Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          XlJjou/5tKd7woimOricDNRT+WoWBPapv7O4NGt/Z1E=
Subject key identifier:   DF:93:45:CD:8D:49:55:6D:FD:B7:2B:A4:81:8E:5D:CB:AA:78:09:26
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AE4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1A13
Signing time:             Tue 12 May 2026 16:24:42 +0000
Manifest this update:     Tue 12 May 2026 16:24:42 +0000
Manifest next update:     Tue 19 May 2026 16:24:42 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: isALz5GTK0msMgYVwrmayVQgetFZkoe/OYsXVWvZXwQ=)
                          2: 21730760B3A411F0B1142735C4F9AE02.roa (hash: im8eNEl51/Iajj6nEj+0v7DWapzv6w3ygAcW7Tm2EYY=)
                          3: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: 6oqBivfV20ZCwWDrvfDszw8M0HSCjMHWk8bUvCdKaCc=)
                          4: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: /eEZUKJWpNpZ2mR8oMJuCWCGAOo81sPu7UrR35Q+2rI=)
                          5: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (hash: 3AW6Ko47S5785nZPFbtEEMHhRxhTEGko/pianNlkRfQ=)
                          6: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: YM8lkpFLkO4Bbr1IWWoMC4SWTHYqIxyd5W0ltmh5jmM=)
                          7: 3003BB4EB3A411F0B8845739C4F9AE02.roa (hash: K4YYZFd9CxYpJZ2+aOvlAMI9Dkr8syByGIN8hdR0iwo=)
                          8: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: c9spXCzN8OLXoP5L7k74P6VknznwAVNWRQsN3HnNFII=)
                          9: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: wsW3aqGjxehyBgpTwS7HywIwph1+NVgxAvtD2hhF8FE=)
                          10: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: Er3lL/S505EsaOt1uacROwj0JQEQVjW8R9dfPP8sfHo=)
                          11: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: LOzTCKrMgLJq0MdRVFDlgehNk6Muqpflj11oEgLrLuo=)
                          12: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: xHGcoIaGOzKJwv6w3Z8rV5SCo2Gj6ECIx8o45Fg7/Kc=)
                          13: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: m4cHchahu0FcuRzlm+r74ocShlfFVkLmN+v6ll48l84=)
                          14: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: WnWJy2LtcUBqxAM9qw86LcXMg7nx0+JTWYQZUhKZvPc=)
                          15: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: vjNJ7t/fR8gZHZFW7rS7pSPlSs4z2F/aS/JSQ3DxuPA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 16:24:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6884 (0x1ae4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: May 12 16:24:42 2026 GMT
            Not After : May 19 16:24:42 2026 GMT
        Subject: CN=6a03544a-bde2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:d9:75:1d:50:86:d7:4e:19:eb:d1:18:9f:b0:
                    0c:fc:60:76:75:9b:00:b7:6b:4a:44:21:f4:fa:88:
                    9f:34:56:92:2b:8f:1a:0c:0a:e5:e3:af:21:12:96:
                    4a:4f:55:43:bb:b8:9c:50:78:a7:fd:ec:b4:93:d4:
                    d9:c1:c2:05:d7:ab:e6:d8:46:fb:2c:15:c0:0f:03:
                    9f:c6:a0:03:a7:06:0d:a3:8c:fb:9d:c4:28:16:8a:
                    f4:66:64:49:cf:18:e2:9a:e8:6e:6c:f1:d9:9d:84:
                    7a:c2:42:a2:11:e6:d8:fb:78:6d:99:97:29:12:53:
                    fc:b4:a9:8d:5f:00:fd:c3:3f:84:5e:30:28:c8:d0:
                    75:dd:d4:18:4e:0c:53:9b:d2:57:49:18:d3:af:81:
                    84:d7:ea:c0:e9:71:51:a7:84:e8:7e:19:37:ae:ae:
                    24:ee:37:52:92:ca:7a:c0:9a:0c:92:a1:7d:c1:ec:
                    5b:44:e1:7d:eb:90:ea:aa:7c:99:57:43:e2:04:4b:
                    9c:ae:95:9c:a2:21:ea:d6:cf:76:91:9f:11:2e:ac:
                    19:68:72:f4:b0:cb:af:75:9f:88:c0:0f:cb:c3:25:
                    ea:c9:84:29:69:b1:78:5f:05:4c:a7:7e:cc:26:e5:
                    98:03:96:ce:77:48:12:b9:ac:39:68:f9:de:91:26:
                    96:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:93:45:CD:8D:49:55:6D:FD:B7:2B:A4:81:8E:5D:CB:AA:78:09:26
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:96:bb:66:86:e6:01:77:0e:24:ea:3c:ad:0e:28:16:c7:42:
         b5:55:5f:7c:8d:64:e1:9b:0d:69:87:a6:51:3c:90:61:1f:30:
         25:66:90:5a:0e:bb:fd:03:9d:54:c6:c4:5a:57:d6:a6:90:f9:
         3d:e0:1b:b8:fe:c8:80:f4:86:ef:06:e6:21:ec:ab:70:95:68:
         4f:b7:ec:ee:87:5c:fd:3e:6a:2a:ee:bf:26:23:d8:68:29:95:
         74:3d:c8:bd:eb:4d:cd:36:e7:b8:62:93:4a:32:c0:ef:12:42:
         3d:92:28:1b:77:72:93:93:70:d2:3e:ca:5b:a8:12:92:b3:f4:
         5b:f5:5b:ed:b9:58:74:a1:41:7a:7d:cd:fc:5c:24:71:bb:78:
         e9:9f:d9:5a:d7:99:4a:0f:11:79:4d:d9:fa:9a:8a:e2:c0:0b:
         b8:c2:f3:08:35:f7:3d:b4:7f:da:cf:df:a6:74:74:56:d8:98:
         8f:0c:d2:b6:e9:c5:9c:7a:2a:11:50:0c:07:f9:7b:4f:17:52:
         7a:34:26:3a:27:58:f2:ae:3d:90:fc:3f:e5:67:51:ce:7f:e8:
         98:b0:7d:33:12:8e:96:62:5d:36:c7:fd:48:b0:f9:4c:22:a8:
         b1:b9:46:bc:df:27:dc:59:7a:ac:1a:b0:1d:78:8a:37:a6:a9:
         e2:4a:6d:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:49:36 2026 by rpki-client