Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File:                     zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier:          WIfvkbIYq/ssLntxC8BXWSpZ2/hXdpntxmCYaTJlhCE=
Subject key identifier:   52:D9:44:8D:16:A4:D3:52:60:3F:75:12:EE:34:CD:9E:29:67:63:29
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer:       /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial:       0D9A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number:          0D91
Signing time:             Tue 18 Aug 2026 18:09:08 +0000
Manifest this update:     Tue 18 Aug 2026 18:09:07 +0000
Manifest next update:     Tue 25 Aug 2026 18:09:07 +0000
Files and hashes:         1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: LUGv/0CUBPfeDlS5Oi4dhnV8CvsSGyWD95h2fuXnA24=)
                          2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: yMGWSYKZJih8aQL2gVilfSresOlgwuqSCV4043Vk2h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
                          rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:09:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3482 (0xd9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
        Validity
            Not Before: Aug 18 18:09:07 2026 GMT
            Not After : Aug 25 18:09:07 2026 GMT
        Subject: CN=6a849fc4-5440
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:91:25:6a:e0:9f:cb:12:b9:56:55:c8:e2:6d:
                    17:51:88:92:f3:34:4c:12:68:f5:c3:7b:af:fc:df:
                    da:de:97:2d:0f:ac:29:88:c5:3c:f0:74:21:b7:6d:
                    4b:85:84:8d:3d:d4:ac:b7:fb:90:dc:f7:e7:83:20:
                    ad:4f:b3:e0:3e:b6:3a:94:c1:17:87:46:65:6d:3d:
                    2e:f4:94:0a:af:29:55:34:75:8b:ea:ae:fb:7d:e9:
                    7d:fd:ea:ca:17:9e:7d:98:eb:da:9b:89:8a:8c:f1:
                    3c:b6:22:c9:a4:7a:83:60:ce:fa:09:36:8f:f8:63:
                    5c:cc:79:58:3f:c9:e4:de:64:76:7d:fe:38:86:d9:
                    9e:b9:ff:b0:70:61:a8:99:ee:75:39:cd:1b:d3:ab:
                    a4:38:0f:a3:dd:e9:67:2f:85:db:69:62:ec:fc:34:
                    ec:c6:2e:87:01:bc:41:bf:66:af:10:2c:8c:7a:29:
                    c3:99:1d:41:00:bb:fd:09:9f:df:25:3c:d3:fd:f4:
                    e8:ed:d0:01:12:97:f1:27:53:a5:e1:16:3f:a8:83:
                    bc:01:80:9c:bf:03:75:cd:c7:16:38:66:61:f6:19:
                    10:f8:f3:95:15:6c:3b:84:4d:32:79:29:ee:f1:65:
                    b2:8f:13:27:59:3d:63:a9:4a:88:3c:a3:0f:bd:c0:
                    2d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D9:44:8D:16:A4:D3:52:60:3F:75:12:EE:34:CD:9E:29:67:63:29
            X509v3 Authority Key Identifier:
                keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         22:97:5f:78:1d:72:2e:da:22:45:60:b3:7f:a9:a2:e4:60:2f:
         5d:27:46:30:92:5b:e8:bb:10:ee:82:c3:8f:ca:ce:ca:54:2a:
         cd:11:02:20:4c:14:d5:90:5b:25:17:a9:78:8e:d9:86:9a:05:
         eb:27:55:c5:e2:22:7e:2f:ac:cd:4e:94:da:e2:a7:31:7d:bd:
         3a:91:29:49:d3:5a:a5:32:98:e1:e2:06:f6:7d:05:f1:0c:a0:
         68:74:f7:11:2f:27:de:f1:ac:d6:54:05:3c:a6:b4:62:21:fe:
         40:eb:20:9f:90:f5:da:01:0e:8a:94:19:09:d0:5e:ca:43:2e:
         c5:5d:4b:f1:ee:e5:88:67:56:c7:d4:e0:a4:38:34:5a:a8:16:
         d5:1f:90:52:1e:2b:64:df:2e:2c:3a:14:6a:c7:17:98:b0:be:
         36:97:93:3c:6d:5b:38:5c:d8:db:b2:df:88:fa:27:04:c3:81:
         03:6e:b3:5c:74:85:0d:98:63:5e:61:ed:e5:a1:c9:33:77:97:
         a8:c2:d4:e4:3f:90:b1:e6:6c:80:0f:9b:d3:2a:49:84:8b:8e:
         6f:2b:af:cd:a2:d2:8d:29:66:45:57:51:27:f3:3e:53:77:bc:
         49:f8:56:b0:43:47:3b:4b:69:56:be:b6:ab:06:26:eb:94:e1:
         e0:82:40:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 13:39:08 2026 by rpki-client