Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
File:                     tU4IRltUXO7x4uEAl3XZG6QStj0.mft (raw, json)
Hash identifier:          mZyKcZiYfhSBBxE0Vgoz+GffzuFt9EXWybmGtJs33yA=
Subject key identifier:   CC:C6:19:FA:E8:7C:8A:BA:03:CD:25:62:94:4F:A9:53:AA:F6:1D:D3
Authority key identifier: B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D
Certificate issuer:       /CN=A9172B46/serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
Certificate serial:       DC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
Manifest number:          AC
Signing time:             Thu 11 Jun 2026 10:00:50 +0000
Manifest this update:     Thu 11 Jun 2026 10:00:49 +0000
Manifest next update:     Thu 18 Jun 2026 10:00:49 +0000
Files and hashes:         1: tU4IRltUXO7x4uEAl3XZG6QStj0.crl (hash: jaRQoHujh+qtsTu2JEixHlrR2hHtqHbNSaNV3BphE64=)
                          2: 1E9FD7DA27DE11F1A118CE77A7833773.roa (hash: 4HZ72AqLXMi7Oo7fFl4c7MxtfYI6Hr7/6V24G0+ZxdI=)
                          3: CFF23F5457FA11F1947AF89298833773.roa (hash: 70J08+H/ExNxc8jpD+BsqCt2q0k+wbGOjpsoiz2ROjA=)
                          4: 2D01B33649CE11F1962271F3A6833773.roa (hash: fE3u6ug0IGHQpJAT/PUe02heuwmqk8tqifUw2JFm9XE=)
                          5: 5493E832AF1511F09DB9CB78C4F9AE02.roa (hash: uIjz1D93M1fso+Y//Hqt4d2aDi49XaTeerlMUnOZ7Ao=)
                          6: B8D03A32549F11F1A02DE194C4833773.roa (hash: LDw5iBbHQmTnPtE2VvuRn583vMFOYPnfK+mlWSFNPfw=)
                          7: CCFDB2144DB011F1841B5A61A9833773.roa (hash: ZHHXb+Rd1SAvm8Cz4gOMYdUMC3J7YTS6auWCfBjP8e4=)
                          8: 23967BF24A7711F1A7BED77BA6833773.roa (hash: Fp0dYx6TPqms3ShBwcnNza2eQIEhSvJF0hdWgmkuGzo=)
                          9: 1A44C40648FF11F1AE16E45D93833773.roa (hash: q7YWA5SPxz9lm686m7SUsJ/DXFlxCYiGkRbWYzw7qBs=)
                          10: DE9579CE528511F18C1495C7C8833773.roa (hash: 9LcZVZAD8l45RehazmTe3zQA3/WAaY/wjpC8CzfMy6w=)
                          11: B9DCE45A347111F19700968FA5833773.roa (hash: 6QpnuOmxKQrcMtBDCLToCXkzosmzHxUQUPokRTTJH3w=)
                          12: A7349B8A499E11F19CE2905A97833773.roa (hash: tv8Ttyi8smlY2FRZQxJdaalHWRaIZpl5MIGpz7txhiY=)
                          13: 7C66030E49CF11F1A6BACE62A7833773.roa (hash: tBXwz1eGx7JSBx7KbE61Py7Ep4zIyFlKzA5jH4c9rY0=)
                          14: CC6E06464DB011F1841B5A61A9833773.roa (hash: EVyYFIZNxK8a7Tjlv1GJXTQzYVTlNFeidUt73d+7VzA=)
                          15: 300E55D2645B11F19DFE990E7247A888.roa (hash: B8rZI43b2LUCXU8rE+xRAPdthQYs+K3MurmJh+dDXVg=)
                          16: 5B9CF7B8541011F193006E3293833773.roa (hash: UEPdDUTRui+ayW3AbcnrWggT880Cdd6becbTRiUrqEI=)
                          17: D2D5E3A2429111F1A9B50A47B2833773.roa (hash: JNJnwJdlLDhaD1G/+iNzHqjRU67B9dzGcdSz2okho74=)
                          18: 04656EAC645B11F1B268230A7247A888.roa (hash: ZLSg6HwODLo+puhFiwXmPzM7m7MODVG9RC15F63rdlg=)
                          19: 36B69F0C218F11F19319393A0D3D8C67.roa (hash: KJ//K7GtgLc3Sie2BItNl434WLtJNinu64G7n9RU6IE=)
                          20: 0D0B98CA4E7A11F19ABC63EAAE833773.roa (hash: MYyEucLCCxrI3FOhoLhSAqiBaqtBwcoKacKk+luCAfA=)
                          21: ABCCE66C445C11F1AD9768EE92833773.roa (hash: 9iBZLQ9uktWZ65mu8nlRlZWV5ecR8Ndx/Ji4IWLuSGw=)
                          22: 7E20B24444FB11F1B2B16DC3CD833773.roa (hash: Z/aKf77qoC/D2esHAmrCa6cvuliS7eMoobwi4UM9D1o=)
                          23: 050E38E62E3E11F18FB4E28692833773.roa (hash: /JFZwhWSwSdVNSAIA2VslFfJ0mFpMyrPcYB8jKhIelI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl
                          rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 18 Jun 2026 10:00:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 220 (0xdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172B46, serialNumber=B54E08465B545CEEF1E2E1009775D91BA412B63D
        Validity
            Not Before: Jun 11 10:00:49 2026 GMT
            Not After : Jun 18 10:00:49 2026 GMT
        Subject: CN=6a2a8751-c1dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:97:92:54:14:ba:92:9d:3d:c5:07:13:d8:
                    92:61:4f:54:d5:a5:c4:f0:6b:9a:83:5b:0b:77:d2:
                    ac:56:f8:8e:78:00:24:8c:35:19:08:ab:dd:c0:d4:
                    36:04:b5:c2:c9:f2:45:40:11:35:f8:d5:d4:ef:50:
                    35:bc:17:5d:83:45:f5:3c:46:29:38:c3:2e:66:19:
                    37:14:81:a6:80:37:67:53:ae:a4:85:6e:03:93:f0:
                    53:d3:e0:da:75:1a:29:3b:69:9c:14:a5:a0:44:31:
                    58:e0:13:5d:ff:e0:24:33:3a:35:1e:8e:fa:ae:c4:
                    67:ce:31:37:ee:e7:9a:31:96:c0:80:dc:2d:35:61:
                    2b:1a:78:7e:6d:a2:26:b6:36:0b:d4:b3:ac:02:96:
                    01:44:71:5a:1c:32:1a:bf:65:14:7a:7a:99:51:09:
                    68:a6:67:db:95:ed:c6:e5:15:9d:ee:51:23:ec:d8:
                    ad:97:e7:50:55:b0:ec:70:1d:d9:79:3e:e0:70:5c:
                    c5:b0:d5:c7:6e:35:40:d3:5a:c8:eb:b0:67:b7:7c:
                    45:dd:9d:e2:2c:dc:4a:a6:08:de:9d:a8:b0:5b:e8:
                    85:0f:82:ec:5e:03:9d:2e:0c:9b:3a:d4:c7:f4:3c:
                    77:50:98:c1:e6:9c:77:54:c1:a1:2a:23:fd:b2:b2:
                    a3:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:C6:19:FA:E8:7C:8A:BA:03:CD:25:62:94:4F:A9:53:AA:F6:1D:D3
            X509v3 Authority Key Identifier:
                keyid:B5:4E:08:46:5B:54:5C:EE:F1:E2:E1:00:97:75:D9:1B:A4:12:B6:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/tU4IRltUXO7x4uEAl3XZG6QStj0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172B46/088701B8ABB411F0ABF20940C4F9AE02/tU4IRltUXO7x4uEAl3XZG6QStj0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:f3:32:ef:8b:00:1f:19:e2:c0:34:6b:00:d8:e8:54:07:4b:
         2a:f1:b8:69:4f:7c:a6:e8:1c:b3:ef:89:ef:ae:41:0d:71:1b:
         24:eb:07:51:e3:ed:81:0c:35:be:c5:03:90:fe:5d:13:8b:e6:
         8b:53:73:f7:a6:71:5e:b5:90:57:6a:d9:b3:29:02:3b:2a:22:
         23:0e:5b:ff:3b:0c:56:6a:e9:d4:14:37:8d:f5:1c:6c:69:d4:
         77:9d:31:1d:1f:2e:5d:66:d6:05:c9:0e:f8:6c:16:53:e8:8a:
         5b:d2:5e:90:59:81:c3:90:6e:79:15:cc:b9:70:a7:47:6c:ec:
         4b:aa:f3:50:17:7f:5e:53:39:6e:a8:1d:e1:fa:ea:95:8c:60:
         bf:28:40:9e:dc:fb:82:df:ea:85:9d:0d:fa:e8:88:5e:61:46:
         b3:27:25:ce:25:f9:31:19:65:33:1a:2e:73:25:08:fc:5c:39:
         8d:65:ea:8d:44:02:c4:16:0b:64:e3:1a:27:5f:83:92:27:bc:
         ec:02:4c:2f:ac:af:f2:b4:7f:f1:60:45:40:ae:3d:de:81:19:
         ce:1b:1f:92:97:40:d5:5a:da:27:24:85:ea:82:59:63:0b:87:
         95:ee:14:92:17:8f:8a:f9:24:b5:14:10:30:7e:13:62:1a:7b:
         4d:b6:c6:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:35:11 2026 by rpki-client