Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
File:                     uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft (raw, json)
Hash identifier:          5Q76JnzXIOyCDEZJBR3+LyZMqo33mVFpcljGfuY8PDM=
Subject key identifier:   85:A1:C6:80:6E:C9:CA:03:19:09:97:80:94:CB:FB:C5:B2:EE:81:7B
Authority key identifier: B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68
Certificate issuer:       /CN=A91FA851/serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
Manifest number:          01B5
Signing time:             Wed 13 May 2026 04:05:06 +0000
Manifest this update:     Wed 13 May 2026 04:05:06 +0000
Manifest next update:     Wed 20 May 2026 04:05:06 +0000
Files and hashes:         1: uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl (hash: 8gCQjNQJgw1Tfc3kxhCJue5Q3+rzqMtc0/HKcxk6iN4=)
                          2: 8FD49B16BAE411EE9198A471C4F9AE02.roa (hash: 0ESXESaf1Km8hU3mbKXTS2edVIPzUkaWWbUdYQNfwzs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl
                          rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 20 May 2026 04:05:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91FA851, serialNumber=B9250FDE3FABD59FA5608230FEA7A23C4B4C8968
        Validity
            Not Before: May 13 04:05:06 2026 GMT
            Not After : May 20 04:05:06 2026 GMT
        Subject: CN=6a03f872-63a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:3e:4b:20:14:98:42:65:4c:8f:63:59:f5:f2:
                    f7:9e:4f:e8:0f:5e:63:51:8f:23:38:05:24:54:dc:
                    1c:f8:5c:e7:d9:b8:e5:55:96:32:56:df:62:17:b0:
                    d7:0c:80:f3:5d:4a:8a:3e:e2:88:74:19:ce:cc:05:
                    b5:df:7b:c5:6a:4c:e2:10:47:b2:d3:27:36:ab:4c:
                    d1:6a:eb:5c:c0:21:cf:86:2b:69:04:63:3d:e1:68:
                    8c:40:77:84:6f:ad:78:82:f6:3d:e9:11:da:69:27:
                    15:76:49:f1:84:1b:08:b1:91:b4:5d:d8:7c:8c:56:
                    f6:82:86:58:2e:db:86:f6:ad:c1:87:2d:2b:f2:5f:
                    33:b9:9d:a2:61:d5:21:40:75:a3:85:df:27:02:de:
                    46:7c:34:c8:81:24:0a:f0:dc:f3:d6:8e:74:7a:94:
                    cb:7e:a0:3b:ad:39:b5:2e:08:2b:d0:27:2c:81:56:
                    97:2a:4b:3f:26:61:ea:1f:10:54:5c:03:f9:94:8f:
                    e6:ee:08:a1:a4:c2:61:e7:d6:1e:30:f7:e2:63:2e:
                    ad:d6:02:06:b6:28:3e:15:6a:61:2c:5a:3b:c2:09:
                    a8:f5:f4:cb:21:0d:b4:fa:52:18:15:ce:ad:19:a7:
                    cd:8c:bc:9d:21:1d:8c:c8:3c:f8:67:3c:29:1a:6f:
                    6c:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:A1:C6:80:6E:C9:CA:03:19:09:97:80:94:CB:FB:C5:B2:EE:81:7B
            X509v3 Authority Key Identifier:
                keyid:B9:25:0F:DE:3F:AB:D5:9F:A5:60:82:30:FE:A7:A2:3C:4B:4C:89:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91FA851/95A6119CB9DF11EE94B4242AC4F9AE02/uSUP3j-r1Z-lYIIw_qeiPEtMiWg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:6f:98:ee:3b:99:f4:2f:2b:e3:45:28:35:96:cc:b3:56:
         51:f3:89:35:ff:a0:1e:12:4e:b3:6d:60:4a:9d:a6:3f:0a:7f:
         77:bc:d6:b4:41:f7:62:cc:fe:5d:e4:68:c1:ca:56:ea:f7:c8:
         c3:ca:01:8d:ac:63:87:57:fb:2f:ec:fc:1b:ba:41:ca:e8:8d:
         35:d3:e7:11:78:78:69:6e:70:58:66:8b:09:9d:a5:66:c9:8b:
         fe:54:bd:f6:ae:24:da:3b:67:d0:4c:e7:3b:65:f9:68:b9:5f:
         36:61:1b:6b:fe:2f:d6:81:6b:4f:98:18:2b:2b:56:2d:ce:b4:
         c9:45:12:28:e7:fd:0a:bf:96:80:13:2c:0b:23:c8:a5:c5:4c:
         9f:65:02:47:26:ec:b0:84:79:d0:05:9e:5b:cb:5d:c6:7a:5c:
         88:ca:0a:43:6b:f0:6c:8e:d8:53:62:9e:31:b1:a1:2c:1c:50:
         f6:c8:89:a0:32:fb:ae:32:18:f7:c9:1f:2e:b1:82:59:ea:46:
         c7:6b:b8:d1:bb:de:c4:74:72:01:79:b7:d5:22:ab:c4:e0:7c:
         51:37:72:02:b4:5f:63:b9:9b:08:73:ae:99:0e:c8:fb:84:2d:
         7d:e2:bb:a1:b3:c7:99:d0:d1:a5:8b:52:00:a2:a6:b1:0c:09:
         06:69:90:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 10:05:47 2026 by rpki-client