Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
File:                     uvWtoyyg00zzzPU6vfht5vjtkAU.mft (raw, json)
Hash identifier:          iSuBjOPtF5WdEh+DtLhaLGhjy+3Bn7hphQ4fQiNT39g=
Subject key identifier:   20:85:C3:22:9C:58:3D:2B:D1:2F:7A:0A:74:27:10:ED:D7:31:96:C9
Authority key identifier: BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05
Certificate issuer:       /CN=A9146AD7/serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
Certificate serial:       1AF4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
Manifest number:          1A23
Signing time:             Fri 12 Jun 2026 16:21:53 +0000
Manifest this update:     Fri 12 Jun 2026 16:21:52 +0000
Manifest next update:     Fri 19 Jun 2026 16:21:52 +0000
Files and hashes:         1: uvWtoyyg00zzzPU6vfht5vjtkAU.crl (hash: pjnSVV5DHsyXnTkisziDFLcmWxdLFLQ9gIWVzH5hNbw=)
                          2: 4532BD9C14EF11ECA529523DC4F9AE02.roa (hash: 6oqBivfV20ZCwWDrvfDszw8M0HSCjMHWk8bUvCdKaCc=)
                          3: 669662644C4B11EE9AC4B26BC4F9AE02.roa (hash: vjNJ7t/fR8gZHZFW7rS7pSPlSs4z2F/aS/JSQ3DxuPA=)
                          4: 6B78FC0C892511EFA94C8B24C4F9AE02.roa (hash: wsW3aqGjxehyBgpTwS7HywIwph1+NVgxAvtD2hhF8FE=)
                          5: 6F0B8F96B3A511F09EBFA458C4F9AE02.roa (hash: 3AW6Ko47S5785nZPFbtEEMHhRxhTEGko/pianNlkRfQ=)
                          6: 4F9AA82CC02411EC93BB8865C4F9AE02.roa (hash: m4cHchahu0FcuRzlm+r74ocShlfFVkLmN+v6ll48l84=)
                          7: EB61BF32FDCD11EEB0EABC0CC4F9AE02.roa (hash: /eEZUKJWpNpZ2mR8oMJuCWCGAOo81sPu7UrR35Q+2rI=)
                          8: 3003BB4EB3A411F0B8845739C4F9AE02.roa (hash: K4YYZFd9CxYpJZ2+aOvlAMI9Dkr8syByGIN8hdR0iwo=)
                          9: 4EE22C48C02411EC93BB8865C4F9AE02.roa (hash: YM8lkpFLkO4Bbr1IWWoMC4SWTHYqIxyd5W0ltmh5jmM=)
                          10: 6A90213E3FAD11EEA252F62FC4F9AE02.roa (hash: WnWJy2LtcUBqxAM9qw86LcXMg7nx0+JTWYQZUhKZvPc=)
                          11: 1321A11C9DF311E99A8DE961C4F9AE02.roa (hash: Er3lL/S505EsaOt1uacROwj0JQEQVjW8R9dfPP8sfHo=)
                          12: 21730760B3A411F0B1142735C4F9AE02.roa (hash: im8eNEl51/Iajj6nEj+0v7DWapzv6w3ygAcW7Tm2EYY=)
                          13: 5047D510C02411EC93BB8865C4F9AE02.roa (hash: c9spXCzN8OLXoP5L7k74P6VknznwAVNWRQsN3HnNFII=)
                          14: E125DC2E94D611EAAC882A28C4F9AE02.roa (hash: LOzTCKrMgLJq0MdRVFDlgehNk6Muqpflj11oEgLrLuo=)
                          15: 6B09C1DAB16811ECBB0AD94EC4F9AE02.roa (hash: xHGcoIaGOzKJwv6w3Z8rV5SCo2Gj6ECIx8o45Fg7/Kc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl
                          rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:21:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6900 (0x1af4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146AD7, serialNumber=BAF5ADA32CA0D34CF3CCF53ABDF86DE6F8ED9005
        Validity
            Not Before: Jun 12 16:21:52 2026 GMT
            Not After : Jun 19 16:21:52 2026 GMT
        Subject: CN=6a2c3221-8cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:e4:1b:d9:54:09:bb:d4:3c:82:30:bf:67:72:
                    c6:bd:91:24:3e:e6:58:fc:61:89:38:9a:00:83:61:
                    17:3d:77:63:7d:f7:d4:1d:3b:fa:ed:99:e7:d4:9f:
                    6c:2f:ce:3e:02:1c:56:36:a5:66:37:0b:8f:c9:76:
                    21:a8:8f:c6:e4:98:b7:c1:26:98:e6:1c:0c:27:d5:
                    73:f9:5f:a3:c8:05:f9:3b:c1:11:66:e7:3e:49:ed:
                    b0:8a:75:34:dd:45:83:79:54:b7:2f:1e:c4:a7:ed:
                    b9:6d:28:34:b9:5b:c5:c0:ae:02:33:47:8d:58:2f:
                    af:05:88:39:00:eb:2c:73:52:aa:c4:95:d0:3b:92:
                    64:50:d4:ab:46:a4:57:c8:6f:f1:d9:ef:3b:f5:d1:
                    87:c5:1f:ec:94:4d:6a:01:5d:cc:7b:35:b1:20:04:
                    c0:e4:7e:0d:d6:60:ab:01:79:66:64:72:e7:d3:f7:
                    56:45:85:2c:24:e7:1b:10:8c:cb:51:7d:d8:2a:a1:
                    66:1c:c4:2b:c8:66:13:4c:74:2e:ea:e5:af:2b:38:
                    a0:84:e7:20:fc:a6:a5:3a:8e:83:a4:06:f1:98:9d:
                    83:f5:bd:bf:e3:95:93:f6:56:56:bb:40:98:ba:de:
                    62:7e:16:da:f9:27:94:5c:7e:00:1f:9a:d8:50:cf:
                    1f:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:85:C3:22:9C:58:3D:2B:D1:2F:7A:0A:74:27:10:ED:D7:31:96:C9
            X509v3 Authority Key Identifier:
                keyid:BA:F5:AD:A3:2C:A0:D3:4C:F3:CC:F5:3A:BD:F8:6D:E6:F8:ED:90:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uvWtoyyg00zzzPU6vfht5vjtkAU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146AD7/F8BABACA8B8911E790115C3FC4F9AE02/uvWtoyyg00zzzPU6vfht5vjtkAU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:13:cf:3b:00:76:ae:12:0f:0f:dd:63:22:79:a2:e9:32:5e:
         19:0f:f5:68:a6:c5:bc:a7:67:cd:41:a0:88:51:8d:c4:3a:d8:
         a5:1a:8f:b0:d4:5a:22:6c:d0:74:1d:86:e0:8d:79:cc:8c:28:
         f5:9f:aa:ed:e5:55:5a:8b:10:10:9d:5b:7c:3a:08:1f:ab:3d:
         46:75:c7:31:f5:7f:e5:c6:d0:06:42:de:d0:da:f9:95:fb:ed:
         31:18:f9:d1:43:7a:b3:dd:d7:46:b1:d6:70:89:e2:8d:68:ba:
         0f:84:36:ad:ca:e0:df:03:68:26:37:cf:8c:99:7f:3a:4b:21:
         c2:cb:0e:e2:c9:00:e9:07:43:e3:97:3b:b2:ec:cb:f5:22:3d:
         3c:c8:cd:fa:f4:e6:85:89:51:15:8e:86:9e:69:fc:d7:25:dd:
         b7:1d:36:40:19:a6:45:6c:bf:da:8c:44:cb:40:43:69:26:88:
         92:58:d5:83:bc:4d:99:96:d6:88:ab:24:8f:c7:b1:96:23:ee:
         67:a4:09:14:5e:3c:ee:04:47:d4:44:5a:f7:f7:a4:e3:2d:d2:
         da:04:b0:74:77:c6:73:97:52:18:de:31:fe:22:ea:83:03:2c:
         f4:03:e9:93:b8:5e:3d:68:7a:dc:6a:a9:22:7e:37:bf:93:bf:
         a7:68:aa:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:58:25 2026 by rpki-client