Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
File:                     UxLzmab36w3c1RwDn4P3t6R6Xwk.mft (raw, json)
Hash identifier:          BJ3tSTlVCj1oZLMkaglUgiARVdXIOdUUt1TSvbqeK24=
Subject key identifier:   6B:72:D9:83:B4:BB:B2:D0:44:F1:53:C7:A4:03:67:A6:DF:FA:FB:DA
Authority key identifier: 53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09
Certificate issuer:       /CN=A914BC7A/serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
Certificate serial:       363F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
Manifest number:          3585
Signing time:             Fri 12 Jun 2026 15:18:21 +0000
Manifest this update:     Fri 12 Jun 2026 15:18:20 +0000
Manifest next update:     Fri 19 Jun 2026 15:18:20 +0000
Files and hashes:         1: UxLzmab36w3c1RwDn4P3t6R6Xwk.crl (hash: eRrM41H1IcGpJ07xEjw3g+xxhOcj91KJ5666kXHA61I=)
                          2: E367308E8D8811EDB3C13D6CC4F9AE02.roa (hash: a063z56fhF465bYqQMqQ/VS6+YD1pprAbiKfQKP6c7Q=)
                          3: E48E2E94017211EBA18CC269C4F9AE02.roa (hash: mVGA78Zl2U0B3hkzOEy3AAD5vMNBI+xTYAZL5c4Orlk=)
                          4: 03C522BA8CF211ED8699F014C4F9AE02.roa (hash: ZiJdNAI9D1fhgY+vFrSQSO5HYdO+TKWApMeaHQROAjU=)
                          5: 8D6973CE77C311EE90D4BD46C4F9AE02.roa (hash: kH5XvLgwYNGVU4SNZtJIVKDH6abpZgZgif4ntA/Uq98=)
                          6: EB3FE1C61B6411ECAAB1D328C4F9AE02.roa (hash: QN6urrq0/MRPBsyVwW06hj5Hgqfql2xPz8BmJ6v46LI=)
                          7: 95B5C59E2DCE11EEB652B16FC4F9AE02.roa (hash: d6iO9u2ih9RRm7pMd+vjg8OegUnNhTtH4LrmCu5pQ4M=)
                          8: 56C4FAF42D4511EAB70F247AC4F9AE02.roa (hash: YRii0Zo0Ii/RPFSSaW2DmXwDsKKvPuXOrEkEJHdLhV0=)
                          9: C2F17AB22DCE11EEA2884670C4F9AE02.roa (hash: effeuvJ8l3AUehdgLEWM2HD3kmQlAIDMK+QRL0CUES8=)
                          10: 7350B2AE2BB011EEBF8C0962C4F9AE02.roa (hash: d4lTODvUkouxXVPPc6ygUkOl8NqMMqWXrGfdqtm829Y=)
                          11: E474AF108D8811EDB3C13D6CC4F9AE02.roa (hash: noBQw864/f72VFx3andbpjd4W9nv+2EjSEATcB2fGbI=)
                          12: EF1D0466455311E98FA31F68C4F9AE02.roa (hash: WNcYetTPqeiv/gJdhSaTlqe8oWCCpgSvbxYX4ELwCGg=)
                          13: 2F20ECAE554211EF82D40732C4F9AE02.roa (hash: kgR3YHk5XEHcnqdC6D3tAl758+AW2RhczADq1evpAQs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl
                          rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:18:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13887 (0x363f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914BC7A, serialNumber=5312F399A6F7EB0DDCD51C039F83F7B7A47A5F09
        Validity
            Not Before: Jun 12 15:18:20 2026 GMT
            Not After : Jun 19 15:18:20 2026 GMT
        Subject: CN=6a2c233c-7cb7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:66:ae:d4:c6:51:d5:5f:4b:98:6f:19:77:
                    9b:dd:bd:b6:9d:5f:e1:1a:3f:ca:4e:d3:10:7b:1b:
                    85:49:5e:7b:dc:71:de:87:ba:cc:4f:46:2f:40:5c:
                    67:f9:5a:16:33:4b:47:c7:38:d9:38:80:fa:61:52:
                    77:0c:d1:ac:bc:ae:2c:2c:d8:83:e8:9d:a5:6a:94:
                    81:fc:aa:ec:d3:2c:1f:92:40:81:91:26:9a:8e:cf:
                    82:af:bd:98:47:21:bd:a1:9f:81:0c:67:d5:97:48:
                    d9:cd:6a:4d:c0:0e:78:1b:4d:35:ee:51:3f:f3:9e:
                    7a:16:4b:a3:3a:c2:6c:50:fc:89:ee:96:95:35:be:
                    53:00:76:ce:b5:bd:3d:21:b8:4d:ac:f4:c8:63:2a:
                    ea:e1:27:90:30:e0:2c:67:da:0d:28:b5:e9:d5:31:
                    52:9c:d3:7e:ae:44:3b:cb:32:58:45:4e:34:59:4f:
                    2b:87:0f:7f:7d:94:30:b0:57:e7:e3:77:38:51:c4:
                    bd:44:ce:00:99:35:3a:a8:8a:a9:6c:76:ef:86:99:
                    c1:e4:fb:2b:e0:71:8a:92:8a:60:e2:f7:cc:bb:ce:
                    6d:d9:73:1c:9d:f3:87:1d:04:38:83:9d:30:0d:5a:
                    5a:4b:83:ff:71:95:50:d6:49:bf:21:da:2b:6c:e5:
                    d4:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:72:D9:83:B4:BB:B2:D0:44:F1:53:C7:A4:03:67:A6:DF:FA:FB:DA
            X509v3 Authority Key Identifier:
                keyid:53:12:F3:99:A6:F7:EB:0D:DC:D5:1C:03:9F:83:F7:B7:A4:7A:5F:09

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/UxLzmab36w3c1RwDn4P3t6R6Xwk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914BC7A/4C528F78450311E2BDCA1F732979BB20/UxLzmab36w3c1RwDn4P3t6R6Xwk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         60:a1:ea:8c:62:da:c3:fe:20:8c:f6:7d:b3:c3:2e:ce:b5:08:
         2c:86:b0:c0:65:c2:26:40:73:ff:57:a3:52:fc:77:12:41:ba:
         06:09:37:57:1e:b7:cb:3d:2d:c4:9d:d8:8c:5f:59:cc:56:d0:
         88:16:71:95:f1:56:4f:e4:e1:af:81:2f:49:2c:05:e2:76:92:
         1c:6a:24:c3:00:b4:e5:b3:54:e6:24:a2:ce:b0:52:c1:d1:85:
         22:69:18:b0:a0:1a:56:7c:74:4b:28:5d:c6:80:11:a9:f1:e0:
         b6:ed:e7:0b:37:9a:e7:4e:04:92:a6:a8:e2:ff:8d:7e:6a:73:
         bc:3b:1d:55:58:e7:17:dc:b1:3a:40:7c:b9:36:22:a4:18:8a:
         40:3a:f1:75:71:91:0f:58:f9:97:36:48:21:16:b3:f5:b1:40:
         81:a6:aa:47:a9:50:a0:4b:e6:14:a5:2a:a1:2d:4e:a9:e4:8f:
         c5:66:1c:c0:8c:20:53:d4:d9:c7:d6:fc:85:97:89:6e:3e:8e:
         99:fa:c0:f6:c4:85:7c:c3:3b:cb:eb:fe:92:7e:99:67:d5:b9:
         12:88:3e:e0:af:fd:3f:24:3c:06:8a:9d:68:9e:13:0a:30:d9:
         ab:f6:5e:e9:d0:eb:f9:08:07:3f:16:96:24:eb:c6:e7:b3:a1:
         71:e1:46:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:47:04 2026 by rpki-client