Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
File:                     xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft (raw, json)
Hash identifier:          FFPAYFaRJv9y7M8ybv8TwKwhj3D3sMVSRRFtEjLqrC4=
Subject key identifier:   CC:F7:B8:4F:D9:92:03:89:6D:3C:8E:F1:F1:FF:1A:38:C7:49:84:B4
Authority key identifier: C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4
Certificate issuer:       /CN=A912D1D5/serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
Certificate serial:       025A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
Manifest number:          024E
Signing time:             Mon 27 Apr 2026 02:18:07 +0000
Manifest this update:     Mon 27 Apr 2026 02:18:07 +0000
Manifest next update:     Mon 04 May 2026 02:18:07 +0000
Files and hashes:         1: xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl (hash: mHlwXWLlXgVtOtk5FyjLSUDp4TupPP3qxVA0ym16HUU=)
                          2: 19E19DA0E5CE11EDB697BC74C4F9AE02.roa (hash: 41mYeLJTrr6m5wB9HGw37UApRa2JZ2ZaJVCcumD/aT0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl
                          rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 04 May 2026 02:18:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 602 (0x25a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912D1D5, serialNumber=C54525E9705BD69D61424DBEE7B0493F5FD6F0A4
        Validity
            Not Before: Apr 27 02:18:07 2026 GMT
            Not After : May  4 02:18:07 2026 GMT
        Subject: CN=69eec75f-5e13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:ec:2e:bb:86:a7:30:46:9d:cc:d7:11:fa:ce:
                    7c:f4:42:c0:8f:12:ae:25:f4:c3:78:59:39:11:c2:
                    2e:3f:a9:82:16:32:86:5d:60:12:69:b5:13:ab:e6:
                    88:55:a1:fd:75:4d:11:43:b8:ce:ae:de:94:c0:ec:
                    4d:86:b1:9a:fe:4f:21:7c:60:8d:78:31:27:68:2c:
                    2e:f7:92:70:9f:5d:30:f4:89:ff:e6:fc:bf:fc:1f:
                    e8:c8:5c:a4:6a:b7:39:eb:1c:13:c7:a5:fe:16:0a:
                    6a:22:86:42:a5:84:22:dc:b8:bc:da:38:b1:b5:df:
                    44:95:9a:12:d5:9c:0f:ba:f1:f6:43:55:1a:33:26:
                    45:37:4c:5e:5a:f9:c3:fb:11:a0:c0:2e:b7:a2:8b:
                    00:25:e3:2e:22:1e:61:15:92:b3:aa:d6:fb:73:55:
                    c4:ab:fb:05:55:07:4c:a4:26:44:62:64:71:a9:7a:
                    15:a9:61:c3:95:f6:23:6c:af:85:73:bd:2e:e2:4b:
                    16:08:ea:65:4c:ae:ed:a2:d9:db:e7:b6:63:3b:3b:
                    99:36:99:9b:16:53:8e:e8:58:78:98:9d:46:00:40:
                    2e:c6:b2:58:c1:eb:7c:bf:f0:04:0d:b6:80:71:cb:
                    30:a6:d3:9b:ee:5c:63:34:89:cd:da:38:1d:c7:45:
                    5c:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:F7:B8:4F:D9:92:03:89:6D:3C:8E:F1:F1:FF:1A:38:C7:49:84:B4
            X509v3 Authority Key Identifier:
                keyid:C5:45:25:E9:70:5B:D6:9D:61:42:4D:BE:E7:B0:49:3F:5F:D6:F0:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xUUl6XBb1p1hQk2-57BJP1_W8KQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912D1D5/343361EECC8C11EDA4C1A143C4F9AE02/xUUl6XBb1p1hQk2-57BJP1_W8KQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         54:c8:eb:b6:0b:0d:3e:e5:b3:6f:7f:f8:c7:a6:4c:24:03:de:
         d3:65:f6:bc:79:1a:21:bb:44:89:56:a1:4a:97:4f:b0:a0:91:
         75:ec:70:4a:3f:be:f5:82:26:2e:3c:e5:e7:74:51:11:e3:af:
         2b:f6:d5:6a:31:38:38:98:f2:b7:24:b9:b9:0c:77:4b:5e:35:
         61:c5:14:d5:47:72:1c:6f:4c:65:03:fc:69:7e:52:ce:02:68:
         b9:a9:30:99:92:ae:a0:41:f4:97:1b:f8:3b:6b:03:83:31:6e:
         e1:a2:04:cb:99:97:fb:1c:6d:14:c8:f7:0f:93:29:97:75:72:
         89:5e:ab:2b:f7:80:10:7d:bd:dd:45:9e:4b:e9:83:e1:fe:6d:
         fa:d3:03:2b:9c:1a:b3:76:86:85:8b:91:55:f3:ef:ca:8c:5b:
         72:fb:e6:c0:ff:37:81:f9:0c:ff:f8:e1:1f:64:e4:6c:3f:cb:
         50:c3:37:17:ef:ce:e1:5a:e9:e8:88:2e:04:6f:a8:97:86:71:
         85:e3:1c:32:11:9f:2c:5e:f4:38:ca:aa:4e:5d:52:6d:ee:6c:
         ae:95:76:8d:36:26:ee:b1:ad:0e:a8:7b:eb:97:15:9b:74:9c:
         26:1f:2e:9c:cd:19:8e:3f:3e:e0:56:c4:a9:4a:b0:77:cb:b3:
         1e:d6:64:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 28 07:24:17 2026 by rpki-client