Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
File:                     9DRcMU1uvt60X-B1X4_-rPNjy4o.mft (raw, json)
Hash identifier:          Gc46Um1In0Yxe9PAKW/BjYxe5n0iOV4Mb8tIg8clV78=
Subject key identifier:   07:EB:77:B9:03:96:BD:32:B1:C1:F2:65:BA:79:0B:AA:E9:75:A2:30
Authority key identifier: F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A
Certificate issuer:       /CN=A9158D75/serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
Certificate serial:       0D7E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
Manifest number:          0D5A
Signing time:             Tue 12 May 2026 18:01:14 +0000
Manifest this update:     Tue 12 May 2026 18:01:13 +0000
Manifest next update:     Tue 19 May 2026 18:01:13 +0000
Files and hashes:         1: 9DRcMU1uvt60X-B1X4_-rPNjy4o.crl (hash: AAjsI4QaCfK0SG2KeCN8F2Py6LK48h+Ab5rwFC6DLHk=)
                          2: B36E1C029EDD11EC85676D09C4F9AE02.roa (hash: yWplhtms1dAUz1rTrpyqOahKy82YqWV6tAfNaZXyQyM=)
                          3: B4B32D509EDD11EC85676D09C4F9AE02.roa (hash: uhdsb7IsbH2eS89Ae2T+bO+dY73SgZMqEnGlhmdvaA0=)
                          4: 2477AFC6D56511EDB2407741C4F9AE02.roa (hash: ECRNOTg3OlzKxcpLyuORVjA7zDi9bxSHri4ICsSWxl8=)
                          5: B5EA3B509EDD11EC85676D09C4F9AE02.roa (hash: XguSXdxwX10IbHPbblPRZe5PIEMjt2uiz6CEGHIK6Gc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl
                          rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 18:01:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3454 (0xd7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158D75, serialNumber=F4345C314D6EBEDEB45FE0755F8FFEACF363CB8A
        Validity
            Not Before: May 12 18:01:13 2026 GMT
            Not After : May 19 18:01:13 2026 GMT
        Subject: CN=6a036ae9-75cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:93:ce:90:d5:1e:3f:f9:80:7c:ac:3f:ab:4e:
                    bf:72:53:a4:48:1c:c6:89:93:aa:70:a2:27:73:12:
                    58:be:70:b1:f8:55:48:47:78:17:73:e9:3f:ef:c2:
                    b4:1a:09:0d:bf:ff:be:3a:18:f0:23:63:2f:2c:5a:
                    7d:24:fb:ac:49:3a:10:7f:89:ef:97:7b:2c:de:f1:
                    75:63:af:1e:05:42:1f:33:5c:46:07:22:80:46:ff:
                    3c:68:c6:99:a9:c0:0a:96:29:26:96:c1:e5:44:0d:
                    8e:b2:bd:72:cc:2e:70:88:6e:c5:98:9e:f7:20:e8:
                    90:f4:b5:18:71:e2:24:16:f8:17:57:5f:ac:50:08:
                    90:86:b0:32:e9:ed:26:e3:f4:eb:06:c1:b2:16:7d:
                    be:5e:74:57:6a:b1:df:b2:84:d7:66:c7:86:e1:59:
                    59:a9:70:d9:42:02:ce:9d:e2:0e:a0:a2:39:c0:e1:
                    04:5c:ce:27:97:4d:b9:18:fd:ee:34:f8:17:ed:5d:
                    8c:97:c7:a6:63:18:a6:b6:cb:94:97:87:5e:31:88:
                    e6:62:25:96:5a:ed:e5:3c:b1:e5:9d:d5:b9:3a:a3:
                    7e:2d:c6:a0:63:33:29:e9:bc:ec:5b:51:bc:3a:45:
                    84:14:1f:9b:d1:dc:c7:98:78:a0:71:e7:62:67:60:
                    28:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EB:77:B9:03:96:BD:32:B1:C1:F2:65:BA:79:0B:AA:E9:75:A2:30
            X509v3 Authority Key Identifier:
                keyid:F4:34:5C:31:4D:6E:BE:DE:B4:5F:E0:75:5F:8F:FE:AC:F3:63:CB:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9DRcMU1uvt60X-B1X4_-rPNjy4o.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158D75/7434940EF25E11E99130B181C4F9AE02/9DRcMU1uvt60X-B1X4_-rPNjy4o.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9c:6c:ec:a1:02:31:f3:c7:c0:58:34:0a:58:95:3c:4a:c8:28:
         52:af:6a:a5:53:7e:e5:cf:f0:3e:5b:80:c6:c4:26:db:ee:d3:
         8b:c8:0e:80:7a:b1:49:1a:5b:52:c1:be:f3:cd:26:c0:0a:4d:
         39:36:d8:b1:da:3a:fe:3a:67:47:91:5b:8a:ef:8e:64:e8:37:
         81:3d:20:38:3a:81:48:77:9e:74:47:8e:0d:92:91:34:e2:c5:
         3e:ce:8d:60:75:48:03:e4:a5:7e:46:df:b2:36:49:0b:2c:77:
         67:ec:a6:75:9d:b6:9b:6e:97:0e:f1:af:de:9f:b0:55:37:1d:
         48:93:5f:0e:18:1d:0f:c1:90:c3:58:5c:df:7e:19:5c:ad:da:
         a6:fd:fd:44:ed:f2:1b:3c:4d:d8:fe:60:73:cf:1d:b7:c8:da:
         e9:1f:3a:b4:ac:e6:04:86:94:38:47:02:7e:96:6e:ee:33:4e:
         a1:7a:f2:28:7b:5d:18:71:45:ed:4c:65:9d:95:bc:57:89:c0:
         a7:8c:dd:c2:d2:5a:1a:32:72:fb:27:b5:0a:1a:01:c6:de:39:
         3d:b6:48:74:9c:74:62:31:38:58:e5:b7:48:f4:3c:cd:08:0f:
         71:34:65:e0:5f:7e:50:ee:8b:91:c5:92:ba:9a:4e:97:52:43:
         2e:78:fa:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:03:52 2026 by rpki-client