Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
File:                     U150NDn0nPv9SODvV-b6fUsxGq8.mft (raw, json)
Hash identifier:          IgBobcIyPo287G4LivlwHawGVNd+CqN29pFqFNKA9Lw=
Subject key identifier:   4E:7C:55:83:2B:66:7B:EB:42:09:3D:7A:6A:3C:9C:E0:D9:F7:5E:4C
Authority key identifier: 53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF
Certificate issuer:       /CN=A9116372/serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
Certificate serial:       12
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
Manifest number:          10
Signing time:             Sat 07 Mar 2026 06:56:00 +0000
Manifest this update:     Sat 07 Mar 2026 06:56:00 +0000
Manifest next update:     Sat 14 Mar 2026 06:56:00 +0000
Files and hashes:         1: U150NDn0nPv9SODvV-b6fUsxGq8.crl (hash: n0Y+ifISIx/rBXg2ico+JS/0EiNKYDKiG44bSdrrQkA=)
                          2: 4FF63D680FE911F1BED32952083D8C67.roa (hash: sI4cZb7xgkVx2AiICI7xLPh0ufh1JKIneu8TQO3RfzA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl
                          rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 14 Mar 2026 02:50:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9116372, serialNumber=535E743439F49CFBFD48E0EF57E6FA7D4B311AAF
        Validity
            Not Before: Mar  7 06:56:00 2026 GMT
            Not After : Mar 14 06:56:00 2026 GMT
        Subject: CN=69abcc00-6dc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:35:50:60:f3:db:91:ad:ed:8a:22:13:1b:c0:
                    7a:79:7e:b0:d1:d3:96:01:d7:aa:57:ba:91:61:b8:
                    83:d1:e9:f0:da:20:13:c2:e1:58:54:8f:0b:4f:73:
                    51:c0:3f:d1:46:ce:dd:06:d2:bb:57:02:f0:c4:ff:
                    07:4e:38:06:8a:53:5a:8d:ff:76:cb:b0:eb:db:b7:
                    b7:e6:1f:dd:68:26:2a:2e:0a:a0:ec:6e:bd:ca:28:
                    be:d6:66:24:81:44:0e:2b:2e:0f:47:29:cd:fa:a1:
                    b4:f4:ca:18:9a:3b:16:29:cf:87:64:c8:99:49:3c:
                    18:dd:30:8f:c9:89:13:27:4a:2d:9e:78:ef:bb:ac:
                    bb:5c:f5:03:c0:c2:9e:51:fd:ac:68:52:34:7b:65:
                    a6:ac:82:ee:56:59:f3:4b:c5:cf:be:da:7a:c9:62:
                    fa:5b:4e:b6:93:1d:6a:3d:ed:b7:20:92:8d:de:09:
                    83:2a:5c:15:97:fa:45:91:53:e3:05:33:12:06:95:
                    85:d9:19:bb:a4:72:ee:18:b9:36:48:38:a5:7d:9e:
                    7e:fe:5c:63:3b:1a:a0:0e:84:ff:ed:c9:5b:47:11:
                    7e:51:60:b7:fc:e7:4d:c2:7d:55:3d:e0:d2:d2:dd:
                    6b:99:09:6d:56:69:17:c3:ca:86:d1:26:3d:0e:08:
                    a6:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7C:55:83:2B:66:7B:EB:42:09:3D:7A:6A:3C:9C:E0:D9:F7:5E:4C
            X509v3 Authority Key Identifier:
                keyid:53:5E:74:34:39:F4:9C:FB:FD:48:E0:EF:57:E6:FA:7D:4B:31:1A:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/U150NDn0nPv9SODvV-b6fUsxGq8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9116372/E0C5EAE60C5611F199E2538B123D8C67/U150NDn0nPv9SODvV-b6fUsxGq8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:06:4e:3a:2f:1d:82:2a:47:cc:d8:c0:33:e3:b3:e0:e8:75:
         8c:3e:ab:a4:96:2a:5f:ee:4b:25:ef:9f:a4:b1:f9:00:0a:6a:
         44:e2:98:7d:26:20:d7:7d:80:3e:f3:83:63:fc:52:5a:6d:e8:
         7e:c6:36:bd:7e:93:61:67:82:96:f4:bd:b2:e7:cc:62:ca:f4:
         9d:35:6d:91:e1:a9:a5:20:29:11:7f:d3:0b:1d:60:ab:b5:5f:
         bd:40:d2:b8:d8:29:83:6a:cc:09:fa:ea:01:80:9a:40:10:41:
         a6:01:fd:2f:42:4d:16:c6:dc:b8:8c:7a:03:a6:a1:3d:86:8c:
         40:3e:5b:be:b7:96:7f:ae:85:b3:d2:03:9d:01:a0:ae:c7:ed:
         7e:7b:89:9f:bc:8b:60:75:79:49:ec:6d:36:a0:2a:6f:ab:e2:
         1e:56:9b:d3:21:ef:fb:30:6d:ce:5e:26:ab:6a:26:3b:05:7a:
         40:ae:56:c7:7e:72:e0:b6:fe:5a:87:8a:96:ee:46:33:18:06:
         f7:b2:46:7a:34:2b:fc:cd:fa:2e:bb:29:da:3c:3c:fb:95:ef:
         a3:33:5e:bf:a8:8e:b2:25:7e:79:99:98:6e:2d:d2:69:dc:74:
         e3:2e:db:01:1a:a6:51:ad:b6:1b:04:2b:3f:54:36:07:10:95:
         35:d2:01:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 14:31:55 2026 by rpki-client