Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          hE8+9n+DqMl6MQTW9ShA9KYW3hz1LtlZJ1e57IZP0Kw=
Subject key identifier:   10:13:8F:9D:4D:75:03:76:1A:03:A5:44:6A:FA:E4:DB:CB:56:94:61
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       75
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          66
Signing time:             Sun 05 Apr 2026 07:26:33 +0000
Manifest this update:     Sun 05 Apr 2026 07:26:33 +0000
Manifest next update:     Sun 12 Apr 2026 07:26:33 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: SzlrYdZMcAj9FFOweEgze8Mpd01U8foHqXGBfarDtIU=)
                          2: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          3: 18451E6C2C8011F18C554E5FB9833773.roa (hash: 0ajQVVt6txOWHrToCyfiYFAV+lg67YKLG6n9YvJrg14=)
                          4: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: hNDoKvtTaJr3/l4SpLoIbXrusm7ipL9CQHs8BHkoeEc=)
                          5: 03E9601C2E3E11F18FB4E28692833773.roa (hash: KBDF+qCnvbkS3zAFCAW3rveKS8qVa82y4wo236YyG7M=)
                          6: 048707902E3E11F18FB4E28692833773.roa (hash: K3CKFq9dj9GC5sZcbxnP9CeuT3Ddzdh/+xr7StrmVGQ=)
                          7: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
                          8: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: OMcpNf88AE2cPyG8acihz1Bkk8xz4Ahg+L34+LyVpoE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 12 Apr 2026 07:26:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Apr  5 07:26:33 2026 GMT
            Not After : Apr 12 07:26:33 2026 GMT
        Subject: CN=69d20ea9-4b24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:d1:62:90:de:50:39:ce:76:ec:84:86:5e:
                    b2:a8:6c:53:14:f2:6b:f7:78:b0:fe:f3:df:b7:26:
                    d8:b4:a9:dd:b8:ed:a9:40:91:4e:48:d5:c1:dd:3e:
                    9e:d3:cd:48:98:e4:a3:28:1a:e1:c0:31:1a:59:7e:
                    87:99:b8:3a:8e:e8:58:a6:8c:9f:88:20:38:38:ee:
                    41:8a:3f:72:97:b4:d8:34:f5:45:b9:25:ab:3c:39:
                    55:d5:fc:fb:d5:47:00:b3:47:da:bf:ec:60:2b:ba:
                    8a:8f:47:dd:85:7b:a7:2a:f2:ca:2c:c9:4f:20:09:
                    a1:71:d8:b0:48:e8:ab:d5:19:96:89:99:c8:8b:d6:
                    53:9c:a4:d1:a5:6a:18:3a:a4:9d:bc:28:b0:15:18:
                    cc:c7:29:85:97:bf:0f:8e:e6:62:32:83:aa:89:d7:
                    ae:8f:59:12:8c:8c:f7:e5:98:23:33:07:42:05:46:
                    ae:66:ee:c6:64:55:da:71:b3:f5:87:ea:77:7e:d6:
                    39:eb:06:28:28:b9:f2:4a:08:ad:f2:5b:8e:40:bd:
                    f9:97:26:66:ca:ec:12:4b:9b:cd:a7:c9:c2:01:ae:
                    d8:0a:2b:6c:03:8b:be:80:b4:cd:5c:40:2f:c5:75:
                    62:bb:d4:08:85:17:fd:15:6a:03:26:5b:8f:e0:47:
                    01:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:13:8F:9D:4D:75:03:76:1A:03:A5:44:6A:FA:E4:DB:CB:56:94:61
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         f2:cf:f5:18:50:06:fe:c5:cd:b0:6a:69:4c:8b:90:19:d4:84:
         9b:a1:16:3e:e2:9c:bf:2e:3f:3d:14:f5:b8:70:b5:f8:75:92:
         28:00:1c:4d:94:72:f7:c8:a7:f4:7e:61:df:7a:1d:ff:2e:ac:
         85:21:37:e4:16:a5:29:16:5d:51:09:8a:b8:9f:80:fa:45:3b:
         cb:9e:14:4b:5b:33:cc:15:93:e9:d4:a2:38:e5:37:8b:42:a2:
         a0:54:2d:7e:5d:52:ad:8e:f5:81:9b:72:32:99:71:ed:d9:02:
         35:c8:eb:41:3b:67:b3:cc:6f:8f:cd:61:f4:98:55:d3:c5:35:
         b9:ab:fc:2b:c4:0a:a8:55:87:63:bf:5e:72:8e:3b:6a:45:03:
         6d:31:41:2d:2c:54:60:f3:6f:e2:0a:f1:dc:42:fc:a3:49:6e:
         e7:67:52:99:09:da:69:b4:5d:47:f7:ae:e2:f9:7e:0a:f5:03:
         90:da:97:47:86:c8:42:fe:84:ea:b4:69:fb:6c:88:d8:c3:89:
         0d:34:0e:8b:d1:d5:83:99:c0:b1:0e:59:a5:05:21:07:aa:f6:
         d6:79:e2:58:bd:d3:7d:48:2a:04:97:2e:fd:57:5a:c2:c6:81:
         30:b5:ec:27:68:08:65:03:0c:4e:30:61:c0:22:c1:54:96:d2:
         0a:19:0c:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 5 19:41:30 2026 by rpki-client