Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
File:                     9UWcujH5M_kHO1FMnLvsNPbtLko.mft (raw, json)
Hash identifier:          ERL2zeJanNW/HmaRsSpbvkLwd/UWPFOR+9nXDUt0if0=
Subject key identifier:   27:B2:74:E4:7E:BF:B7:87:F8:2F:22:78:6F:23:85:18:6D:BC:95:6A
Authority key identifier: F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A
Certificate issuer:       /CN=A91C0E6A/serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
Certificate serial:       024E
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
Manifest number:          0236
Signing time:             Thu 21 May 2026 02:48:18 +0000
Manifest this update:     Thu 21 May 2026 02:48:18 +0000
Manifest next update:     Thu 28 May 2026 02:48:18 +0000
Files and hashes:         1: 9UWcujH5M_kHO1FMnLvsNPbtLko.crl (hash: GqEJtdUOEslxo9olVehTakwF//9s99F6znp6dxvDm0o=)
                          2: 7641B9AE12CD11EFAC15BB64C4F9AE02.roa (hash: zX2wxhpVdTYgnBLbUW2HFAPDNMT7jIK2t1BaorSnmuA=)
                          3: 57CB703EBCED11F0A3B2C039C4F9AE02.roa (hash: 45hyCfM+o4HKQEPHEPnA/AUjri6G28j6JkHXuLahCZI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl
                          rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 May 2026 02:48:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 590 (0x24e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91C0E6A, serialNumber=F5459CBA31F933F9073B514C9CBBEC34F6ED2E4A
        Validity
            Not Before: May 21 02:48:18 2026 GMT
            Not After : May 28 02:48:18 2026 GMT
        Subject: CN=6a0e7272-7c21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:0f:b1:62:08:e0:ab:2c:96:1d:d3:a9:9b:
                    c8:3b:47:80:0d:08:2a:88:e4:20:63:38:3e:e6:73:
                    9f:9d:33:bd:ca:39:18:17:47:21:fd:ac:85:c1:35:
                    ef:53:a0:a0:44:3b:a8:36:90:10:c3:21:9b:7f:7a:
                    68:f0:36:9a:f7:c2:d6:40:51:5b:19:fe:eb:b4:b5:
                    b0:fc:0c:c3:dd:f1:3f:45:e8:6c:3d:82:77:6f:ad:
                    d2:5b:87:dd:b9:8c:e8:28:4f:46:cb:9a:9b:57:60:
                    53:90:1c:bf:ef:6f:c9:5b:f6:e5:5e:3a:40:c1:b5:
                    bd:82:32:1d:36:e2:e1:93:cb:0f:a0:e1:07:e8:4a:
                    cb:27:1d:e5:32:cd:be:a1:a0:57:ec:e5:b2:d7:f4:
                    25:b9:3e:15:30:8c:05:71:bd:11:4d:3e:86:e7:f4:
                    15:12:ce:74:cd:36:46:4f:a3:6e:09:38:74:16:5f:
                    b4:d4:73:e4:4f:e0:0e:87:42:25:b8:6b:fe:59:75:
                    24:cd:f0:3f:4b:9d:e2:a2:40:a4:79:58:0d:de:95:
                    32:33:37:1e:11:e5:e4:45:a8:1e:ec:3a:39:c1:3f:
                    9e:43:d9:c2:6e:e9:3d:0b:9b:f1:7d:c4:b7:83:2a:
                    2b:65:c8:1d:2f:6b:75:99:35:39:12:9c:be:a3:38:
                    bf:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B2:74:E4:7E:BF:B7:87:F8:2F:22:78:6F:23:85:18:6D:BC:95:6A
            X509v3 Authority Key Identifier:
                keyid:F5:45:9C:BA:31:F9:33:F9:07:3B:51:4C:9C:BB:EC:34:F6:ED:2E:4A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9UWcujH5M_kHO1FMnLvsNPbtLko.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0E6A/4C281BBE11A611EEB3346926C4F9AE02/9UWcujH5M_kHO1FMnLvsNPbtLko.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         26:15:ea:c4:46:1f:0c:c8:c8:18:23:9b:b5:f9:4a:c5:00:62:
         bd:37:62:31:89:47:41:dc:32:a7:05:88:19:6e:7f:0a:76:00:
         7b:bc:83:e0:c6:5f:06:29:16:0e:63:08:1b:78:70:3b:d7:86:
         4a:6b:cd:3a:42:75:4b:63:6f:31:cd:9a:82:79:45:b3:7a:e3:
         19:6d:5a:00:47:27:b4:a2:47:86:80:16:a4:1e:94:c5:ae:db:
         d9:68:96:27:0a:55:1e:6a:c5:0a:d3:ac:b3:41:a9:c7:60:76:
         07:64:bc:f9:57:26:db:e4:36:e2:16:0c:c1:7d:79:1c:53:f3:
         91:78:02:36:57:90:c4:dc:89:b8:a1:81:ca:7c:de:b3:50:0a:
         75:a0:cd:77:74:d1:28:f8:ee:0d:3d:9c:14:c0:2c:1b:fd:80:
         9b:41:84:78:e1:4a:dd:bb:60:14:63:9e:ba:30:f1:33:a8:36:
         a2:3d:af:8d:5c:92:72:8a:01:1c:3a:c5:0a:9e:e6:d1:e1:04:
         0c:39:87:f7:35:6d:cd:f4:64:81:c8:3e:30:e7:34:05:15:f5:
         50:3c:0c:4c:dc:64:9c:f7:e2:ee:00:28:85:de:62:52:78:cc:
         0f:03:a4:50:ff:2e:9b:0b:66:48:80:e5:6e:f7:8e:23:06:d7:
         49:62:f7:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 10:15:31 2026 by rpki-client