Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
File:                     xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft (raw, json)
Hash identifier:          PA1Kiasy4BG8MQNJ2Si9gBJgEVBTEgV+f+dithIxlJA=
Subject key identifier:   4E:09:8F:1C:22:5E:EB:63:0B:3C:94:F0:66:1F:F7:00:6C:23:C6:34
Authority key identifier: C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73
Certificate issuer:       /CN=A9161857/serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
Certificate serial:       BC
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
Manifest number:          B9
Signing time:             Mon 11 May 2026 07:14:23 +0000
Manifest this update:     Mon 11 May 2026 07:14:23 +0000
Manifest next update:     Mon 18 May 2026 07:14:23 +0000
Files and hashes:         1: xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl (hash: LTkYV2ZlBEjT8kMkvWAyFlgXLITrRo1PPkVqJxzkLEs=)
                          2: 4660810C41DE11F083E3205EC4F9AE02.roa (hash: 8cuDD60OBi1vO/7c9lhKgZt7KgJpxsLM7iezV0RYbzQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl
                          rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 07:14:22 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161857, serialNumber=C426D426400676555973DFEDE4EB2644BEED2873
        Validity
            Not Before: May 11 07:14:23 2026 GMT
            Not After : May 18 07:14:23 2026 GMT
        Subject: CN=6a0181cf-dea0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:79:ae:47:c1:76:fb:e4:76:f7:84:da:b8:
                    ba:5e:f1:3c:53:03:63:a4:51:01:da:10:02:2a:61:
                    56:b9:d5:73:b2:6e:2c:64:54:94:3f:f9:1b:48:16:
                    ae:db:53:3a:32:98:7e:2b:6b:e8:d8:96:ba:b1:92:
                    05:c8:21:66:87:91:37:70:cb:db:7e:cd:10:03:0a:
                    23:79:f2:4c:29:e2:32:f5:1e:e4:93:f2:49:30:46:
                    10:7a:46:99:b9:41:a0:63:76:b7:58:bc:2c:ca:68:
                    c6:2d:da:1e:a5:e0:ab:cd:98:0d:e8:fb:01:fe:b7:
                    47:56:2e:c8:e9:ab:9f:3c:80:e9:78:97:0e:80:69:
                    20:e0:64:0b:42:11:a5:be:5a:53:3c:0e:5b:f1:5b:
                    b8:bf:bc:ed:40:7e:fc:af:23:88:3d:a2:f3:4c:15:
                    ad:10:0d:75:3c:a1:c7:3e:81:dc:c6:60:5a:49:ba:
                    b8:0f:28:53:28:f2:08:bd:40:c2:55:73:7d:07:88:
                    ba:1b:fb:93:e5:a3:6b:75:0a:cf:dd:37:bf:0b:cf:
                    89:f5:cf:34:e6:1b:5a:e4:fc:0a:55:41:79:f3:ae:
                    df:eb:b3:01:e1:1a:fe:c1:7e:19:8e:d6:6e:d1:a2:
                    52:34:2c:6a:52:db:6a:cc:f8:a9:c4:b4:94:4d:df:
                    20:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:09:8F:1C:22:5E:EB:63:0B:3C:94:F0:66:1F:F7:00:6C:23:C6:34
            X509v3 Authority Key Identifier:
                keyid:C4:26:D4:26:40:06:76:55:59:73:DF:ED:E4:EB:26:44:BE:ED:28:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/xCbUJkAGdlVZc9_t5OsmRL7tKHM.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161857/C1F730723C9811F0AF124B38C4F9AE02/xCbUJkAGdlVZc9_t5OsmRL7tKHM.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6d:bc:5d:43:20:a4:b7:3a:e4:a8:2c:99:ad:95:aa:8a:de:ec:
         cd:c2:d5:f8:6b:35:64:55:64:64:de:17:ad:51:c8:11:ba:aa:
         1d:be:95:25:11:ee:9d:9b:62:88:3a:bf:66:95:23:32:d4:f3:
         94:ed:ee:c5:fa:56:0e:e6:5c:e0:e9:7f:48:96:71:29:02:8a:
         40:63:f7:71:4c:27:76:49:21:2a:b1:73:09:fc:43:a7:e8:eb:
         f5:f9:ab:ed:2e:16:12:b8:0c:ac:9b:4b:61:16:cc:72:0f:ab:
         a4:65:72:a8:ab:35:91:94:b8:dc:4d:7f:c1:9d:6e:f8:6b:6c:
         c8:91:41:cc:fe:6f:23:84:05:58:ec:3f:fc:16:83:94:28:a3:
         1d:78:44:b0:5f:06:36:9e:41:00:94:36:78:e8:9a:2f:fc:b0:
         5e:ed:7d:be:1f:38:35:16:8f:28:9c:0e:da:ee:e3:39:f4:18:
         42:87:35:7b:cf:1d:b4:a3:dc:98:fc:6f:33:86:65:51:79:58:
         62:8e:cd:f4:d5:67:30:38:92:af:b1:5d:4a:31:c6:28:85:b8:
         ec:11:5d:e1:63:0c:b1:fe:96:b5:c9:0e:51:50:e1:e9:32:11:
         ff:28:b8:6f:13:e9:78:f1:d7:eb:f1:1a:1b:66:43:5a:cb:b6:
         dc:59:00:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:46:04 2026 by rpki-client