Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
File:                     u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft (raw, json)
Hash identifier:          TlavVZ5lFwbIFhJVNahK3GrcpZOf04/TksrHdRGpbJ0=
Subject key identifier:   C2:87:09:0E:94:0D:47:91:6C:C5:74:C0:63:44:85:68:4D:A2:FB:AE
Authority key identifier: BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB
Certificate issuer:       /CN=A9152D28/serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
Certificate serial:       0232
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
Manifest number:          022B
Signing time:             Sat 13 Jun 2026 02:46:24 +0000
Manifest this update:     Sat 13 Jun 2026 02:46:24 +0000
Manifest next update:     Sat 20 Jun 2026 02:46:24 +0000
Files and hashes:         1: u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl (hash: mqu5NPIHShh4jqEsziViWYK3ERbvyNtUQ7gkpwBirYI=)
                          2: E94B9DBC34EC11EE94A16565C4F9AE02.roa (hash: Ny3isw6umsC+HWLP+QGmuoxGo7jIpWZVWqHK1TweF80=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl
                          rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:46:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 562 (0x232)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9152D28, serialNumber=BB57555F82AA20A51C1B48F7B26C3567F5A1E7BB
        Validity
            Not Before: Jun 13 02:46:24 2026 GMT
            Not After : Jun 20 02:46:24 2026 GMT
        Subject: CN=6a2cc480-55aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:14:91:98:78:9a:7b:f2:f2:be:d6:4a:42:58:
                    1d:91:82:22:69:31:b2:cd:0c:70:ce:c0:8c:70:9d:
                    ee:71:84:7e:93:2c:d6:33:97:1a:3e:6b:e7:14:b3:
                    14:80:dc:0c:2d:74:cb:35:46:2f:89:ca:90:32:44:
                    9e:79:ef:02:7d:e8:7f:24:4f:45:2f:2b:03:79:1c:
                    04:84:3d:25:28:23:c7:e5:ed:4b:8c:02:6b:3a:19:
                    bf:22:2c:d3:ca:3c:4d:83:bc:3a:af:30:ef:e9:c2:
                    24:e9:76:ab:f6:eb:3f:91:e6:36:cf:3b:7a:42:c9:
                    1d:8b:26:6b:89:b2:7a:d9:3d:3a:37:fa:55:ef:45:
                    d0:47:9b:de:ea:e3:5b:b1:0d:44:18:df:1f:c3:5c:
                    14:21:4c:40:b3:ce:82:9f:af:a9:1c:68:4a:88:d1:
                    c1:b8:6a:51:90:81:f5:23:2e:13:35:e6:e4:73:ec:
                    3f:f6:b2:75:2f:08:30:f8:c9:65:1e:23:f1:4f:cf:
                    33:cd:80:08:aa:ae:d5:0d:4d:e7:ec:4c:81:40:6d:
                    4f:54:82:27:f2:ec:28:d7:ea:91:ae:a9:74:12:44:
                    fd:71:2e:9c:c1:ec:00:fb:95:a6:6a:42:42:f2:3d:
                    90:ea:3d:12:99:42:50:eb:c5:1d:f2:ad:99:4a:39:
                    db:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:87:09:0E:94:0D:47:91:6C:C5:74:C0:63:44:85:68:4D:A2:FB:AE
            X509v3 Authority Key Identifier:
                keyid:BB:57:55:5F:82:AA:20:A5:1C:1B:48:F7:B2:6C:35:67:F5:A1:E7:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u1dVX4KqIKUcG0j3smw1Z_Wh57s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9152D28/AF93D162222611EE89AE7683C4F9AE02/u1dVX4KqIKUcG0j3smw1Z_Wh57s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         70:96:02:9a:38:39:1f:cf:1f:64:3f:41:bf:a6:31:d1:6a:a1:
         95:d5:d1:d7:ad:a6:63:89:13:24:5a:92:ce:f1:be:a5:df:96:
         08:08:32:74:46:ff:eb:16:90:01:b8:68:b4:40:1a:e4:1b:a7:
         0f:0d:6e:0b:09:17:e2:03:5b:9d:32:da:3f:10:04:bc:ab:ef:
         81:6a:eb:15:52:af:c6:a5:7d:a2:60:b3:ed:fb:3a:16:25:31:
         87:c1:54:a6:e8:18:72:bd:f2:d3:6b:69:39:cd:12:83:b3:22:
         e9:8c:32:53:ff:ef:96:9e:f6:da:c9:74:ee:a4:01:77:c0:65:
         15:f1:71:c5:db:ce:37:08:50:64:41:5b:b6:e2:9d:ad:d7:97:
         2d:81:e7:4a:e0:cf:84:ff:49:30:ff:88:97:48:53:41:23:ad:
         72:13:e4:27:d6:35:22:0a:5a:b8:11:b9:de:b2:3b:2f:1e:71:
         f2:a1:f0:99:e0:85:e5:45:6e:04:21:93:2e:6d:57:a9:96:cf:
         95:a7:59:cf:11:6e:bd:f7:cc:a2:29:15:6f:5a:34:b3:39:15:
         1d:69:1d:6e:63:18:80:d5:ec:b4:5d:08:e0:68:a9:11:95:de:
         c2:bd:43:0f:a3:4b:9b:b1:0f:17:72:90:3a:f3:f8:30:0e:d8:
         db:ca:c0:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:29:53 2026 by rpki-client