Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
File:                     U73ibYJfZ3-axChvmmdmH1xJtWk.mft (raw, json)
Hash identifier:          mhgAIYcPvbKcnJsj5pkntapoV1s7QVBSvogr5cnOQuc=
Subject key identifier:   AD:CB:1F:B9:E1:47:99:AA:59:5C:B4:6E:79:7A:CF:E6:17:D9:49:FF
Authority key identifier: 53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69
Certificate issuer:       /CN=A919E1AE/serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
Certificate serial:       09E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
Manifest number:          09BA
Signing time:             Tue 12 May 2026 20:05:54 +0000
Manifest this update:     Tue 12 May 2026 20:05:54 +0000
Manifest next update:     Tue 19 May 2026 20:05:54 +0000
Files and hashes:         1: U73ibYJfZ3-axChvmmdmH1xJtWk.crl (hash: y7fcwcsMEOflPk2OO/tC3HJUdQ4zJq7CaHZUl+Y4cYg=)
                          2: C8DC6BD8EBF311EEAD0C015FC4F9AE02.roa (hash: mmVost6mx+Nsnlt25bJ3nZWYDauWfkhD71L+YP06Tjs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl
                          rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 19 May 2026 20:05:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2532 (0x9e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A919E1AE, serialNumber=53BDE26D825F677F9AC4286F9A67661F5C49B569
        Validity
            Not Before: May 12 20:05:54 2026 GMT
            Not After : May 19 20:05:54 2026 GMT
        Subject: CN=6a038822-6f33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:af:79:75:d7:ab:64:23:da:04:b2:81:5e:17:
                    b7:dd:2d:b3:cb:fd:ab:7b:c8:7e:f6:58:1e:bd:24:
                    3e:fa:af:c1:8d:86:eb:a1:b7:f4:cc:e9:54:90:fb:
                    aa:77:3f:5c:de:23:be:b3:64:fd:16:93:dd:af:11:
                    b2:06:25:8d:d5:9b:d1:a3:61:ac:26:ca:cb:57:78:
                    4f:71:9c:c2:27:8f:31:76:e3:62:7d:93:68:94:ba:
                    3c:34:40:41:88:25:66:17:6c:b2:5c:80:42:a5:57:
                    98:ef:93:1f:4e:c3:89:ec:a6:01:25:82:f4:94:18:
                    20:e8:2b:70:43:20:98:7c:14:1c:f1:85:af:b2:af:
                    15:2e:1f:94:94:a0:03:64:97:d5:20:84:c8:de:3e:
                    fc:7b:fc:0d:3c:43:f3:02:b8:23:a6:35:15:f8:03:
                    a5:ff:7a:cb:f8:93:62:67:4c:c8:32:e8:19:e6:48:
                    51:b5:d1:ec:b2:6a:89:80:d0:9d:1f:01:7d:3d:72:
                    bb:fb:45:e7:21:11:8c:e3:ce:e1:02:dc:db:e8:84:
                    e5:65:5c:44:f3:53:bb:fc:17:6a:0d:99:39:3d:40:
                    23:04:cf:e9:fd:4b:16:61:eb:c5:b9:17:09:25:78:
                    2b:9a:cc:1c:3c:43:8b:d6:70:4b:d5:d9:3e:3d:8b:
                    cf:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:CB:1F:B9:E1:47:99:AA:59:5C:B4:6E:79:7A:CF:E6:17:D9:49:FF
            X509v3 Authority Key Identifier:
                keyid:53:BD:E2:6D:82:5F:67:7F:9A:C4:28:6F:9A:67:66:1F:5C:49:B5:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U73ibYJfZ3-axChvmmdmH1xJtWk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A919E1AE/B40BB1B8B12E11EA9A95B56AC4F9AE02/U73ibYJfZ3-axChvmmdmH1xJtWk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         71:72:5a:64:99:e3:ec:b5:b0:7b:fb:17:55:57:19:71:91:00:
         3c:52:69:26:8c:3a:e2:79:f4:37:37:9a:a8:06:6e:c7:9a:19:
         e6:eb:b4:41:4e:90:05:83:95:f7:c4:b1:51:73:f3:4b:fb:da:
         51:c8:9f:09:e3:51:47:b5:be:bc:aa:0a:27:41:f2:83:89:c3:
         24:68:21:0b:40:4f:63:ed:e1:8f:f0:19:07:24:53:73:58:66:
         48:6c:fc:c9:c2:8d:8d:92:5e:1a:69:55:20:fe:c8:37:f0:f8:
         ce:1a:61:7a:68:c2:fb:ab:01:2f:92:06:d5:62:9d:b6:6c:5a:
         70:21:43:dc:00:e7:22:3f:43:39:d1:e1:28:c8:0b:2d:63:ce:
         d5:d0:ee:a5:a0:09:69:51:5f:58:89:27:46:51:60:15:94:ef:
         47:38:71:61:06:bc:68:26:17:33:60:de:91:72:08:91:90:38:
         b0:8b:88:8a:8e:ad:81:b5:db:e4:fb:d5:84:a4:1b:87:99:0e:
         56:a9:8a:20:5c:8a:38:79:04:49:0f:d4:4a:7c:fd:fc:8b:c1:
         90:64:f8:dc:d8:80:a5:bd:2d:4d:0c:37:bc:f6:92:47:9f:f9:
         42:d3:0b:53:45:c2:f7:3c:8f:e2:ba:23:aa:c1:e8:83:2e:a6:
         23:f2:03:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 16:01:05 2026 by rpki-client