Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
File:                     rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json)
Hash identifier:          5Qxz17YcRbpK2pqlWpqslRX5Oz4X3GnUm7BCL2q9y5g=
Subject key identifier:   16:33:96:F8:4C:C2:FE:89:FE:42:48:60:6E:96:19:6A:E0:96:30:1F
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Certificate issuer:       /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial:       04DF
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
Manifest number:          04D8
Signing time:             Thu 23 Jul 2026 00:10:43 +0000
Manifest this update:     Thu 23 Jul 2026 00:10:42 +0000
Manifest next update:     Thu 30 Jul 2026 00:10:42 +0000
Files and hashes:         1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: eNQc458GuxeMF9IiLyTgsfk78J0U0UH/bm91Bhmnce4=)
                          2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: c5g1rHsWNxDvIouk1n/dGRhPWzbyhhfN9823sucQoSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
                          rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 30 Jul 2026 00:10:41 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1247 (0x4df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
        Validity
            Not Before: Jul 23 00:10:42 2026 GMT
            Not After : Jul 30 00:10:42 2026 GMT
        Subject: CN=6a615c03-02d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:9a:14:b7:e3:aa:23:13:6f:64:96:91:b0:d3:
                    c0:86:ac:f2:e0:f1:f3:05:1b:04:7b:b9:ac:d0:71:
                    c9:e4:a9:7a:62:9d:ff:6f:15:69:e3:01:3c:c1:f7:
                    64:0d:97:18:45:d3:08:59:22:85:ed:0d:25:51:2a:
                    7d:7b:59:29:b2:1a:9f:eb:81:8e:fb:b2:9f:26:93:
                    73:6e:b6:15:a0:2e:86:d9:91:57:e8:c2:cb:8d:46:
                    b5:31:eb:cd:70:9c:0a:3f:8a:cd:d3:19:05:97:77:
                    99:cb:37:70:17:f5:2a:62:db:cb:0f:c1:41:f4:bc:
                    69:68:ba:18:99:0f:f5:d7:4a:e4:b2:57:e9:80:0b:
                    4e:91:d6:3c:fb:bd:b7:b5:80:27:95:b8:35:52:0d:
                    04:bf:cc:5b:4e:6d:e3:14:7c:94:55:7a:a3:78:01:
                    8e:b0:36:55:1b:9f:3c:33:c5:a3:38:e9:77:b6:5c:
                    09:9f:99:2e:31:88:4b:65:6e:be:7c:a2:67:96:ed:
                    6b:67:f4:c1:61:f9:2e:62:7c:5e:17:cc:ee:da:d3:
                    61:c3:be:90:ba:6f:85:9d:8f:66:91:7b:ee:b2:b3:
                    cf:bc:f4:6e:23:f3:81:ad:00:a9:04:b4:92:d0:79:
                    59:0d:0c:00:f8:98:c9:3d:df:08:16:c2:6a:02:57:
                    51:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:33:96:F8:4C:C2:FE:89:FE:42:48:60:6E:96:19:6A:E0:96:30:1F
            X509v3 Authority Key Identifier:
                keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c0:d2:dc:60:e2:77:80:1c:54:12:eb:1d:ea:a2:67:94:2f:c2:
         e2:80:50:2a:47:5e:a1:07:5f:fc:6e:71:b1:74:24:30:ee:29:
         02:5f:0f:34:f4:f8:7a:92:14:71:bc:67:2e:73:34:70:87:b0:
         b7:78:5a:54:40:09:e2:6e:29:95:05:95:dc:90:8d:df:64:e3:
         57:16:2f:2d:22:97:86:ad:a7:97:35:9b:ce:eb:73:e8:90:97:
         e0:ab:9f:e9:a3:3a:10:00:79:9c:7a:ad:33:94:53:4e:48:31:
         70:8a:0f:e3:03:63:35:97:d9:fc:62:43:63:9f:e8:ec:b5:26:
         f3:21:34:7e:20:bb:d8:85:d7:63:41:9e:24:5b:5c:1c:e9:85:
         64:5b:6f:c4:61:21:19:c9:83:39:49:84:17:9a:a9:5c:fc:c3:
         35:50:1c:02:5f:41:01:94:0e:42:cd:c9:23:d7:8d:3f:6a:3d:
         cb:06:33:35:35:24:0a:03:ae:e1:5c:e5:e0:6c:0e:0a:64:62:
         3d:fa:78:55:b8:66:c8:46:de:fd:d6:bb:61:1f:a0:c4:9f:48:
         2a:82:4f:82:7b:d8:29:50:4c:99:67:91:4a:3b:c4:58:96:f4:
         29:d5:20:22:0a:6c:59:4b:22:e8:3d:a4:4b:c4:e7:7e:cb:89:
         ba:79:df:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:02:27 2026 by rpki-client