Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
File:                     f3dZIELjyHvlbu2B2cyw6XQCzdc.mft (raw, json)
Hash identifier:          /ha1ElyA+LHbqrWaN6nRq+I7OlEH5h7tOrtseZoHpaw=
Subject key identifier:   0D:BA:A2:9A:98:7D:9E:97:4E:65:FB:5A:32:8F:EF:9A:6B:86:D9:CB
Authority key identifier: 7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7
Certificate issuer:       /CN=A9192A47/serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
Certificate serial:       011C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
Manifest number:          0112
Signing time:             Fri 15 May 2026 06:08:11 +0000
Manifest this update:     Fri 15 May 2026 06:08:10 +0000
Manifest next update:     Fri 22 May 2026 06:08:10 +0000
Files and hashes:         1: f3dZIELjyHvlbu2B2cyw6XQCzdc.crl (hash: BjjOM1q/L8jCwCSTGDfE+stcoHKvrHKbFQ01kDcTOiE=)
                          2: 43631816B82211EFB74FF56BC4F9AE02.roa (hash: 8H2e0J6ttQKl0SPd9mkDBdGO8YngFPILlTNxbAVIA68=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl
                          rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 22 May 2026 06:08:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 284 (0x11c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9192A47, serialNumber=7F77592042E3C87BE56EED81D9CCB0E97402CDD7
        Validity
            Not Before: May 15 06:08:10 2026 GMT
            Not After : May 22 06:08:10 2026 GMT
        Subject: CN=6a06b84b-ce2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:d7:a4:ef:25:c6:83:55:af:1d:f9:08:86:0d:
                    fb:b9:11:b6:ab:f8:6f:9f:7c:60:dd:a1:a0:f8:dd:
                    19:16:ae:65:15:e1:37:5d:9b:e0:c8:89:4d:87:20:
                    06:7e:5b:4e:0d:b0:83:9b:d7:ba:b5:62:74:b4:9c:
                    40:33:fe:66:db:bd:97:66:bd:dd:fc:87:d0:75:64:
                    4e:bd:ae:5c:47:d1:cb:50:20:76:b8:2d:35:5d:32:
                    c3:d7:41:a5:81:c5:5a:0d:21:93:ad:ba:82:d8:1b:
                    ac:e2:ce:2e:6f:d4:29:cd:8e:d1:05:da:bd:f9:f9:
                    d5:6e:9d:b6:22:61:3a:ba:13:70:8c:79:45:e4:43:
                    4a:32:1b:a9:ed:d5:d6:5a:6b:93:fe:51:7c:82:38:
                    e9:bf:d2:3c:11:4d:04:c4:50:b8:c5:dc:98:da:04:
                    a3:de:f2:6d:b7:5e:2f:50:3d:f3:8a:f5:ee:6e:f0:
                    2d:10:45:76:b7:a9:65:2d:72:07:12:59:c2:0e:db:
                    ed:f5:e9:5c:a1:8e:0b:54:19:06:6f:80:70:cc:a9:
                    2c:f9:ed:c9:08:4a:ea:2c:4e:24:24:9a:5f:91:87:
                    5f:f2:16:d8:7e:e7:24:cb:f9:f4:06:d9:06:66:ca:
                    76:a0:d7:a6:55:13:d5:67:8c:4a:89:77:3d:d3:16:
                    f7:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:BA:A2:9A:98:7D:9E:97:4E:65:FB:5A:32:8F:EF:9A:6B:86:D9:CB
            X509v3 Authority Key Identifier:
                keyid:7F:77:59:20:42:E3:C8:7B:E5:6E:ED:81:D9:CC:B0:E9:74:02:CD:D7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/f3dZIELjyHvlbu2B2cyw6XQCzdc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9192A47/15907C22B82111EFAAE6F567C4F9AE02/f3dZIELjyHvlbu2B2cyw6XQCzdc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         b3:78:5f:f7:ee:f9:e7:4a:29:8c:2c:ee:2d:0a:f5:85:16:1f:
         af:0f:ab:54:b7:66:82:84:19:f0:bf:1b:00:97:1d:d4:e4:ff:
         59:13:07:81:69:78:2b:5c:e5:56:dc:dd:0b:26:cc:20:1d:22:
         57:b2:92:26:f1:fd:4a:ea:79:a2:ec:b7:30:db:d8:a4:a9:a2:
         f7:31:8a:92:74:29:ff:9d:c9:f2:80:c0:45:02:3b:22:6a:c5:
         b2:c6:39:1b:d8:9e:9b:63:a4:33:62:6f:ab:4d:d6:60:34:3d:
         33:c7:a5:be:81:ad:2f:17:07:f3:3c:d0:c3:59:f3:f6:17:db:
         80:01:a1:b7:25:cf:d2:5a:7e:e7:8c:f4:38:86:84:91:29:da:
         cd:24:2d:3f:86:e8:12:26:36:64:ad:d6:2d:0a:8d:a1:20:79:
         76:53:f1:3c:fe:b3:bb:a1:92:d6:fa:e1:e2:b4:65:b3:45:ed:
         cc:fd:37:b9:a6:71:0f:2d:f3:5b:bc:45:63:cb:95:0d:26:3c:
         0f:f7:c5:e9:72:b6:ea:40:9c:e9:05:36:28:56:49:98:51:6c:
         96:47:b4:97:57:50:e0:97:90:e6:2a:6a:87:af:eb:dd:f0:9d:
         33:b8:03:9b:70:97:af:5c:88:38:67:5a:ae:bc:11:b6:62:8b:
         de:ef:ff:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 16 22:02:28 2026 by rpki-client