Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
File:                     tUMZgoesmRJSAHhil7k2l_jySK4.mft (raw, json)
Hash identifier:          9k5haeA9gUlErKJXk6buCot1k8KbUKm2YYEEBOhaQR4=
Subject key identifier:   9B:C4:06:92:29:BD:84:26:EE:48:3E:D8:E0:5D:A4:B0:BB:22:0D:25
Authority key identifier: B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE
Certificate issuer:       /CN=A9142DBC/serialNumber=B543198287AC99125200786297B93697F8F248AE
Certificate serial:       0D2B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
Manifest number:          0D1A
Signing time:             Tue 18 Aug 2026 18:33:38 +0000
Manifest this update:     Tue 18 Aug 2026 18:33:37 +0000
Manifest next update:     Tue 25 Aug 2026 18:33:37 +0000
Files and hashes:         1: tUMZgoesmRJSAHhil7k2l_jySK4.crl (hash: tATF6zUnZKLZIcUf+8pMe9i6vH7JTw14AO0TWotO79Q=)
                          2: C3401DEC16E811F1A339CAE0373D8C67.roa (hash: yBowxfuCjhrMqbpO4ruB7+0RN+biV4Rph+HZV83yUAY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl
                          rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 25 Aug 2026 18:33:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3371 (0xd2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9142DBC, serialNumber=B543198287AC99125200786297B93697F8F248AE
        Validity
            Not Before: Aug 18 18:33:37 2026 GMT
            Not After : Aug 25 18:33:37 2026 GMT
        Subject: CN=6a84a581-0853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f6:25:ff:b9:10:7b:53:61:17:6b:25:10:01:
                    ec:f8:a8:52:c9:aa:b5:1d:96:c0:de:51:98:33:d6:
                    3b:14:0e:79:b0:be:8e:bc:9a:88:6e:ba:86:e6:0a:
                    97:18:46:af:4d:90:44:2f:ed:89:13:52:d0:68:5a:
                    45:0e:ff:b6:05:64:b7:bc:c2:e9:41:48:2f:48:6f:
                    42:10:4e:c0:a4:57:49:9a:43:0d:eb:61:d2:b8:ff:
                    99:7c:94:c5:27:65:3d:6d:01:1a:34:1f:68:5d:5e:
                    af:b4:c3:66:6d:41:bd:08:1c:36:f1:80:5f:3f:9f:
                    77:87:e0:1e:f1:b2:c3:e1:6e:25:45:2c:d0:a8:e5:
                    fa:ae:a7:04:e7:e6:ea:5b:3b:ba:07:1c:27:a5:ad:
                    a4:29:53:5f:71:bf:28:33:66:ce:24:cb:3e:5e:26:
                    9d:56:b3:15:dd:5d:be:d3:d9:83:c6:8c:ac:98:72:
                    db:6a:ac:26:ba:0f:9f:68:1b:13:f5:c2:b4:33:b3:
                    38:a1:77:59:aa:15:f8:78:1e:9e:ce:0c:23:84:2f:
                    13:84:44:a2:30:a2:b7:41:24:03:88:a3:be:89:ce:
                    87:85:c7:85:f8:80:b6:f7:02:d3:86:5c:3f:b5:3b:
                    34:9f:f8:9c:c8:a8:a8:e9:3c:97:4a:fe:91:51:65:
                    2e:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:C4:06:92:29:BD:84:26:EE:48:3E:D8:E0:5D:A4:B0:BB:22:0D:25
            X509v3 Authority Key Identifier:
                keyid:B5:43:19:82:87:AC:99:12:52:00:78:62:97:B9:36:97:F8:F2:48:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tUMZgoesmRJSAHhil7k2l_jySK4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9142DBC/69FA25680AA411EA8C5A831BC4F9AE02/tUMZgoesmRJSAHhil7k2l_jySK4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:4a:85:c7:2a:bc:66:93:10:8d:16:ae:4c:b8:a8:79:13:3a:
         13:14:a2:64:ff:98:1d:c8:e7:14:ea:b9:7a:2a:af:7a:b9:d3:
         82:19:79:3e:13:e5:d0:65:e4:b2:e5:77:c2:a0:0a:08:47:49:
         b1:98:af:e6:8c:d1:a8:55:15:64:50:45:ea:cc:b0:8e:74:2f:
         52:3a:c9:14:5f:95:c1:af:c2:5e:2e:4b:ae:07:89:e8:83:f2:
         d2:5d:48:c9:70:bb:c6:51:6a:fc:c4:85:d8:87:12:1f:97:d6:
         bf:8e:3b:01:08:28:40:29:cb:de:b1:21:71:a5:a8:4b:f2:46:
         92:d2:90:c8:d7:32:f2:8e:f2:f0:0c:14:29:25:80:5c:00:24:
         7b:55:2f:15:8f:aa:a0:05:0a:e4:03:0d:e2:41:4f:fc:13:9a:
         d4:42:c0:e8:60:9e:3b:59:07:99:0d:f3:ba:9c:f9:c1:a9:66:
         07:06:27:ef:e0:e7:e1:c2:82:43:90:62:82:76:0e:b3:9e:6e:
         e0:17:aa:c6:14:05:0c:e0:5d:e9:69:49:34:75:b5:2a:9d:58:
         ed:0d:63:e3:5c:33:4b:4d:8b:a5:7a:a4:b6:7f:c7:eb:34:98:
         f8:29:22:ce:a8:6f:d9:72:50:52:3d:24:5b:d5:cd:19:9a:da:
         83:3e:c7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 19 12:55:51 2026 by rpki-client