Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
File:                     uHMcMIhjyygE4HbVjowHFZtOXxk.mft (raw, json)
Hash identifier:          7EpgeGib7UoknrJiTSWaEx5jMTCjTQ3/7xIYgnW3kfI=
Subject key identifier:   7A:DE:A4:64:7E:3A:EA:0B:88:A7:CF:E6:89:E6:8B:13:EB:E6:43:07
Authority key identifier: B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19
Certificate issuer:       /CN=A9164663/serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
Certificate serial:       08D9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
Manifest number:          1BB5
Signing time:             Fri 12 Jun 2026 16:59:43 +0000
Manifest this update:     Fri 12 Jun 2026 16:59:43 +0000
Manifest next update:     Fri 19 Jun 2026 16:59:43 +0000
Files and hashes:         1: uHMcMIhjyygE4HbVjowHFZtOXxk.crl (hash: 9JHb5oawbdL1MkXMkEyxIp7+8VQV15gM/qF1jVaqoyg=)
                          2: 7BB2BC009FFA11ECA13C2839C4F9AE02.roa (hash: 0mD1tYN+qJ4ZEmTYDfuYD71fkBVWrijcZkPWh5aSwVo=)
                          3: 3D626CDC065111F0BFE43624C4F9AE02.roa (hash: Wf4be6FwFqPP3iUc0pkYIe0CNb2Zqj9u4gl1FivZpRU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl
                          rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:59:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2265 (0x8d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9164663, serialNumber=B8731C308863CB2804E076D58E8C07159B4E5F19
        Validity
            Not Before: Jun 12 16:59:43 2026 GMT
            Not After : Jun 19 16:59:43 2026 GMT
        Subject: CN=6a2c3aff-b981
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:88:dd:10:0d:f8:83:dd:d8:da:fb:eb:fa:a2:
                    98:91:c7:17:81:9b:2a:c3:9d:5f:2e:8c:c0:0f:dc:
                    c4:79:02:88:3c:47:b8:aa:f6:04:5f:18:d0:2c:72:
                    8a:1c:96:e6:05:a7:ca:3b:16:2a:27:6f:67:34:a6:
                    3a:46:bd:00:92:7f:da:e7:d5:3f:27:b3:46:45:a1:
                    b1:e9:0c:fc:eb:78:f6:81:02:f1:e3:17:71:b0:81:
                    03:8c:0e:84:1d:b4:12:fb:91:09:90:97:a2:5c:28:
                    fe:6e:b2:c5:34:30:cc:fa:eb:2a:ac:9d:34:b2:5a:
                    71:99:6e:0d:9d:05:61:c4:5c:3e:ca:6b:6c:b5:53:
                    8e:d3:81:20:a7:1d:46:48:8c:08:91:01:90:c2:f8:
                    14:d4:19:b9:ca:a1:30:72:3a:2c:95:e2:c7:46:f4:
                    c6:f4:ab:70:be:fb:69:52:b3:fc:cd:4b:0e:76:b7:
                    ee:e0:be:1c:19:46:35:84:51:81:de:5d:37:bd:a0:
                    55:f6:23:2a:f4:e8:05:74:75:1e:29:b9:6f:08:f7:
                    0f:e9:9e:c4:ab:7f:64:13:61:68:1d:44:a5:81:3b:
                    29:56:80:39:2d:7c:73:c4:53:03:22:56:a7:00:03:
                    1e:63:a0:e7:95:59:1c:2e:2d:c6:43:ad:e0:bf:50:
                    07:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:DE:A4:64:7E:3A:EA:0B:88:A7:CF:E6:89:E6:8B:13:EB:E6:43:07
            X509v3 Authority Key Identifier:
                keyid:B8:73:1C:30:88:63:CB:28:04:E0:76:D5:8E:8C:07:15:9B:4E:5F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHMcMIhjyygE4HbVjowHFZtOXxk.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9164663/14EAA9FADA7911E89B95A672C4F9AE02/uHMcMIhjyygE4HbVjowHFZtOXxk.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         4a:f2:05:b9:30:78:33:8d:80:80:b3:ca:dd:3e:7c:a2:cf:73:
         ae:08:3d:07:dd:a6:64:28:0d:80:6c:4e:0e:5a:ab:3a:58:ec:
         24:aa:f8:9f:dd:e4:e1:cd:8f:86:25:19:b9:27:11:b8:ef:40:
         cc:e0:be:fb:bb:bc:4c:dd:d6:88:e4:51:de:6d:d3:70:1b:5c:
         14:f4:20:3a:a0:0f:ae:81:03:c6:b8:69:de:2c:4e:71:21:d3:
         6b:0d:82:75:36:f3:81:15:1c:76:a1:61:b1:25:d7:25:8b:f6:
         88:4a:ab:96:90:c7:bc:59:a6:76:f5:af:e9:ee:e3:4d:b5:cf:
         66:8d:9a:28:78:6f:2b:cf:41:3e:50:f1:4f:be:13:e2:10:86:
         c1:d7:59:54:14:2e:21:71:ec:0d:7a:ef:51:96:58:ab:23:44:
         26:45:0c:06:07:e0:69:ca:a4:4d:6b:53:69:d2:f7:f7:f4:e8:
         34:40:83:b3:34:e4:49:ab:72:cd:ad:d1:d5:8d:15:36:c3:ad:
         92:bf:7c:1b:aa:77:fa:ea:bb:57:e6:79:c1:32:5b:04:05:11:
         ba:a0:77:03:bf:88:d0:1c:78:55:75:bf:9d:bb:8c:d1:a3:57:
         34:36:ea:19:93:ba:3a:b9:47:7a:60:a3:1f:11:36:b9:03:76:
         6f:01:06:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:33:34 2026 by rpki-client