Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
File:                     uu94943Hy_m3MScKqxBp9eNDPLs.mft (raw, json)
Hash identifier:          58DQIJe/ud2xYYieN5AAEkAJBtzVXwg7jJQbmB1WU0g=
Subject key identifier:   4E:43:08:3E:F4:AA:31:BF:E8:0A:25:E2:AF:7F:CB:49:0B:F8:C5:24
Authority key identifier: BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB
Certificate issuer:       /CN=A91B61A7/serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
Certificate serial:       016C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
Manifest number:          0154
Signing time:             Thu 21 May 2026 05:16:18 +0000
Manifest this update:     Thu 21 May 2026 05:16:18 +0000
Manifest next update:     Thu 28 May 2026 05:16:18 +0000
Files and hashes:         1: uu94943Hy_m3MScKqxBp9eNDPLs.crl (hash: 4uUw01TzyshAHhbOVujkyHhUukynpo+gHSksTE7oEys=)
                          2: 286AB0F22CB011F084E4A915C4F9AE02.roa (hash: XW/veL+aykLoqzCS1Skl+u7OuNFXArsA4MwYWRJWYT4=)
                          3: 4749FE2AE9EC11F09B751112686F56BC.roa (hash: qQlTF9dTZWLs/G09Pvw0hcRd0j+bTrN8gGIowS7qYUU=)
                          4: 0FB823502CB011F0A2157E15C4F9AE02.roa (hash: QYDMiyLsJUluSn0j67IjTBM2ewHLlzSGUigM47qc2ug=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl
                          rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 04:46:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91B61A7, serialNumber=BAEF78F78DC7CBF9B731270AAB1069F5E3433CBB
        Validity
            Not Before: May 21 05:16:18 2026 GMT
            Not After : May 28 05:16:18 2026 GMT
        Subject: CN=6a0e9522-bdfb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e2:de:4e:0d:f7:e1:19:4a:e7:d0:ac:65:1e:
                    24:ab:cd:80:87:66:29:6b:b3:87:e6:4f:c2:04:fc:
                    6f:07:29:6d:8f:27:9a:d6:72:95:33:13:e2:d5:71:
                    05:c9:c4:82:d8:e7:77:78:73:2e:ab:4a:e3:00:10:
                    03:65:97:0e:e4:af:a2:5d:53:a2:d0:cd:81:7a:24:
                    3b:91:6b:81:d4:95:3d:cf:09:15:17:43:63:73:e0:
                    48:9c:2c:be:2a:8f:73:0e:dd:ca:18:f5:6c:0a:7a:
                    2c:6d:91:70:71:7e:c0:9d:72:6b:4d:ce:ee:e7:a5:
                    94:30:7e:c0:f0:f6:a0:95:e6:54:dd:1d:8d:96:d4:
                    f7:bc:19:c2:e7:5c:1c:99:76:03:f1:ab:33:19:95:
                    d4:40:8b:ed:87:20:f0:7c:fa:1e:15:a9:71:49:d5:
                    c8:93:1e:7c:00:7d:3d:bf:3f:c5:23:63:88:4b:a9:
                    ce:96:f9:2e:8c:96:0b:ce:3a:a8:97:30:74:1a:93:
                    c9:f0:bd:56:22:41:1d:44:8a:9d:5f:a0:fe:f5:43:
                    f2:e6:ec:ee:6a:7c:3d:9e:07:a0:39:c0:5d:61:93:
                    e4:b4:27:7e:56:ab:d2:4b:24:b1:c6:b6:f1:28:3d:
                    45:84:aa:16:27:2c:c9:26:51:08:e0:2f:de:70:e4:
                    7c:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:43:08:3E:F4:AA:31:BF:E8:0A:25:E2:AF:7F:CB:49:0B:F8:C5:24
            X509v3 Authority Key Identifier:
                keyid:BA:EF:78:F7:8D:C7:CB:F9:B7:31:27:0A:AB:10:69:F5:E3:43:3C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uu94943Hy_m3MScKqxBp9eNDPLs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91B61A7/0F4992045BA111EF9A79E961C4F9AE02/uu94943Hy_m3MScKqxBp9eNDPLs.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:f2:0c:82:21:1b:43:2f:a3:dc:82:cd:1a:61:6e:98:ee:ec:
         75:92:10:a0:d6:97:90:f8:47:95:9a:d2:a4:c4:5e:6e:d3:e2:
         5b:60:08:b0:64:8a:29:53:fa:60:7a:ae:d8:df:e5:9c:c1:23:
         12:a2:b1:b6:5a:75:4a:b1:e6:87:5b:f9:5a:19:06:5d:e1:44:
         13:88:9b:4e:84:a1:f8:3f:5b:2a:68:ad:97:29:6f:64:d0:8d:
         2f:ab:47:9c:a1:2e:c8:6b:85:1a:cc:6e:8c:22:4b:78:c5:bf:
         5e:d0:5a:25:29:b3:ea:ba:40:5f:13:22:bb:93:37:7a:46:a9:
         d0:5e:5c:14:b8:fe:6e:3e:19:d9:dc:d8:d0:1a:f2:cd:ac:ba:
         d5:e1:bf:ac:55:24:74:a0:68:76:de:23:b4:e3:43:83:1a:a7:
         a2:6b:f5:d1:ed:ff:7a:7c:7e:51:2e:87:ec:09:9d:3d:a4:72:
         c5:f7:9e:30:9b:93:22:df:02:07:a2:f4:81:18:79:3d:ac:7a:
         96:a5:3d:48:1a:f9:b4:42:e6:43:bd:67:18:21:c6:26:30:91:
         fb:95:88:3d:ed:45:3c:f2:43:bb:66:6e:14:49:cb:1c:8f:e3:
         b9:9e:b2:97:3e:a5:5a:1c:68:b9:7b:ca:d2:df:8b:83:9d:1d:
         70:ec:37:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 09:37:25 2026 by rpki-client