Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
File:                     zUt2FunCVC_hBdTxTq4yFljUSzs.mft (raw, json)
Hash identifier:          QGfdM/RIC6JgWDt4GN7vHMC4OqsJIWqKF9GPbqfL7XM=
Subject key identifier:   70:9E:AE:3E:E9:AF:9D:86:36:F2:1C:B3:DD:99:61:8B:5B:88:E7:64
Authority key identifier: CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B
Certificate issuer:       /CN=A9141974/serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
Certificate serial:       0D6C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
Manifest number:          0D63
Signing time:             Wed 20 May 2026 17:58:52 +0000
Manifest this update:     Wed 20 May 2026 17:58:52 +0000
Manifest next update:     Wed 27 May 2026 17:58:52 +0000
Files and hashes:         1: zUt2FunCVC_hBdTxTq4yFljUSzs.crl (hash: IK60U3kxZ+Q5w+9nj+EgCIAHLAhQTAC5ZiBri4RuyrM=)
                          2: DD53E3B8F0B511E98108C962C4F9AE02.roa (hash: yMGWSYKZJih8aQL2gVilfSresOlgwuqSCV4043Vk2h8=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl
                          rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 27 May 2026 17:58:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3436 (0xd6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9141974, serialNumber=CD4B7616E9C2542FE105D4F14EAE321658D44B3B
        Validity
            Not Before: May 20 17:58:52 2026 GMT
            Not After : May 27 17:58:52 2026 GMT
        Subject: CN=6a0df65c-6bf2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:3b:60:1f:c1:1b:66:78:1e:ec:d0:37:a7:
                    e3:77:e8:45:5c:98:3b:c0:68:6a:64:71:1e:06:eb:
                    0f:22:79:f8:0e:f2:60:4f:d2:e4:e9:9a:fe:98:ce:
                    fc:3c:02:53:4b:0e:12:48:9d:0a:82:ce:ab:c1:24:
                    47:d5:1b:9e:da:07:8b:71:d7:4d:7f:90:ae:07:44:
                    9c:79:b2:87:9a:d3:ed:13:85:b2:9b:50:03:5d:37:
                    c3:a0:3e:85:a7:90:5c:4a:7c:c4:f6:32:00:ab:0f:
                    11:12:3d:92:13:bc:e2:15:4e:13:04:b7:bd:31:39:
                    2d:ff:8e:0e:bd:79:7b:36:59:e5:ab:19:2f:45:1a:
                    19:bc:5f:9c:4e:c6:df:2e:6f:4a:63:11:b3:27:53:
                    fc:de:b7:62:a6:80:4f:fd:68:cb:7f:2f:ea:b8:d7:
                    26:1d:67:c9:2c:15:ed:09:78:16:4a:01:eb:17:05:
                    08:0a:b8:00:65:ff:28:8a:c6:12:30:66:7f:68:62:
                    bb:c5:a4:e1:2f:cc:4d:5a:7d:64:30:18:20:f5:22:
                    a8:10:d5:70:f1:f6:e6:9c:95:89:79:d1:93:3f:3f:
                    d2:c2:42:a5:01:ac:60:44:1b:f3:26:68:18:35:07:
                    01:e6:58:0e:6a:d2:84:3b:da:63:9a:f8:b7:49:f5:
                    6f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9E:AE:3E:E9:AF:9D:86:36:F2:1C:B3:DD:99:61:8B:5B:88:E7:64
            X509v3 Authority Key Identifier:
                keyid:CD:4B:76:16:E9:C2:54:2F:E1:05:D4:F1:4E:AE:32:16:58:D4:4B:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zUt2FunCVC_hBdTxTq4yFljUSzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9141974/2E6B69EEF0B411E9BCC6FE5DC4F9AE02/zUt2FunCVC_hBdTxTq4yFljUSzs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         76:53:1d:5c:3b:e2:3a:44:bc:0c:ec:ff:19:da:bc:af:bc:c0:
         43:d0:1d:c0:b1:6a:cc:2b:a2:bd:e5:14:4e:22:a1:c2:2e:3c:
         20:2e:11:a3:a0:0b:07:e2:7a:43:68:13:3c:ca:8c:d7:d1:98:
         08:e6:ea:fe:af:71:46:94:78:92:e5:a0:62:cc:b7:89:33:ab:
         ac:e5:90:7f:e3:bf:00:e5:2d:88:2d:a2:04:cb:78:68:71:ef:
         70:d0:f4:08:c0:9c:ae:1b:5a:d1:0e:ff:b5:ed:ec:86:df:6a:
         24:85:2b:02:ed:ff:6b:7a:4b:69:45:f3:74:d4:9f:a3:4f:fa:
         09:c2:11:c5:6f:bd:06:27:00:18:f3:4d:22:df:14:c9:ee:fb:
         eb:ac:ed:57:d5:f7:6c:43:7a:7e:93:21:7f:c8:18:46:a4:c1:
         b6:ef:d0:38:db:5b:b7:cf:72:ad:69:a0:c7:67:0a:3f:d3:32:
         7e:27:e4:34:a1:be:af:e4:eb:1d:d7:58:97:35:bd:a8:66:ea:
         ee:33:b7:9e:fc:7c:7e:30:6d:11:06:cd:5f:26:4a:56:a3:10:
         cf:ed:39:8b:ba:36:af:0e:ca:90:83:4f:9e:ce:53:20:c6:c4:
         e0:20:1c:44:7c:a1:c8:9c:93:bb:01:12:cf:23:61:98:34:08:
         15:18:b8:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:35:39 2026 by rpki-client