Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
File:                     -JdCLlAQBtJgHYWlAXlTJrr-c4g.mft (raw, json)
Hash identifier:          MwFzKBuggRVukRoy72sYSq3uBk2bykAwtdm1q1/jSR0=
Subject key identifier:   7D:1E:3E:9F:FF:DF:8A:A2:6C:BF:C5:6F:26:C3:95:E9:AD:20:81:B4
Authority key identifier: F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88
Certificate issuer:       /CN=A9170829/serialNumber=F897422E501006D2601D85A501795326BAFE7388
Certificate serial:       021D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
Manifest number:          06DC
Signing time:             Tue 12 May 2026 23:55:33 +0000
Manifest this update:     Tue 12 May 2026 23:55:33 +0000
Manifest next update:     Tue 19 May 2026 23:55:33 +0000
Files and hashes:         1: -JdCLlAQBtJgHYWlAXlTJrr-c4g.crl (hash: thG1aTZJ1EGKtTNife2ffv3B+O+ciX9EMgHeRfGaxKg=)
                          2: E6C709BAEADD11F088D8AEF6666F56BC.roa (hash: ueTxaPk78zjdZo1qLabhrCKtO42F+1HdGQgNXdtwiaQ=)
                          3: C4D7F9DA584111EE85E40820C4F9AE02.roa (hash: K10RKm2RSVVX5jRTjbz83WeVsyTCfxe5LfA+X5JE7CE=)
                          4: F2706122D16E11F08E21851DC4F9AE02.roa (hash: 1RGEPGDWabAXSvxah2bqU7tFm/fhcCPZyMNrSv04Ww4=)
                          5: C55784DE584111EE85E40820C4F9AE02.roa (hash: dtbPC1LWkATZlWdm2gMIZVIAO5KQs+qcNNvbOqGnkko=)
                          6: C5C77866584111EE85E40820C4F9AE02.roa (hash: gZq4hO6KlqIzQ0dht+JPwOzELy4HWyKu7Y+1DMZFb3o=)
                          7: C44DEE8E584111EE85E40820C4F9AE02.roa (hash: Df3ID6kB/M7JFh6AAV2Z24ovoongS5kXo66yU3B/CNw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl
                          rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 541 (0x21d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9170829, serialNumber=F897422E501006D2601D85A501795326BAFE7388
        Validity
            Not Before: May 12 23:55:33 2026 GMT
            Not After : May 19 23:55:33 2026 GMT
        Subject: CN=6a03bdf5-3ff8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:c1:7e:23:9f:1b:32:0c:20:58:f3:21:01:c0:
                    17:05:97:85:58:21:dd:47:17:81:24:18:68:f0:6e:
                    95:49:5b:a5:6e:9e:3f:a6:37:df:08:d1:31:8a:6e:
                    bf:96:1a:ff:7a:7e:4c:8c:37:d1:15:e6:cb:06:6e:
                    94:7c:89:72:1e:c0:bc:f5:e8:c0:2a:15:ae:12:02:
                    b1:13:d4:61:4b:47:ff:ec:c9:85:c5:b6:43:c5:a2:
                    d9:cd:e1:77:bc:9b:42:d1:7f:41:e2:1c:8a:3f:f2:
                    56:62:b5:e1:24:71:77:c4:e8:34:01:7e:04:76:12:
                    bf:33:6d:0b:b4:4f:48:6f:d2:a3:f5:f3:cc:e1:1f:
                    03:c3:e2:b7:f6:14:fd:a0:29:ab:35:35:be:15:f6:
                    c1:87:ea:ab:38:3f:aa:fb:19:d7:e9:e9:b3:ad:30:
                    b5:f1:2c:f6:2e:ed:71:f6:2a:2d:33:21:e3:6a:fc:
                    5c:59:a9:63:51:dc:b0:25:2a:76:5a:24:d4:38:be:
                    a8:62:f5:3a:35:b0:f2:57:f5:7c:55:76:38:12:58:
                    95:8e:d4:9b:4d:10:7c:88:15:6b:e2:6b:78:c1:08:
                    53:70:5d:0a:27:10:4a:76:89:9a:d9:05:ce:b3:1c:
                    b1:4d:cf:a2:ac:1a:d0:54:44:62:45:c8:cd:e7:d1:
                    b1:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:1E:3E:9F:FF:DF:8A:A2:6C:BF:C5:6F:26:C3:95:E9:AD:20:81:B4
            X509v3 Authority Key Identifier:
                keyid:F8:97:42:2E:50:10:06:D2:60:1D:85:A5:01:79:53:26:BA:FE:73:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-JdCLlAQBtJgHYWlAXlTJrr-c4g.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9170829/7667BED063A011ECAD82991CC4F9AE02/-JdCLlAQBtJgHYWlAXlTJrr-c4g.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         33:94:82:bc:91:45:3e:dc:35:f9:8a:2c:a3:d1:b3:70:3a:c3:
         ef:9c:da:de:8a:a9:9c:ba:1c:39:4a:d4:57:ec:dc:7f:73:02:
         f5:14:c2:c8:5b:2d:e2:2c:cd:84:2d:48:e4:c9:bb:61:47:9b:
         9e:d5:41:60:c3:a5:a2:ba:ea:ce:72:c3:2f:d9:69:b6:b0:42:
         f7:63:19:db:35:87:95:20:cd:d1:34:44:80:43:90:41:d3:35:
         a7:53:57:e6:c3:9b:d7:c8:60:dd:da:5e:1a:34:44:d8:43:b7:
         b5:aa:7d:71:87:54:6d:88:01:0b:84:1f:b5:3d:af:93:bc:0f:
         f5:bd:8e:74:7a:e9:18:88:f0:64:19:2c:dc:64:de:54:59:34:
         16:9d:3a:51:dc:59:96:b4:0c:54:31:03:57:2d:bf:41:cd:7c:
         e4:14:3b:fe:fc:92:56:5a:09:1e:1a:17:6a:6c:26:94:3a:78:
         ed:8a:94:ca:4f:82:2a:54:d3:8e:00:d6:7a:bb:4a:51:f7:9f:
         ea:1b:61:48:99:86:3d:e8:ed:86:6c:4c:7f:73:45:ad:68:fc:
         01:84:94:42:52:eb:88:ae:ae:5e:2b:32:c3:80:ac:8d:f1:01:
         d8:7d:c9:0f:16:d2:22:c1:a9:d2:25:4f:66:70:e1:48:22:1e:
         d7:26:8b:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:07:16 2026 by rpki-client