Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
File:                     Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft (raw, json)
Hash identifier:          ph1TgnYH4VCNXZIqqs4+l6FQo3i+zOGO2G+4QZF+zt4=
Subject key identifier:   6A:CB:83:8F:24:D0:0B:82:F6:BB:61:4F:D5:85:BC:A4:16:3B:01:83
Authority key identifier: 52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F
Certificate issuer:       /CN=A9159558/serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
Certificate serial:       3C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
Manifest number:          3B
Signing time:             Wed 19 Aug 2026 09:17:14 +0000
Manifest this update:     Wed 19 Aug 2026 09:17:13 +0000
Manifest next update:     Wed 26 Aug 2026 09:17:13 +0000
Files and hashes:         1: Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl (hash: JBqdFhl34SoqrGCFv76Vwo1ZAVe/2Nuw7QdMHTLaZt4=)
                          2: C8CE775E435C11F18454B6E5B6833773.roa (hash: plcT4dsgJqUos2P4lyFZDl4QJQLWQP6vKlNauLCZCuI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl
                          rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Aug 2026 09:17:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9159558, serialNumber=525ED5316981A50BDC02AC5BD3C5AFD41161497F
        Validity
            Not Before: Aug 19 09:17:13 2026 GMT
            Not After : Aug 26 09:17:13 2026 GMT
        Subject: CN=6a85749a-a7cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:53:09:9f:6c:55:55:cc:09:cf:b3:53:73:b9:
                    e6:aa:ce:d3:4d:30:ff:ee:e9:79:e5:87:1f:ab:08:
                    69:ef:72:2c:79:bb:99:6a:c9:0e:03:fd:8e:af:75:
                    89:71:be:29:c8:17:e5:7d:17:ac:ac:19:a6:e8:2f:
                    25:85:33:96:25:da:77:08:8a:02:6a:b9:ba:90:db:
                    df:c9:92:0b:26:7b:77:c7:e6:8c:a0:cc:d6:93:29:
                    27:ee:bd:8b:59:e3:d4:3a:1b:97:1f:ad:b3:7a:43:
                    1b:0a:f5:fe:ec:44:1c:d6:d1:4d:47:93:e1:d9:97:
                    1d:b9:1b:4d:8c:db:49:7a:b5:c5:d6:12:c5:83:4a:
                    b7:67:a3:62:4f:2f:5c:ec:1d:8e:4d:1f:58:02:36:
                    0d:c5:86:88:9b:8b:d2:28:f4:ce:e9:e6:36:d1:e2:
                    0d:2a:17:90:cc:8e:f5:cc:f5:95:1f:7a:ef:b0:ce:
                    56:67:d6:53:7e:47:2a:1f:53:e9:ff:81:35:ec:87:
                    fc:8d:3f:04:02:c2:e1:f7:65:c1:a6:f6:0f:be:b7:
                    e0:3a:ab:54:96:8f:d2:15:9e:2b:98:38:eb:01:99:
                    12:13:57:bc:21:a8:dd:a2:bd:78:4b:20:73:2f:8a:
                    09:f8:15:33:f0:27:cf:1c:ab:49:43:d1:26:00:e1:
                    60:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:CB:83:8F:24:D0:0B:82:F6:BB:61:4F:D5:85:BC:A4:16:3B:01:83
            X509v3 Authority Key Identifier:
                keyid:52:5E:D5:31:69:81:A5:0B:DC:02:AC:5B:D3:C5:AF:D4:11:61:49:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9159558/36EC8B4E42D211F1B6F10C74C7833773/Ul7VMWmBpQvcAqxb08Wv1BFhSX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:48:5d:c0:f9:2b:ec:41:e3:8e:b3:1b:76:d2:90:9e:0f:a8:
         f7:54:0c:f3:86:18:0b:8d:7d:cb:48:d4:d1:84:5d:1e:c0:73:
         e7:44:41:33:47:e0:40:a0:1c:95:27:45:9a:7e:e0:71:0c:60:
         21:8b:17:8f:47:8c:3a:ec:70:c8:d7:24:9f:b7:ca:a0:ec:46:
         92:b5:43:02:3f:bb:b5:80:ee:42:29:e5:dc:13:e8:89:07:42:
         ca:16:55:20:dd:74:e9:ae:a5:78:08:53:9e:27:5b:2b:f5:f7:
         4e:fa:2e:17:ab:25:da:6a:9a:a2:c2:29:f7:a2:95:cb:51:6e:
         eb:39:c7:c3:d3:46:43:4b:4f:6a:68:2d:57:23:c1:7a:18:a2:
         97:6e:8e:88:e5:66:6e:4e:c6:59:f5:8c:9b:6e:f2:f1:16:58:
         9b:f8:e6:b7:18:c1:62:b0:b9:9e:c0:e9:18:fe:f2:70:e5:47:
         d4:de:10:a5:72:13:5c:2d:e5:6a:ac:ae:e9:07:97:3d:d9:58:
         31:46:32:fe:52:42:55:97:5e:43:8c:32:f5:8e:18:cc:46:17:
         a6:cf:2d:e8:db:1c:1f:eb:e0:ee:42:21:e6:7a:4f:16:d0:c9:
         c5:ca:89:b8:2a:99:7b:35:03:8c:a7:27:66:7e:e0:d8:dc:2b:
         21:3b:b1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 02:50:47 2026 by rpki-client