Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
File:                     MYjUHQwG76LJaocHNWno4QNE4s0.mft (raw, json)
Hash identifier:          43xblPn8JumSQfc8rBAkhUZadf3QpE4F1L8WU40pwYk=
Subject key identifier:   18:46:B2:13:3A:92:63:66:04:1C:98:98:82:00:B1:4F:68:CD:3E:E4
Authority key identifier: 31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD
Certificate issuer:       /CN=A9147CA8/serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
Certificate serial:       91
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
Manifest number:          7E
Signing time:             Mon 01 Jun 2026 08:08:36 +0000
Manifest this update:     Mon 01 Jun 2026 08:08:36 +0000
Manifest next update:     Mon 08 Jun 2026 08:08:36 +0000
Files and hashes:         1: MYjUHQwG76LJaocHNWno4QNE4s0.crl (hash: tVeF2fWKaKxRxW36MJDnAUqPtqfoKTOkS8EH0izPkwc=)
                          2: 9D1F5AC82F1211F1B693ACC09B833773.roa (hash: p36Ed7xsZwcv9rGoTKmCe4vZ8WUDfq/0PpZBbk95ipk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl
                          rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 08 Jun 2026 08:08:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 145 (0x91)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9147CA8, serialNumber=3188D41D0C06EFA2C96A87073569E8E10344E2CD
        Validity
            Not Before: Jun  1 08:08:36 2026 GMT
            Not After : Jun  8 08:08:36 2026 GMT
        Subject: CN=6a1d3e04-3ecb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:64:aa:68:72:68:92:b7:06:47:62:75:d3:
                    56:11:03:4a:23:73:f3:0b:d8:0e:57:d8:3c:ee:b6:
                    2c:42:8a:ff:41:c8:ab:30:a6:3e:a8:59:6b:19:8e:
                    eb:16:5e:0a:86:31:ff:4a:ee:c7:78:e1:e7:5f:b2:
                    d1:8a:27:d9:f8:b7:5d:fe:bb:60:46:3d:d4:c9:df:
                    2a:55:5c:4b:f6:2c:e4:45:bc:04:5c:50:5f:40:d4:
                    5c:04:cd:97:cf:ff:cf:6c:e4:20:a6:87:3c:c7:31:
                    41:c8:f2:2a:80:ef:60:3c:55:e0:a9:ef:42:30:ed:
                    bb:1f:33:76:e1:58:ae:c4:3c:d8:3f:21:9e:e9:e3:
                    83:ed:41:9b:79:e4:25:d7:a6:c9:c0:b1:46:fe:15:
                    b9:29:5f:61:d6:b4:0e:5b:a8:1a:bb:21:8d:78:21:
                    56:b6:ce:b5:29:01:45:d1:e9:ec:3e:a6:e0:15:81:
                    41:12:ad:53:f2:f7:10:62:12:1d:b0:41:d4:87:8f:
                    b3:0e:00:0a:6f:a9:d4:64:40:4f:32:09:1a:05:f3:
                    53:a1:b5:6f:f9:ed:a1:9a:f8:00:da:b2:92:d8:57:
                    f0:1d:7a:12:dd:c3:40:35:da:7c:b8:34:f1:47:c9:
                    0d:5f:2b:7c:1d:31:05:c7:90:8c:50:33:f6:fe:18:
                    95:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:46:B2:13:3A:92:63:66:04:1C:98:98:82:00:B1:4F:68:CD:3E:E4
            X509v3 Authority Key Identifier:
                keyid:31:88:D4:1D:0C:06:EF:A2:C9:6A:87:07:35:69:E8:E1:03:44:E2:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/MYjUHQwG76LJaocHNWno4QNE4s0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9147CA8/2D98CC5AC50611F08C6BA32BC4F9AE02/MYjUHQwG76LJaocHNWno4QNE4s0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:f7:09:77:76:09:fc:c3:c9:65:73:2e:44:aa:09:99:f5:3e:
         c1:d1:d3:7b:0e:99:5f:16:b9:77:d8:95:f6:2a:50:9d:be:e4:
         d6:33:cf:64:ca:cf:ed:bf:3e:1d:51:cc:dc:dc:8b:6a:8f:78:
         b4:26:05:3a:bf:1e:ca:19:c8:c1:de:29:16:cd:4a:92:9c:10:
         4b:98:a8:31:1f:80:65:e6:db:62:ef:00:50:c6:1d:50:2f:6f:
         a9:17:21:24:c5:96:cd:de:9b:f0:b0:9d:58:57:02:26:82:bd:
         87:e5:b4:0c:45:8f:89:61:69:af:48:0b:f7:ce:d4:8b:2e:99:
         5c:e3:a7:01:fa:9f:64:29:0a:f2:45:b4:a6:7b:9e:23:be:ab:
         ff:61:69:26:33:31:c5:f7:2f:f3:d3:43:bf:a7:8e:b8:03:dd:
         67:7b:7a:6e:bb:a8:f9:01:17:12:c5:61:e3:93:d6:32:dd:88:
         70:ed:2a:75:ce:9a:26:d1:87:c8:58:51:73:1e:2b:a3:95:b4:
         0f:a6:77:66:d0:b4:fb:ec:df:be:c9:c7:f5:4e:03:d3:ec:b7:
         df:5c:9f:ea:fc:c5:05:f4:59:29:a4:1a:11:4a:3f:99:8f:3b:
         c6:d4:31:20:86:1a:0b:8a:3d:f0:f7:11:0b:2f:a2:e4:6d:c6:
         74:ef:a5:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 2 21:26:08 2026 by rpki-client