Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
File:                     yUoDUOcJ9WwjluMLRwyLXh37FwA.mft (raw, json)
Hash identifier:          CjJ3TbyRG0jAi7/p2UnP0pqK85LuObU14YUjL9jIxXs=
Subject key identifier:   6A:E5:D9:7A:AA:59:AF:32:C8:FD:71:4C:19:60:54:89:17:11:40:36
Authority key identifier: C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00
Certificate issuer:       /CN=A9137992/serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
Certificate serial:       153C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
Manifest number:          1537
Signing time:             Thu 04 Jun 2026 16:48:27 +0000
Manifest this update:     Thu 04 Jun 2026 16:48:27 +0000
Manifest next update:     Thu 11 Jun 2026 16:48:27 +0000
Files and hashes:         1: yUoDUOcJ9WwjluMLRwyLXh37FwA.crl (hash: MzVI39UmpNttgH03rzDxVg6O212nZIj77zaQIQwNGLA=)
                          2: 811B0DF274CB11EF941F0A71C4F9AE02.roa (hash: hJT4usZf+BKSETDBQrM6NJ4ciacXvVznmaEzi+BU4ik=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl
                          rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 16:48:26 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5436 (0x153c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9137992, serialNumber=C94A0350E709F56C2396E30B470C8B5E1DFB1700
        Validity
            Not Before: Jun  4 16:48:27 2026 GMT
            Not After : Jun 11 16:48:27 2026 GMT
        Subject: CN=6a21ac5b-fa5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:c1:11:68:bc:d9:5d:37:d5:fe:30:e8:fd:
                    e0:9e:58:49:c4:bf:85:0f:67:35:93:54:4f:dc:b1:
                    db:c3:1c:41:4f:70:18:a1:19:dc:b8:a7:62:8d:c8:
                    74:c4:fb:15:46:7d:bb:23:55:d1:4b:d4:fe:83:7d:
                    83:41:ad:a6:9b:cc:ea:34:e0:00:71:dc:c5:91:5f:
                    d0:32:f6:c1:60:8d:6b:7e:56:10:d1:a2:d8:02:01:
                    45:e4:2a:74:45:bf:b8:53:72:75:82:f3:50:ba:b4:
                    99:63:f8:af:cb:40:64:6c:a4:01:00:95:1f:73:74:
                    09:83:79:89:9b:0e:e1:bf:dc:77:51:62:2f:35:7c:
                    9a:c2:50:e5:d8:96:7c:14:61:82:c3:32:c5:44:02:
                    ae:e7:27:76:19:21:fb:cc:5b:00:f2:64:e7:70:56:
                    bb:3c:75:52:0a:f5:74:be:45:55:df:aa:33:64:7f:
                    c2:b3:9e:7b:c7:4a:a4:10:3e:c3:28:10:10:cd:cb:
                    19:46:fa:bc:28:cb:1e:d4:f1:bc:32:67:6b:09:35:
                    6b:00:b6:de:f9:c7:41:a0:e6:17:5e:95:84:fd:7d:
                    12:aa:4f:62:27:34:3c:e4:ca:16:c4:9d:c1:8a:4e:
                    02:9b:2b:39:9b:4b:91:e0:26:05:16:b7:13:b1:a1:
                    5d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:E5:D9:7A:AA:59:AF:32:C8:FD:71:4C:19:60:54:89:17:11:40:36
            X509v3 Authority Key Identifier:
                keyid:C9:4A:03:50:E7:09:F5:6C:23:96:E3:0B:47:0C:8B:5E:1D:FB:17:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/yUoDUOcJ9WwjluMLRwyLXh37FwA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/0232834867CC11E8AD843963C4F9AE02/yUoDUOcJ9WwjluMLRwyLXh37FwA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         87:19:df:4c:19:2e:96:7e:52:d4:70:a3:62:72:22:48:2e:32:
         70:7e:c0:fd:be:23:5b:f9:8b:dc:03:23:22:f9:dd:6d:eb:f6:
         b0:86:da:ec:1d:a7:d3:31:9b:a7:27:0f:ce:5c:61:cd:d6:9d:
         7d:fd:76:b1:7c:55:80:5e:95:89:9c:a1:5f:53:d0:4c:8b:de:
         a2:13:f8:c6:24:b7:8b:9f:b4:23:c1:a9:da:05:f6:88:d8:b8:
         a4:6c:2c:d8:e9:01:a7:7e:ed:48:76:34:89:cf:e7:18:4f:89:
         b6:92:7c:8a:61:50:9f:5d:51:72:56:b5:dc:48:e3:df:81:66:
         72:11:1d:26:7d:53:3d:1c:f1:90:27:b9:a8:1e:e4:29:fb:0e:
         f2:76:ac:02:a7:32:83:be:7b:b1:e6:a6:6c:af:6c:55:19:15:
         40:1d:c3:46:75:eb:d2:63:94:50:c7:b0:42:59:d7:7b:f3:95:
         d9:95:35:09:75:bf:72:53:a4:6e:13:b5:29:fc:06:03:0f:4d:
         e8:60:67:ff:73:9d:05:c2:a4:d6:a4:20:55:48:cc:79:81:e6:
         1b:f4:78:48:e0:fa:48:40:9f:06:c1:55:55:e4:c9:9e:6d:62:
         60:78:9a:b5:0d:a9:e8:18:d4:a1:40:9e:9f:ea:01:72:5f:37:
         f1:f3:cf:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 15:01:19 2026 by rpki-client