Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
File:                     2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft (raw, json)
Hash identifier:          TaCEcqMvUNlIEZnmlIK2U8LJWNWFHrD6rMzbkEdkOxU=
Subject key identifier:   36:39:C8:EC:60:87:9A:EA:21:9F:2A:34:70:2D:09:C9:85:9C:EB:A1
Authority key identifier: D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80
Certificate issuer:       /CN=A9124D7C/serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
Manifest number:          1C
Signing time:             Tue 19 May 2026 08:49:36 +0000
Manifest this update:     Tue 19 May 2026 08:49:35 +0000
Manifest next update:     Tue 26 May 2026 08:49:35 +0000
Files and hashes:         1: 2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl (hash: zXR67a42kpPiS9ugXZ5/fH6dh6+f3HsHe6tQUWltCgo=)
                          2: 8C138F502CCA11F1960EC6ED91833773.roa (hash: xJmZuhv9rNcM/Fsd3fmDp03WFv+ujmJvez9T7ai4exw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl
                          rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 26 May 2026 08:49:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9124D7C, serialNumber=D9240BE52723E517F1E5475A1BCF94B8F08C0380
        Validity
            Not Before: May 19 08:49:35 2026 GMT
            Not After : May 26 08:49:35 2026 GMT
        Subject: CN=6a0c2420-a66f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6b:4e:bb:ff:ea:54:a6:67:c4:d1:69:e8:79:
                    ee:d5:16:33:86:92:5a:75:9c:b4:70:98:9a:2d:79:
                    53:53:85:75:74:8c:61:ff:86:28:6a:0e:91:eb:2e:
                    70:0f:6d:75:ea:7e:f5:ad:76:02:c0:0f:ab:9b:fc:
                    7e:63:52:cb:ce:f1:e1:98:02:b7:a0:6c:7a:c7:2f:
                    92:b3:81:a8:90:90:98:95:b4:2c:41:f5:58:5b:8d:
                    50:03:42:c4:fc:6b:86:6c:a0:96:09:79:3e:27:a1:
                    63:ce:70:28:29:93:77:28:17:bb:83:dd:1b:57:53:
                    11:7e:57:37:52:0a:98:1e:a5:e0:00:f2:f8:1b:a2:
                    ec:b7:4b:13:85:7b:90:45:68:ac:fa:eb:a2:f2:9c:
                    ca:cd:81:4c:f7:93:15:66:34:8b:6e:6f:b7:56:a3:
                    e5:60:7d:2e:ca:45:41:a7:ce:00:18:53:8f:56:5e:
                    7c:25:4d:ac:e9:32:ea:82:cd:9e:ef:46:f8:3f:9e:
                    ba:a7:78:41:d9:2b:28:e3:83:24:a9:77:1b:4c:11:
                    58:0d:05:77:f2:94:7d:6e:ac:25:ce:4f:0f:ee:5f:
                    fc:9b:f3:62:c5:b1:21:c2:66:f4:ca:54:34:41:bb:
                    04:20:d4:29:c7:05:40:e1:35:e0:bb:47:f4:f3:e2:
                    fd:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:39:C8:EC:60:87:9A:EA:21:9F:2A:34:70:2D:09:C9:85:9C:EB:A1
            X509v3 Authority Key Identifier:
                keyid:D9:24:0B:E5:27:23:E5:17:F1:E5:47:5A:1B:CF:94:B8:F0:8C:03:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9124D7C/A03EAAC62CAE11F1B276B315C8833773/2SQL5Scj5Rfx5UdaG8-UuPCMA4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         20:98:0f:69:14:9f:fc:46:50:cb:f5:a3:4e:e4:cb:18:8e:f9:
         c9:aa:7d:7b:e5:12:51:c0:df:7c:de:5d:e7:f8:fb:af:17:f6:
         8c:9c:2b:9c:91:34:84:72:a8:13:36:35:ef:bb:ce:ef:8c:f5:
         05:5e:1c:f6:e5:2d:0f:fb:54:af:e5:3d:2c:a1:10:b9:7c:d3:
         95:4f:6a:25:d2:7c:e2:55:37:7e:b7:e9:39:ba:0e:84:e8:48:
         79:4a:e5:d0:d0:b1:e7:ef:96:b7:73:01:bf:78:cb:f6:90:db:
         27:10:6b:6f:44:94:3c:cc:b8:87:a4:2a:c5:f5:77:ff:a5:4b:
         7c:79:57:f9:bd:0c:15:fd:97:d0:9b:74:4f:cb:eb:1d:9c:96:
         f0:55:21:66:f8:53:0d:12:38:ee:e3:13:54:ed:22:31:54:cd:
         2c:71:4d:7b:43:f8:37:33:e1:0a:1d:fe:47:18:ff:09:4b:10:
         00:03:66:1c:31:3b:05:02:e6:db:5f:08:47:01:45:60:b7:b5:
         94:d8:0e:7a:dd:fe:7a:45:21:21:8e:1f:4c:5c:f4:91:8c:d7:
         32:34:af:73:93:69:48:c0:a1:83:2a:05:59:88:6e:57:69:8f:
         98:d6:aa:78:0a:a2:c8:36:c5:d3:97:bc:a4:cf:dd:fa:98:18:
         9d:9d:02:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:50 2026 by rpki-client