Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
File:                     aUOJgRsj_1S9M9BrFKb99PL02eQ.mft (raw, json)
Hash identifier:          sJkkra8Ge/LCrnJMdJGv5+lYGAzCa6ENU3K8uuCVyI4=
Subject key identifier:   7C:C2:6B:06:3B:25:B9:1D:DA:00:56:24:93:53:EC:63:62:C7:93:23
Authority key identifier: 69:43:89:81:1B:23:FF:54:BD:33:D0:6B:14:A6:FD:F4:F2:F4:D9:E4
Certificate issuer:       /CN=A9114B3B/serialNumber=694389811B23FF54BD33D06B14A6FDF4F2F4D9E4
Certificate serial:       1D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
Manifest number:          1C
Signing time:             Sat 13 Jun 2026 08:59:00 +0000
Manifest this update:     Sat 13 Jun 2026 08:58:59 +0000
Manifest next update:     Sat 20 Jun 2026 08:58:59 +0000
Files and hashes:         1: aUOJgRsj_1S9M9BrFKb99PL02eQ.crl (hash: MjjS3KDgbDQR0+3Kssj3jk6cLqD4BmNKLheD/MDPEsE=)
                          2: F010CE063E2B11F18BB5C12CB7833773.roa (hash: W7eizne+DX77FkuJOSpb532tWqOXyFwOYpOpWygkp+s=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.crl
                          rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:58:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9114B3B, serialNumber=694389811B23FF54BD33D06B14A6FDF4F2F4D9E4
        Validity
            Not Before: Jun 13 08:58:59 2026 GMT
            Not After : Jun 20 08:58:59 2026 GMT
        Subject: CN=6a2d1bd4-a571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c5:36:7a:d4:14:3c:4a:5f:f0:29:cc:bd:84:
                    7e:1d:21:cd:3f:f4:f2:94:29:c5:d5:cd:17:a1:18:
                    4c:57:dd:29:a7:bc:aa:bd:3e:67:2f:c7:cf:74:c6:
                    e0:2a:5f:8d:eb:10:4d:94:f8:88:00:90:5d:50:e0:
                    4b:ed:53:e3:07:ea:7d:18:e5:5f:30:10:f5:e8:b8:
                    72:19:4a:5a:29:b4:bc:2c:4b:33:f8:a9:ee:bf:e3:
                    c9:13:65:fe:71:85:aa:5a:41:21:28:5b:b3:d2:dd:
                    50:cf:38:24:a0:10:f9:9c:71:5a:37:b3:dd:11:74:
                    91:fe:a9:6a:31:6f:a2:6e:3e:f0:f1:76:8d:88:09:
                    7f:32:a7:e4:a5:99:86:85:f1:f4:27:f0:bd:fa:0d:
                    65:3e:de:4c:2b:ca:77:c2:6e:ec:97:50:a2:c3:bb:
                    2b:45:43:4d:2c:09:d2:61:8d:4e:8a:fd:6d:92:0a:
                    11:cb:10:22:2f:fb:6a:1b:7b:67:89:08:4b:54:22:
                    ad:1c:4f:dd:10:f3:cf:92:d0:e1:be:00:04:26:71:
                    70:42:2c:ab:e2:6d:a5:7f:b0:51:bb:c7:61:63:21:
                    21:6b:93:d8:19:64:c2:43:1e:2d:46:b7:50:a3:32:
                    b3:26:35:48:4f:e9:14:dd:fa:48:11:70:6b:25:e0:
                    32:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:C2:6B:06:3B:25:B9:1D:DA:00:56:24:93:53:EC:63:62:C7:93:23
            X509v3 Authority Key Identifier:
                keyid:69:43:89:81:1B:23:FF:54:BD:33:D0:6B:14:A6:FD:F4:F2:F4:D9:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aUOJgRsj_1S9M9BrFKb99PL02eQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9114B3B/C9983FCE3E2711F1A5B85BA4B5833773/aUOJgRsj_1S9M9BrFKb99PL02eQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:38:fe:19:67:13:db:11:3c:78:14:88:84:46:4b:d6:bb:a0:
         cb:65:65:d6:50:ff:9f:93:41:42:65:61:c2:d4:d1:b0:75:2e:
         07:d0:73:14:66:6d:b0:28:75:31:8e:75:cf:82:54:19:08:f7:
         86:89:9f:1a:ab:c5:99:3e:df:28:1b:39:02:6d:f8:84:58:4e:
         d9:7e:a1:99:91:30:05:33:01:14:97:f2:a0:17:9c:6e:cc:78:
         1a:44:82:a4:9d:7c:12:12:4a:ad:a1:9d:bc:35:07:c7:d6:75:
         40:8c:b9:9a:57:f0:99:32:1e:58:92:a9:b9:1d:2e:1c:3c:7a:
         19:7e:e1:ea:ec:c6:88:15:31:f0:2a:35:44:44:6b:9b:4d:ed:
         7c:42:00:8f:53:d2:f6:41:8a:fa:ed:cc:47:df:fe:98:f1:d4:
         f6:b4:1f:e5:9c:27:f2:a8:eb:63:4e:2b:fd:a3:4f:04:d8:f4:
         4a:89:af:db:d6:56:c2:3b:71:49:ce:35:86:50:af:c6:27:e4:
         27:04:ea:3b:69:c1:ef:0c:dd:3c:39:d4:a2:79:ff:ef:c4:6d:
         72:d7:12:fc:7a:9e:9a:00:51:1e:6d:93:2c:e3:e9:20:96:52:
         7c:ba:ae:5e:e0:29:1b:8b:b6:79:63:22:55:55:24:3e:5d:58:
         7c:6b:53:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:29:06 2026 by rpki-client