Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
File:                     ApuM4ulfRYWEYukHCxtRU6yRP-g.mft (raw, json)
Hash identifier:          p6DylS2WX7wpLZNqzkUXbCOcJZ5cq9Wmy+HhDWFTpjc=
Subject key identifier:   E6:6B:C4:E0:AA:DA:18:BA:67:02:21:4A:81:27:57:DC:C8:24:F4:85
Authority key identifier: 02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8
Certificate issuer:       /CN=A9157D67/serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
Certificate serial:       07D9
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
Manifest number:          07CA
Signing time:             Tue 12 May 2026 21:31:37 +0000
Manifest this update:     Tue 12 May 2026 21:31:36 +0000
Manifest next update:     Tue 19 May 2026 21:31:36 +0000
Files and hashes:         1: ApuM4ulfRYWEYukHCxtRU6yRP-g.crl (hash: vUCwYrdkhE5mIzholv0wkLZ/nHNQ6dsMgcG7m6pAMaE=)
                          2: AA3A944A27EA11ECB1EBEA82C4F9AE02.roa (hash: 9U65FM23v8O9dYjo5/Exe3XZ6tEjV3iATa5RpxrfVNA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl
                          rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 14:50:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2009 (0x7d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9157D67, serialNumber=029B8CE2E95F45858462E9070B1B5153AC913FE8
        Validity
            Not Before: May 12 21:31:36 2026 GMT
            Not After : May 19 21:31:36 2026 GMT
        Subject: CN=6a039c39-0178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:65:86:07:c0:46:90:e4:74:09:65:77:4b:43:
                    93:16:3b:f2:64:02:af:f7:b0:e5:13:53:3d:08:7e:
                    0b:2a:63:9e:ed:57:1d:4e:3c:25:80:ba:b9:c1:3b:
                    0b:a1:f3:97:c1:eb:5c:8f:a6:93:dc:08:eb:0b:3c:
                    16:05:37:51:ae:29:a2:15:13:07:10:e2:a1:40:72:
                    b6:d7:8c:16:ca:74:0d:a7:aa:ec:05:6d:4d:c2:d4:
                    d4:74:77:3f:74:94:8e:c2:b1:eb:51:cb:6b:d3:74:
                    73:da:33:66:7c:ce:f7:66:75:5a:86:6b:32:fd:e4:
                    97:62:15:f0:32:28:29:76:4c:9c:2f:b1:0e:b6:99:
                    ee:f5:34:04:4d:9c:83:ed:66:7c:29:b3:d7:1c:67:
                    dc:17:0c:4f:61:ff:76:d9:b1:af:c6:7f:42:cb:8e:
                    29:9a:61:08:7d:55:6e:3e:2e:7a:49:f7:51:f7:75:
                    53:f8:7d:93:aa:f2:30:7b:e4:df:a8:11:19:cc:ed:
                    4e:6f:f5:84:e6:96:fd:92:a8:e3:91:84:36:d3:62:
                    d6:a2:db:f2:b7:34:05:bd:ae:4e:f6:b8:31:2b:87:
                    44:b0:eb:dc:cc:3e:53:bc:84:16:3a:b5:8a:7d:7b:
                    66:74:5b:33:0b:ff:e5:e3:ac:25:ce:c0:15:2c:b0:
                    d8:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:6B:C4:E0:AA:DA:18:BA:67:02:21:4A:81:27:57:DC:C8:24:F4:85
            X509v3 Authority Key Identifier:
                keyid:02:9B:8C:E2:E9:5F:45:85:84:62:E9:07:0B:1B:51:53:AC:91:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/ApuM4ulfRYWEYukHCxtRU6yRP-g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9157D67/60286638442A11EB9599AD38C4F9AE02/ApuM4ulfRYWEYukHCxtRU6yRP-g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         23:56:b1:1f:32:81:e8:3b:90:49:8f:71:b7:6c:16:98:36:44:
         af:ef:d0:bc:64:fd:2c:4a:57:69:e7:c8:c6:f7:e8:26:03:9d:
         fd:0b:85:8c:af:fe:c3:b6:75:7c:2e:74:9b:c4:df:b5:66:34:
         55:19:73:ae:d9:20:8f:d2:38:bb:0b:04:73:59:04:4a:25:2e:
         e1:25:fa:bf:dc:bc:82:81:1b:eb:df:6f:15:63:f2:f3:d4:52:
         f6:5f:99:c8:ce:b7:37:58:ca:98:a4:59:c0:d1:b7:b8:35:d8:
         9e:fc:50:9d:1c:68:12:e3:96:aa:1e:0c:37:ed:f6:7e:34:6b:
         1f:e9:ba:ca:76:18:ee:28:69:58:fd:02:dd:47:66:75:a9:17:
         e2:9c:e8:26:d8:9f:e4:99:cb:90:ab:5b:60:8a:ca:f5:13:49:
         38:33:e0:10:50:34:08:ec:79:40:3c:eb:e7:38:4b:c8:7a:7d:
         25:c5:f4:71:af:ba:2b:1e:49:01:d8:ba:a0:a5:a9:a4:ef:81:
         48:94:0b:b9:57:4e:0a:c4:36:06:5f:b4:60:09:93:39:d9:d0:
         be:4a:ee:dd:d3:4c:f4:95:f3:e4:a8:d8:42:f6:a5:ae:8c:ed:
         ea:80:eb:65:69:8c:0e:23:55:1a:62:eb:af:60:a5:1e:3f:38:
         5d:d3:f0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 03:54:33 2026 by rpki-client