Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
File:                     U4JkLr15mg-ChtBlSCntdoQw-eQ.mft (raw, json)
Hash identifier:          2Oh8zr3bnuAV8IFLv3GfSKTLN1vHwYbtfpTvdzzngtM=
Subject key identifier:   1B:BF:33:27:F2:69:5E:5E:E7:AE:54:F3:23:5E:6E:36:E5:AD:E9:A6
Authority key identifier: 53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4
Certificate issuer:       /CN=A91E6856/serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
Certificate serial:       0F1B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
Manifest number:          0F11
Signing time:             Thu 04 Jun 2026 17:36:34 +0000
Manifest this update:     Thu 04 Jun 2026 17:36:34 +0000
Manifest next update:     Thu 11 Jun 2026 17:36:34 +0000
Files and hashes:         1: U4JkLr15mg-ChtBlSCntdoQw-eQ.crl (hash: Cq7waHtTgdpEi42QrWHfDadhE4qCFZZlshNQacosWiw=)
                          2: 350711FA881211EE9710F928C4F9AE02.roa (hash: /Sl1+zcuYzALlR5FExQ8VOIo7ICRp9RWUJXD4AKkevs=)
                          3: C2213CFC2CC311F1A8A01C5D8F833773.roa (hash: tkrVJ/cVpoiHk0cmXy2YYFkJoXN9OgcqITOcYSO8FI4=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl
                          rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 11 Jun 2026 17:36:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3867 (0xf1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91E6856, serialNumber=5382642EBD799A0F8286D0654829ED768430F9E4
        Validity
            Not Before: Jun  4 17:36:34 2026 GMT
            Not After : Jun 11 17:36:34 2026 GMT
        Subject: CN=6a21b7a2-f2c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:b8:d4:23:b7:a6:58:5b:fd:46:40:73:8d:12:
                    af:77:17:12:57:cc:2f:37:22:c2:3c:6c:6a:73:f9:
                    22:3b:f3:24:bc:7f:a0:b2:f6:85:ef:37:9c:44:f8:
                    47:97:ee:2b:d3:90:97:24:6d:5e:9b:74:a8:82:2e:
                    c8:30:32:5a:52:f9:5f:d0:70:0e:d3:a6:ec:96:1f:
                    c8:3c:1a:35:c8:78:ba:11:3e:be:3f:48:b8:8f:04:
                    a6:cb:4a:8f:43:42:39:71:7e:2e:0c:b0:9f:1f:45:
                    a9:23:7b:d2:1e:cd:3f:ec:89:1b:24:08:e5:58:22:
                    c4:05:d6:84:aa:da:da:7a:d4:56:05:22:75:61:5d:
                    ac:98:0e:de:ce:8c:43:0c:7b:a8:16:1c:a8:ae:89:
                    04:64:fc:07:71:0d:1e:c1:d4:0a:28:ea:24:a4:bc:
                    1d:98:c2:8e:a7:3d:ef:5f:4a:e2:30:05:30:1a:a5:
                    90:4d:32:c9:a8:51:57:c8:b5:af:01:73:e2:f7:0a:
                    3c:b9:3f:38:e9:65:e1:57:eb:6f:21:a7:50:8a:36:
                    5f:f5:98:a0:25:52:78:1c:5d:43:47:79:62:38:eb:
                    a9:45:1a:9b:f5:06:76:cf:03:1f:f7:d5:b2:c9:9f:
                    76:3c:6b:29:c5:55:44:e3:b5:f0:fc:38:3a:22:5d:
                    55:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BF:33:27:F2:69:5E:5E:E7:AE:54:F3:23:5E:6E:36:E5:AD:E9:A6
            X509v3 Authority Key Identifier:
                keyid:53:82:64:2E:BD:79:9A:0F:82:86:D0:65:48:29:ED:76:84:30:F9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/U4JkLr15mg-ChtBlSCntdoQw-eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91E6856/2CD45FBA9E2411E9B143BE71C4F9AE02/U4JkLr15mg-ChtBlSCntdoQw-eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2b:d5:ae:af:15:be:86:79:3e:af:11:f6:67:f7:6f:24:43:a8:
         b8:7a:d6:59:e0:cc:ac:1c:c2:2b:6b:50:1a:b7:7e:cc:ae:f5:
         3a:e8:c7:80:5a:48:7b:4c:60:ef:6a:91:8d:2f:54:16:e5:20:
         f2:65:8d:2b:0a:1b:62:92:f5:c2:20:20:11:49:8d:96:59:a9:
         1c:47:0c:59:51:2d:48:92:9c:57:38:90:db:02:e5:a3:0e:1d:
         59:cd:10:43:e6:ae:4f:46:c0:d7:3c:c2:52:5d:bf:57:88:4d:
         4e:46:3f:35:f8:ad:5c:cd:d3:e0:06:d4:1f:3f:3b:81:0b:81:
         6e:51:b3:ad:b2:da:a7:06:ac:00:21:50:f9:48:1f:1f:2d:4f:
         e5:8c:70:73:7a:ce:69:e0:b8:33:87:98:5f:99:ca:34:ba:82:
         ed:eb:bd:21:b2:7e:f2:c8:55:73:e0:e9:dd:2f:e8:ec:fe:ce:
         e4:95:be:46:89:4b:8e:55:db:74:72:29:a9:0f:5f:ad:84:09:
         c8:d8:44:11:1d:d9:37:37:ed:48:c9:11:96:8a:75:48:84:24:
         39:db:08:dd:f1:4b:41:2b:4c:5c:5c:f2:bc:80:80:f6:e0:90:
         a9:30:3c:af:54:58:18:62:7f:be:7d:ee:11:06:5f:a6:17:a0:
         9d:b0:b3:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 17:07:37 2026 by rpki-client