Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
File:                     U0krmdbQfZSfaQqTaVsUkoIWmi4.mft (raw, json)
Hash identifier:          qqhnfsdhpPl4UiT++ITB9tV6lugP+XCgfaDu6fdN6IE=
Subject key identifier:   85:AE:45:94:67:76:23:8A:F4:2C:0B:2B:4B:42:8C:62:81:F6:FA:22
Authority key identifier: 53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E
Certificate issuer:       /CN=A9111623/serialNumber=53492B99D6D07D949F690A93695B149282169A2E
Certificate serial:       7F
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
Manifest number:          7A
Signing time:             Mon 01 Jun 2026 05:09:10 +0000
Manifest this update:     Mon 01 Jun 2026 05:09:09 +0000
Manifest next update:     Mon 08 Jun 2026 05:09:09 +0000
Files and hashes:         1: U0krmdbQfZSfaQqTaVsUkoIWmi4.crl (hash: 8PNT15eFjv+6aJ7mpTVriFFkjMwSfWG/GDL+eZ4/IH4=)
                          2: 0EFA4E50BEB111F0B971EF51C4F9AE02.roa (hash: U7Wzt+B8FiIYGK+MKYg3UA1qAj6b/eB2Gqgc5UuWazk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl
                          rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 05:09:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 127 (0x7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9111623, serialNumber=53492B99D6D07D949F690A93695B149282169A2E
        Validity
            Not Before: Jun  1 05:09:09 2026 GMT
            Not After : Jun  8 05:09:09 2026 GMT
        Subject: CN=6a1d13f6-4628
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a7:6e:b4:dd:26:f5:b7:b5:2d:29:99:b3:c5:
                    a4:eb:f0:c5:2e:3e:2d:29:c2:7e:71:2b:b3:21:33:
                    2c:ff:af:3e:69:17:0c:19:47:91:2d:73:d4:1e:29:
                    c0:55:e5:10:d9:8b:6f:22:47:27:40:89:49:50:3a:
                    37:0b:09:2f:a6:fd:88:3d:b9:4b:b0:ee:52:af:ef:
                    89:31:f3:dd:06:ab:1d:1b:db:08:c0:3f:24:01:9a:
                    32:3c:1e:0d:af:de:38:8d:f1:7d:05:d2:13:d0:0a:
                    52:91:60:c3:a9:dd:f4:bf:db:3b:d6:c8:bb:37:d4:
                    37:4d:d6:68:8d:71:bb:d7:bb:de:2f:a1:10:9e:bf:
                    a9:90:8f:76:1a:55:71:83:cd:97:62:ff:22:96:02:
                    35:b0:3d:45:49:74:e3:39:f8:71:4d:23:f4:bc:47:
                    69:9b:50:02:46:ee:88:dd:1f:48:82:5d:e6:06:2c:
                    04:80:63:6e:9c:2c:56:c5:d1:3b:28:4a:12:f8:b0:
                    2f:ca:64:51:8e:24:66:57:a1:1f:f8:9d:74:1d:d8:
                    17:67:b6:fd:20:5e:a0:47:e3:fa:4d:c8:cb:68:76:
                    46:9b:41:e2:b9:ca:aa:01:52:79:b6:93:e8:0b:c2:
                    4c:80:1d:6a:8c:34:11:5a:eb:41:10:6b:37:e4:d4:
                    f2:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:AE:45:94:67:76:23:8A:F4:2C:0B:2B:4B:42:8C:62:81:F6:FA:22
            X509v3 Authority Key Identifier:
                keyid:53:49:2B:99:D6:D0:7D:94:9F:69:0A:93:69:5B:14:92:82:16:9A:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/U0krmdbQfZSfaQqTaVsUkoIWmi4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9111623/907000F6AB2411F0AFCE5D2FC4F9AE02/U0krmdbQfZSfaQqTaVsUkoIWmi4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         31:18:41:21:be:29:fe:f7:b0:93:86:67:c8:59:d0:40:c4:e9:
         c3:34:33:73:f2:9d:a2:ef:a3:ab:43:7e:63:90:39:a9:27:1a:
         d9:5c:27:15:dd:27:e8:1b:23:51:69:f4:e0:22:bd:a5:da:6b:
         92:b2:02:25:76:da:90:af:21:83:52:86:ca:11:a7:a2:7b:ca:
         de:14:44:ed:c5:30:ce:0e:f5:d9:65:9b:08:aa:5e:78:d7:f2:
         74:79:59:55:1e:8c:a4:8d:d5:46:98:a7:af:af:01:41:31:8c:
         e9:d9:70:de:1d:49:78:0e:01:7c:30:34:08:d0:31:d3:03:d2:
         d7:f4:cb:b1:0b:41:86:79:cc:16:f5:b8:f5:83:01:59:0a:69:
         79:ee:09:79:17:67:94:71:fa:b2:68:18:a1:69:59:3f:f6:71:
         27:5a:72:6d:3d:d4:41:29:5d:7d:e6:16:01:f0:3c:46:13:5c:
         98:b7:0a:0d:c5:e6:72:a3:62:bd:d2:5b:2a:e0:4e:10:17:a3:
         71:06:9b:7c:a7:79:f2:b3:14:7c:de:78:8e:b1:cb:88:8d:46:
         26:94:41:75:d4:48:b4:5b:ab:3f:59:ec:a1:aa:78:44:01:54:
         cd:11:fc:a2:b2:92:91:e7:1c:ac:fc:2a:74:0c:c9:4c:b1:c4:
         7a:21:37:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:18:40 2026 by rpki-client