Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
File:                     u4iGb_vrTN7pUxHmIJ92pQG8G48.mft (raw, json)
Hash identifier:          QbS8ay0mtmVXKmDzaIPdPk7vKwbbR82NxBeS1DVhoTY=
Subject key identifier:   E1:46:DE:92:A8:20:2A:4D:95:16:B1:70:E3:3A:53:6E:BA:12:AB:C3
Authority key identifier: BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F
Certificate issuer:       /CN=A91A9E90/serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
Manifest number:          09
Signing time:             Fri 17 Jul 2026 10:32:16 +0000
Manifest this update:     Fri 17 Jul 2026 10:32:15 +0000
Manifest next update:     Fri 24 Jul 2026 10:32:15 +0000
Files and hashes:         1: u4iGb_vrTN7pUxHmIJ92pQG8G48.crl (hash: s1Pt5YQA9LE5MII28cACwxOuW76XP7SBaoxpIbuDskM=)
                          2: A668211C79AB11F1870FA39595A30FBC.roa (hash: bMn1My/eGVHQu+9YF4NOAoOsKQU7m5hZjyTX5JuRqWw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl
                          rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Jul 2026 10:32:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9E90, serialNumber=BB88866FFBEB4CDEE95311E6209F76A501BC1B8F
        Validity
            Not Before: Jul 17 10:32:15 2026 GMT
            Not After : Jul 24 10:32:15 2026 GMT
        Subject: CN=6a5a04af-63d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:e3:93:a7:c0:aa:8a:03:ee:d2:2d:2f:96:
                    e0:d9:06:73:e6:e8:4f:35:74:af:ef:e3:96:39:a6:
                    7b:93:b5:94:90:64:9e:99:e3:45:4f:7b:c7:f9:be:
                    f2:74:2d:76:30:49:28:45:31:9c:67:f1:13:2f:22:
                    16:b7:23:72:c4:8a:81:86:a6:9d:15:f8:19:4a:9b:
                    8e:7a:25:f5:8e:3d:96:71:68:90:82:14:d2:ed:e9:
                    ae:16:45:fa:e7:e9:70:42:ff:0f:58:7f:d7:d0:81:
                    94:c1:45:ee:a8:ec:90:ac:5d:af:b3:b9:e9:ae:04:
                    ad:ad:49:e2:38:57:74:93:1e:cc:d0:03:a4:f7:19:
                    e0:4c:cc:55:31:42:7e:ff:65:b8:a2:ef:24:bf:f6:
                    f2:0e:b5:b0:ac:e9:70:eb:30:81:8a:ca:8f:50:6d:
                    15:8d:a8:f0:3f:88:d8:25:73:9b:d6:fe:88:57:3e:
                    f4:b8:e7:d2:dc:27:05:44:71:91:e1:91:cf:ee:5e:
                    37:fb:bc:ce:a9:c1:09:95:af:a1:c4:cd:29:72:92:
                    7e:04:8b:e0:1b:5b:16:74:63:e3:42:aa:0d:04:f1:
                    95:55:01:4c:65:f3:a5:6f:7c:13:24:31:a8:02:e1:
                    26:8d:e8:14:ff:e6:c8:a0:10:b5:53:5b:1a:cf:6d:
                    cf:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:46:DE:92:A8:20:2A:4D:95:16:B1:70:E3:3A:53:6E:BA:12:AB:C3
            X509v3 Authority Key Identifier:
                keyid:BB:88:86:6F:FB:EB:4C:DE:E9:53:11:E6:20:9F:76:A5:01:BC:1B:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/u4iGb_vrTN7pUxHmIJ92pQG8G48.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9E90/5373A5EE79AB11F18143ADB294A30FBC/u4iGb_vrTN7pUxHmIJ92pQG8G48.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5c:11:d9:4d:95:ee:2d:35:0e:6f:03:ee:23:8c:06:f4:eb:d5:
         db:70:06:d5:a9:b8:94:cd:69:7a:a4:27:e8:24:0f:bd:58:68:
         15:51:c0:32:1d:28:45:c8:c9:bc:04:44:56:8e:6d:19:2b:ab:
         47:76:4c:f8:02:28:e9:34:f9:63:df:74:0d:d2:ad:d5:d2:aa:
         7a:a2:1e:60:55:e1:c6:d5:08:ba:2a:57:bd:55:70:fa:a2:2f:
         5e:1c:77:f9:d7:61:5a:45:f9:a3:c3:3b:d8:38:0b:c7:35:a4:
         d3:03:85:da:28:29:9e:49:11:cd:c0:f2:44:9b:94:31:5e:b0:
         30:36:6b:63:9d:b5:de:98:7c:b1:2a:5c:c9:8b:15:0a:f9:7f:
         7e:70:1c:44:32:15:41:36:ca:35:a0:9e:38:94:7e:31:96:a7:
         cd:d9:55:e4:7b:04:e1:7f:35:41:61:9a:23:69:32:df:21:63:
         17:09:3e:37:81:e2:c8:09:23:46:27:83:6e:d7:4a:e6:5a:c7:
         39:38:7e:c4:91:ec:7c:27:15:11:25:6d:28:59:fc:a3:60:be:
         6e:90:78:a2:d7:10:87:ea:42:b9:c7:7e:64:a1:95:c2:fd:8f:
         0d:f8:2d:07:49:90:69:ee:8e:e6:31:bf:a0:fa:56:80:c8:ec:
         52:3f:6f:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 03:25:02 2026 by rpki-client