Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
File:                     rTu2A7FO-ybXFWgvsEE1Hsj502c.mft (raw, json)
Hash identifier:          tXYJP7v3K3YaXC+b0qDq8zs+oNmD1DPJuYbrIXrTP1c=
Subject key identifier:   DB:A3:50:2B:0E:F3:70:C9:BA:4A:99:52:6C:34:11:36:B3:4A:81:4A
Authority key identifier: AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67
Certificate issuer:       /CN=A9191436/serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
Certificate serial:       1398
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
Manifest number:          136E
Signing time:             Thu 04 Jun 2026 16:59:19 +0000
Manifest this update:     Thu 04 Jun 2026 16:59:19 +0000
Manifest next update:     Thu 11 Jun 2026 16:59:19 +0000
Files and hashes:         1: rTu2A7FO-ybXFWgvsEE1Hsj502c.crl (hash: QqsKQf89QRoqUJEDXTMVxGgfyhLuPyFLGXu5D6Ur1G0=)
                          2: C31D6D082BA611EF82D8BF21C4F9AE02.roa (hash: azHcEZz2GBJVjDyR8Vdr2A5zsoqu99TMJIuTeQ/WvfY=)
                          3: 403398AA233111EEAF768F66C4F9AE02.roa (hash: Y52+tRvMTfL460RUNVYk3L8TtXM2/GdPu6P2ErCDVWQ=)
                          4: 4426B244F6A011EC8E197883C4F9AE02.roa (hash: VSOMGpR0/e2J9EQLKTIhVqJ/wQMqC0LOmUgq8KK0Szk=)
                          5: E4AFD636233211EE8737EE2AC4F9AE02.roa (hash: XY8B3tTzPyJBZMYoI9Ehi8tJlU71I3ce0cvFxvp+s6U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl
                          rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 16:59:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5016 (0x1398)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9191436, serialNumber=AD3BB603B14EFB26D715682FB041351EC8F9D367
        Validity
            Not Before: Jun  4 16:59:19 2026 GMT
            Not After : Jun 11 16:59:19 2026 GMT
        Subject: CN=6a21aee7-681b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:3c:be:90:91:65:bc:e7:c4:8e:95:fb:b2:
                    70:87:57:8c:4a:75:27:38:16:af:37:0c:7d:98:1e:
                    83:35:30:30:fc:ea:81:0e:75:60:ba:b4:ac:bd:86:
                    da:47:e1:a5:df:62:0b:17:d7:a8:93:9c:19:5b:2b:
                    f7:01:fc:74:15:5f:85:26:59:b3:20:03:2a:2f:0f:
                    0b:01:a4:36:05:76:69:cb:d5:9d:7b:6f:4e:60:54:
                    53:6f:25:82:77:2c:14:78:93:80:8f:ca:10:cd:7d:
                    5e:56:69:f2:b4:46:3b:56:73:aa:f0:88:f8:77:2b:
                    e9:af:39:84:f4:11:2f:62:18:00:4e:5e:f7:66:71:
                    3b:04:5d:63:15:fd:5b:3b:e6:1a:52:e3:cb:e6:14:
                    67:bf:7b:b8:50:66:f0:b5:b8:6f:69:b9:a9:94:f7:
                    87:c2:c1:11:45:09:dc:8f:7c:50:70:fd:eb:54:57:
                    ca:77:f8:6f:77:73:a9:07:be:15:11:4d:c3:19:81:
                    59:bd:7e:71:6a:47:26:7e:5e:40:8f:12:fb:51:60:
                    2c:70:5d:db:b5:0f:c9:6f:3e:b0:75:09:07:44:13:
                    03:04:81:57:8e:29:22:60:6f:4a:08:ec:70:7c:e6:
                    39:02:55:66:26:d4:f9:fd:20:a9:64:9a:98:2a:6c:
                    e2:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:50:2B:0E:F3:70:C9:BA:4A:99:52:6C:34:11:36:B3:4A:81:4A
            X509v3 Authority Key Identifier:
                keyid:AD:3B:B6:03:B1:4E:FB:26:D7:15:68:2F:B0:41:35:1E:C8:F9:D3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rTu2A7FO-ybXFWgvsEE1Hsj502c.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9191436/A30B5A4AC78C11E8A76CD914C4F9AE02/rTu2A7FO-ybXFWgvsEE1Hsj502c.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:59:df:79:d3:d3:06:07:f5:e4:51:50:0e:e7:9f:e0:1b:52:
         80:24:ca:4d:d9:de:4f:66:ab:8e:02:d2:df:f8:85:3f:94:3a:
         bb:d8:a2:bc:e1:e1:65:5b:5e:a0:43:e8:c4:d3:75:96:76:f3:
         a4:e7:ae:ec:a9:12:ed:a3:86:bb:cf:6a:f3:62:82:1d:f7:c2:
         d3:a2:12:2b:d6:69:d8:ab:10:92:b8:35:a2:d9:ca:35:f9:fc:
         e4:2a:e2:a0:02:35:61:4e:8e:51:84:6f:c7:81:ca:ab:d1:a7:
         11:a2:2a:47:f0:1f:e1:7b:ac:bc:27:ff:16:be:3c:d3:c8:86:
         b5:8d:16:87:32:eb:4f:2c:b8:cc:32:b3:71:3c:27:cb:18:0c:
         8f:19:74:12:01:5f:36:f8:7a:2f:7d:58:a8:5c:74:3c:87:41:
         cf:eb:e6:bf:e1:cc:73:80:ba:96:ef:70:9f:17:45:0e:11:0c:
         a0:e4:d2:a7:9e:32:87:fc:2f:bd:e6:8a:3e:99:1d:08:82:49:
         28:4b:5f:2f:c7:0e:c3:ac:0e:b2:c9:68:b1:26:fa:31:4c:be:
         cf:3d:bc:8c:fb:d4:69:0c:b1:a8:a8:27:b1:46:4f:b7:8d:38:
         41:63:bd:6a:0f:36:bf:3a:d3:08:aa:95:27:89:e0:42:bc:23:
         6a:03:8a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:08:35 2026 by rpki-client