Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
File:                     yUpKujMViTObRlHAW5L_4BvLNMk.mft (raw, json)
Hash identifier:          Tjh8zywGA7C94zUFuLqSOxp5yfti3Zv29wBNIdJkmcI=
Subject key identifier:   EB:3D:DD:F1:A8:89:BA:F7:29:BB:B6:E5:A3:0C:C8:E3:64:9E:99:C5
Authority key identifier: C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9
Certificate issuer:       /CN=A9187E23/serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
Certificate serial:       01DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
Manifest number:          01D7
Signing time:             Mon 11 May 2026 03:36:07 +0000
Manifest this update:     Mon 11 May 2026 03:36:06 +0000
Manifest next update:     Mon 18 May 2026 03:36:06 +0000
Files and hashes:         1: yUpKujMViTObRlHAW5L_4BvLNMk.crl (hash: hHRwRypuC0fsArmGuuVbLUe8KTPzNCuSJqgKGSJqbpQ=)
                          2: 3863960C7E0311EE8BCA7D33C4F9AE02.roa (hash: KgGijW2soQRzCpn/hhV4Vag0nXvvNHm3EmDe2YvYSfE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl
                          rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 03:36:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 476 (0x1dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9187E23, serialNumber=C94A4ABA331589339B4651C05B92FFE01BCB34C9
        Validity
            Not Before: May 11 03:36:06 2026 GMT
            Not After : May 18 03:36:06 2026 GMT
        Subject: CN=6a014ea6-2c93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:23:b4:4d:43:fa:b4:91:92:db:e7:2a:96:e4:
                    27:5f:5c:9c:ec:05:44:87:83:14:32:d5:b2:6f:cc:
                    b5:ec:2f:77:13:f9:59:6c:ab:e4:50:06:81:99:0e:
                    ca:55:95:b9:4a:0a:01:2f:4a:5d:6d:7d:9a:12:17:
                    e9:87:0a:cc:24:aa:8e:d9:54:0a:fa:a6:eb:88:5a:
                    dc:0f:f3:2d:cd:d3:73:2c:bb:0a:fe:cd:7b:41:f5:
                    b2:b1:cb:b0:89:57:7a:de:f6:c8:ed:e4:65:6f:76:
                    9c:7f:82:ae:9b:3d:a6:5e:6b:62:a9:91:ef:59:35:
                    10:60:a8:7f:a0:71:57:87:66:05:fa:52:88:c7:56:
                    ea:f7:a2:41:0f:6a:83:5e:58:46:f7:1f:e4:1e:3b:
                    aa:74:25:44:49:a1:75:f5:11:83:c3:f6:f3:71:11:
                    96:b8:83:04:09:9d:e2:f6:d7:34:6a:aa:d4:24:46:
                    47:e8:c9:ef:6c:f9:d5:9a:b6:85:cd:fe:ed:5e:63:
                    a7:70:36:c3:dc:65:89:21:a4:e5:79:00:3a:6d:32:
                    72:77:5a:1b:a1:2d:21:e0:3d:66:df:21:6a:71:84:
                    74:c9:72:a7:32:1a:6d:25:86:59:d4:e1:db:47:de:
                    f4:46:61:2a:a0:96:d2:76:b3:06:bf:e5:71:a6:c6:
                    c3:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:3D:DD:F1:A8:89:BA:F7:29:BB:B6:E5:A3:0C:C8:E3:64:9E:99:C5
            X509v3 Authority Key Identifier:
                keyid:C9:4A:4A:BA:33:15:89:33:9B:46:51:C0:5B:92:FF:E0:1B:CB:34:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUpKujMViTObRlHAW5L_4BvLNMk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9187E23/BE97B0A67D6711EEB06A4312C4F9AE02/yUpKujMViTObRlHAW5L_4BvLNMk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         25:7c:96:13:e5:49:2e:14:14:0c:a0:cc:0b:8e:ed:cc:82:a5:
         35:3b:19:84:b8:17:1c:17:a1:48:5a:24:db:60:b5:7e:11:c7:
         63:6c:85:e5:e4:63:3c:32:05:fa:ff:30:04:84:be:04:df:af:
         92:61:f9:a0:8b:e6:ab:3b:c1:97:b9:34:21:37:80:2a:1d:25:
         72:c1:8f:53:6d:3d:dc:ac:0c:44:2d:1a:a4:c9:5f:31:83:91:
         80:e8:39:89:c5:e7:7d:ef:f4:3b:2d:96:aa:17:be:a8:f4:a4:
         da:a8:ad:63:70:e0:89:c1:69:bd:28:e2:1d:6a:9f:ad:b0:45:
         1d:e1:84:6f:5c:ea:6f:d8:3a:9a:f9:12:b4:14:01:15:20:0d:
         2a:71:26:61:00:44:90:14:aa:3a:d1:92:09:f8:40:ac:e0:22:
         52:31:c5:70:55:36:b8:da:05:25:12:fa:0b:26:a0:a8:01:5b:
         0e:5b:ed:f3:be:58:7b:85:e2:31:70:fb:1f:72:9f:23:d0:37:
         da:0a:1f:f7:58:32:f9:a5:e4:dd:8a:28:db:a5:22:f4:64:39:
         ca:69:5a:87:a3:7e:b3:75:89:42:b8:81:13:fd:fe:af:62:6b:
         79:1f:80:bb:0a:a0:16:31:6e:b1:67:11:4c:89:78:b5:a4:b3:
         56:f2:0f:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:06:36 2026 by rpki-client