Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          4i11OXcm2dlsTxd9r+0XPmIVMBhbxdGTPzu16Z78JB0=
Subject key identifier:   80:32:B8:6D:1A:FF:17:29:C8:00:6D:BB:D3:E2:5D:39:74:0D:50:C3
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       0249
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          0231
Signing time:             Mon 11 May 2026 02:49:32 +0000
Manifest this update:     Mon 11 May 2026 02:49:32 +0000
Manifest next update:     Mon 18 May 2026 02:49:32 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: jv9CzcfRvJ6Zf0TuymGxweinrUcKeb0ktESJ9IWpIFI=)
                          2: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: 45hyCfM+o4HKQEPHEPnA/AUjri6G28j6JkHXuLahCZI=)
                          3: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: zX2wxhpVdTYgnBLbUW2HFAPDNMT7jIK2t1BaorSnmuA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 18 May 2026 02:49:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 585 (0x249)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: May 11 02:49:32 2026 GMT
            Not After : May 18 02:49:32 2026 GMT
        Subject: CN=6a0143bc-80fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2b:04:18:2f:4c:ec:c6:b3:2b:7e:02:6d:f2:
                    ab:c1:1e:c6:5f:91:76:0f:5c:d6:9f:e5:ec:04:4f:
                    74:9e:79:79:ea:e1:22:25:b0:16:43:97:8b:4a:c4:
                    f2:f8:8c:4e:5a:82:10:70:b8:df:c6:92:10:d8:77:
                    49:be:21:cb:dd:d9:f5:8f:03:9d:c7:cf:c9:db:65:
                    9c:da:e0:c8:05:03:02:ce:f4:58:1f:f8:93:fa:72:
                    b4:bf:f7:1a:8a:3c:04:3b:35:3c:7f:41:1a:a4:89:
                    f0:90:69:f7:eb:d1:94:16:4f:b9:bb:29:d6:03:cd:
                    11:73:be:60:7b:c4:e2:f2:2b:ba:9a:d1:4b:7a:fa:
                    03:c2:20:dc:2a:df:2e:80:3c:a4:4b:80:3b:40:ad:
                    dc:89:b5:e0:c0:64:d0:68:c3:b6:41:ad:c5:30:82:
                    ff:96:fa:e2:09:03:23:ce:2d:c6:6a:67:45:6a:89:
                    71:28:82:b8:da:ee:a1:55:6e:5d:d3:82:58:84:97:
                    8d:ec:1c:c2:27:25:ce:a0:29:1c:70:cb:77:e2:ef:
                    43:30:2b:5e:6e:9b:5e:7a:72:aa:aa:0c:c3:8d:5f:
                    34:33:c5:b3:31:54:ae:b3:5b:13:7f:2e:46:43:93:
                    46:a9:f3:8c:f7:ac:e7:ad:40:76:2f:8a:24:a7:af:
                    d7:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:32:B8:6D:1A:FF:17:29:C8:00:6D:BB:D3:E2:5D:39:74:0D:50:C3
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a8:72:7d:ef:b7:e7:6f:1f:f3:eb:57:21:13:98:85:26:80:8f:
         30:e5:bd:7c:66:ab:31:bc:b9:d3:ed:60:3e:00:5c:f4:ec:b4:
         e9:6b:a2:18:f6:68:0c:9f:99:e3:96:14:86:a9:77:1b:ff:b2:
         cd:80:a2:c7:ee:be:80:cc:6f:4a:99:87:89:33:a4:a6:1b:68:
         5a:31:48:2d:b5:17:6e:5b:2b:39:3c:11:e1:b4:3f:0c:44:25:
         9b:55:ef:4e:53:b1:a8:33:d9:89:d2:f5:51:15:9c:ad:1a:b6:
         b8:72:30:54:a5:21:ec:c0:d6:ad:de:1e:a0:d9:87:bb:d7:c5:
         28:8d:cc:59:c8:e6:02:c9:3c:ea:07:49:ac:b6:86:2e:36:58:
         0a:f8:04:cf:ac:a3:f6:98:3b:66:c3:23:97:77:ad:37:4c:e6:
         f0:70:23:58:a1:6e:e1:5e:6f:20:3c:4e:74:c3:7b:dc:51:d6:
         a3:0f:76:51:29:a4:3a:0c:d0:c4:59:b0:a4:5c:3d:6c:18:52:
         38:e9:81:6e:d1:1f:3a:be:75:be:8c:f3:43:49:08:e9:00:9d:
         a2:1a:ad:f4:f3:42:ba:3f:e2:88:91:f6:3e:3b:4d:33:44:e4:
         eb:87:9a:ca:64:f1:f3:67:9b:ac:49:a4:27:07:dc:3c:6f:1f:
         82:18:e9:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:32:04 2026 by rpki-client