:   58:F2:0C:AB:A9:0E:81:45:3F:81:1D:01:9B:3A:96:33:2D:86:EB:3D
Authority key identifier: 53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F
Certificate issuer:       /CN=A9144391/serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
Certificate serial:       0146
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
Manifest number:          013D
Signing time:             Wed 13 May 2026 05:30:33 +0000
Manifest this update:     Wed 13 May 2026 05:30:32 +0000
Manifest next update:     Wed 20 May 2026 05:30:32 +0000
Files and hashes:         1: U-fOlDUz-NPAVknylGgqJvgU8V8.crl (hash: fpkwodTj0Ae8VlqAg9Mc8TxkefO1pElOvCEB/9y+Vls=)
                          2: BC213E3C70AF11EF9C9B2C0EC4F9AE02.roa (hash: i6ZlnAPU3uWxh5AMrqKrLRC7uPLe5azEThc7wGn+rD4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl
                          rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 05:30:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 326 (0x146)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144391, serialNumber=53E7CE943533F8D3C05649F294682A26F814F15F
        Validity
            Not Before: May 13 05:30:32 2026 GMT
            Not After : May 20 05:30:32 2026 GMT
        Subject: CN=6a040c79-2d65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:11:7b:f9:b7:c5:77:d4:d5:3e:e8:01:da:69:
                    3f:4f:d6:a0:fc:e2:3c:03:01:03:a9:66:6e:d6:04:
                    1b:ee:f7:bb:7a:8d:c0:3a:72:c4:f0:fc:23:6e:28:
                    b0:bb:f8:d9:30:40:a1:54:35:e1:f9:fb:68:6e:b7:
                    18:3c:5a:50:3d:60:7a:f2:ef:b0:fd:5d:48:a7:b7:
                    50:26:53:e6:98:d4:74:a3:a7:6a:e3:ec:76:62:f2:
                    ae:13:b3:91:c0:6a:fd:7a:6b:e2:46:02:74:7d:b5:
                    f3:25:ba:bd:82:63:13:10:92:d1:ee:c2:1d:8d:33:
                    23:52:f6:5b:68:99:fe:ea:5b:9a:c3:7e:1a:60:d5:
                    09:13:26:d8:2f:fe:b1:6a:70:85:2a:d3:0f:ce:c2:
                    a1:ae:96:23:b1:36:bd:2e:05:a2:d5:3e:31:e1:8f:
                    5b:5c:5f:79:3e:e3:5b:6b:e0:8f:f7:6b:6a:64:80:
                    cc:8a:99:8e:34:65:77:57:55:ad:8a:58:fe:0e:7a:
                    9b:f3:dd:2d:ea:83:97:9b:fe:ec:31:92:0a:c0:d1:
                    55:65:38:23:46:e4:de:92:11:ad:c7:7e:84:58:e3:
                    1a:fe:83:71:8e:6b:5a:e9:ea:ff:d5:66:ca:67:3a:
                    d9:fe:f0:67:59:8e:10:e0:ed:1c:73:1d:4e:f1:94:
                    e0:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:F2:0C:AB:A9:0E:81:45:3F:81:1D:01:9B:3A:96:33:2D:86:EB:3D
            X509v3 Authority Key Identifier:
                keyid:53:E7:CE:94:35:33:F8:D3:C0:56:49:F2:94:68:2A:26:F8:14:F1:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U-fOlDUz-NPAVknylGgqJvgU8V8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144391/019FF14E70AE11EFA848B068C4F9AE02/U-fOlDUz-NPAVknylGgqJvgU8V8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:ac:88:f7:89:6d:e2:c1:8b:cd:d6:f1:7e:9d:ce:3a:ab:7c:
         4c:7b:57:4b:bf:f5:18:ec:f5:8e:61:80:ca:7c:1d:0b:95:34:
         1f:d0:c2:1e:f8:d5:6a:3a:1b:9e:55:8f:65:e5:c2:60:c4:1f:
         2b:44:7f:89:58:9a:89:64:3d:f5:fa:8e:2a:6d:c5:3b:a6:23:
         33:58:da:92:f0:ed:63:d9:06:10:37:b7:70:6b:2b:6b:ed:d6:
         26:16:48:f1:38:5e:43:24:8c:4f:0a:fe:41:31:98:31:40:5d:
         61:6b:ab:b3:0c:6b:cd:1d:17:7d:75:77:20:f2:87:c1:00:55:
         5c:29:ee:9f:9d:84:41:5f:31:b1:23:db:ad:8b:ed:10:c2:08:
         b2:df:55:9d:5b:d7:2f:d9:1d:ae:5f:23:43:19:89:4e:77:26:
         ec:c8:3e:7f:16:cf:61:4c:96:34:c8:e6:b0:15:11:e6:fe:33:
         44:9f:19:42:79:43:83:8a:a8:67:6e:41:0d:03:a7:d2:a4:58:
         aa:ed:5e:fc:c1:c0:73:84:bb:16:ea:0c:e2:b0:42:d1:7e:a4:
         75:8d:f3:cd:89:81:7c:e2:b7:59:10:e6:4e:85:49:51:8e:a6:
         9e:33:7e:b5:0a:54:9c:15:d0:c1:ca:fb:ba:c7:f1:0b:c5:ea:
         a0:2c:ef:c2
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICAUYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NDQzOTExMTAvBgNVBAUTKDUzRTdDRTk0MzUzM0Y4RDNDMDU2NDlGMjk0NjgyQTI2
RjgxNEYxNUYwHhcNMjYwNTEzMDUzMDMyWhcNMjYwNTIwMDUzMDMyWjAYMRYwFAYD
VQQDEw02YTA0MGM3OS0yZDY1MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAxxF7+bfFd9TVPugB2mk/T9ag/OI8AwEDqWZu1gQb7ve7eo3AOnLE8Pwjbiiw
u/jZMEChVDXh+ftobrcYPFpQPWB68u+w/V1Ip7dQJlPmmNR0o6dq4+x2YvKuE7OR
wGr9emviRgJ0fbXzJbq9gmMTEJLR7sIdjTMjUvZbaJn+6luaw34aYNUJEybYL/6x
anCFKtMPzsKhrpYjsTa9LgWi1T4x4Y9bXF95PuNba+CP92tqZIDMipmONGV3V1Wt
ilj+Dnqb890t6oOXm/7sMZIKwNFVZTgjRuTekhGtx36EWOMa/oNxjmta6er/1WbK
ZzrZ/vBnWY4Q4O0ccx1O8ZTgPwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFFjyDKup
DoFFP4EdAZs6ljMthus9MB8GA1UdIwQYMBaAFFPnzpQ1M/jTwFZJ8pRoKib4FPFf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0NDM5MS8wMTlGRjE0RTcw
QUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1OUEFWa255bEdncUp2Z1U4
VjguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1UtZk9sRFV6LU5QQVZrbnlsR2dxSnZnVThWOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE0
NDM5MS8wMTlGRjE0RTcwQUUxMUVGQTg0OEIwNjhDNEY5QUUwMi9VLWZPbERVei1O
UEFWa255bEdncUp2Z1U4VjgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAwayI94lt4sGLzdbxfp3OOqt8THtXS7/1GOz1jmGAynwdC5U0H9DCHvjVajob
nlWPZeXCYMQfK0R/iViaiWQ99fqOKm3FO6YjM1jakvDtY9kGEDe3cGsra+3WJhZI
8TheQySMTwr+QTGYMUBdYWurswxrzR0XfXV3IPKHwQBVXCnun52EQV8xsSPbrYvt
EMIIst9VnVvXL9kdrl8jQxmJTncm7Mg+fxbPYUyWNMjmsBUR5v4zRJ8ZQnlDg4qo
Z25BDQOn0qRYqu1e/MHAc4S7FuoM4rBC0X6kdY3zzYmBfOK3WRDmToVJUY6mnjN+
tQpUnBXQwcr7usfxC8XqoCzvwg==
-----END CERTIFICATE-----
Generated at Wed May 13 16:51:42 2026 by rpki-client