Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
File:                     UDJy2j7wq-3pU5x-JDobhoaxYfs.mft (raw, json)
Hash identifier:          AcH9CNEZoAt+3DKvgX5DbU9FkEgiNsWqAoyxZYZqaZw=
Subject key identifier:   4D:D3:D4:BA:2A:A6:14:6D:F6:78:64:69:F3:08:8B:F1:A5:E9:62:FC
Authority key identifier: 50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB
Certificate issuer:       /CN=A9146906/serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
Certificate serial:       01A7
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
Manifest number:          0192
Signing time:             Mon 11 May 2026 04:25:57 +0000
Manifest this update:     Mon 11 May 2026 04:25:56 +0000
Manifest next update:     Mon 18 May 2026 04:25:56 +0000
Files and hashes:         1: UDJy2j7wq-3pU5x-JDobhoaxYfs.crl (hash: xwVnYdaMy9JWvz9Tp/iorjohph07TZzBsB8c4dFVQsg=)
                          2: DADBB0C033A411EF8E99B625C4F9AE02.roa (hash: uj7aSF5U3lrEwAf5AMXaMNocSkTapCA+NNk0S8T44wI=)
                          3: C3A77BE8391F11EFBFAB6D66C4F9AE02.roa (hash: xag7piZxRalbVehikGhY7Y5TfIzZyOjEtv8ww1qYwCA=)
                          4: C32999EE391F11EFBFAB6D66C4F9AE02.roa (hash: M4sCC9h+jOw1aprcitO1VbFmajV+N+fzu/Vlxn3AA6E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl
                          rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 04:25:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 423 (0x1a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146906, serialNumber=503272DA3EF0ABEDE9539C7E243A1B8686B161FB
        Validity
            Not Before: May 11 04:25:56 2026 GMT
            Not After : May 18 04:25:56 2026 GMT
        Subject: CN=6a015a54-dd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:32:8c:29:a8:22:93:99:60:4f:76:bc:dc:df:
                    a6:b3:27:07:48:c2:90:72:cd:17:74:95:84:3d:c1:
                    8f:2e:b6:0d:8e:bf:26:73:08:f6:a7:bc:2c:b8:98:
                    22:a5:f3:66:67:31:83:cd:3f:da:d7:7f:0d:9f:e6:
                    b3:7f:18:73:73:8e:32:11:58:2e:9b:8e:18:4b:5e:
                    dc:89:c1:f9:4a:69:9d:01:92:89:8e:6a:11:29:cc:
                    3d:50:37:42:68:03:1c:e5:6c:b2:7f:0a:5b:97:75:
                    6c:86:bc:fa:6b:84:e8:c8:1f:9c:1b:4b:71:32:66:
                    28:57:83:f3:e8:dd:06:f6:a2:de:dd:f1:f3:d6:93:
                    2a:c4:95:ca:a7:96:d1:c1:3d:19:c4:df:ac:59:c0:
                    63:39:c8:32:7b:75:05:df:30:e4:29:93:20:c1:35:
                    81:d4:18:5d:d8:9b:b5:0d:e4:d7:e5:44:95:ca:06:
                    5c:8b:2b:55:da:07:18:31:d7:bc:7d:ab:c3:92:24:
                    60:eb:58:16:17:b8:9c:ee:06:84:77:33:55:0d:10:
                    23:75:0c:54:f8:cd:e6:8f:d5:59:37:36:03:73:48:
                    ce:17:60:7d:02:10:ce:b8:b5:57:4d:8b:c2:cb:26:
                    12:ce:a7:22:01:44:be:49:58:45:be:fc:cc:72:28:
                    70:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:D3:D4:BA:2A:A6:14:6D:F6:78:64:69:F3:08:8B:F1:A5:E9:62:FC
            X509v3 Authority Key Identifier:
                keyid:50:32:72:DA:3E:F0:AB:ED:E9:53:9C:7E:24:3A:1B:86:86:B1:61:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UDJy2j7wq-3pU5x-JDobhoaxYfs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146906/283A668EE77611EEAAFF3E74C4F9AE02/UDJy2j7wq-3pU5x-JDobhoaxYfs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8a:49:1d:33:4a:cb:e7:a2:00:b0:ad:ba:3a:8a:77:9b:5b:4f:
         0d:35:8a:83:45:8a:69:4d:47:41:e7:27:fe:87:39:91:e1:ea:
         d1:56:a5:87:c5:34:4c:bf:5b:e5:89:e5:39:b7:6f:81:fc:ef:
         11:7e:6b:8e:03:30:50:b7:38:c8:3e:51:34:fb:60:a7:34:e7:
         d2:37:03:bf:88:34:71:b4:3d:d3:5e:98:b1:5e:f7:52:bb:23:
         8b:a6:3d:33:11:0d:96:b5:6d:a4:54:4a:d4:0d:49:48:19:f3:
         16:b6:d9:c7:a0:52:6c:77:4a:b0:61:d4:c3:6c:8e:12:e6:3b:
         66:50:a9:65:5e:25:38:c1:a6:c1:c1:59:0e:c0:7b:e9:97:22:
         96:1a:4b:b8:94:94:18:a6:1e:bb:f7:09:e9:42:ae:ac:9d:0e:
         78:d9:72:66:f6:9f:c2:9b:f6:b5:19:67:c5:9f:a5:eb:91:ec:
         0c:ae:82:c6:33:37:23:a5:64:51:53:53:48:25:3b:34:75:d8:
         5f:b0:97:3b:b9:2d:48:75:5f:c8:f4:8c:92:21:80:9b:e1:00:
         41:40:20:fd:0b:5b:85:7f:ae:5a:e8:59:ee:70:8d:96:38:73:
         f1:61:af:e9:86:00:8a:92:09:48:3e:dd:88:01:2f:b0:52:8c:
         1e:bc:fd:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:03:54 2026 by rpki-client