Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File:                     S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier:          EpEIV3i59/h1polExKq3yn2TFX2B5AAm9+NyfObX5Is=
Subject key identifier:   83:5C:A1:12:21:83:85:B3:C7:A9:5D:99:BE:A4:75:28:D0:90:62:E3
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer:       /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial:       01DB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number:          01CD
Signing time:             Sat 13 Jun 2026 03:47:28 +0000
Manifest this update:     Sat 13 Jun 2026 03:47:28 +0000
Manifest next update:     Sat 20 Jun 2026 03:47:28 +0000
Files and hashes:         1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: D+cxlDaxnUqEZ6Vtr0ng/QVYG4H1FFWx3NI7Mqg3jiw=)
                          2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: QKv7DuW7py1p1eN4Lvl//mFlbdahxq73NkUDVPwAcGE=)
                          3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: qPfNRqtUl8ZoRHAU3x9Cq02LILBulhmFpAHU6RhUKSg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:47:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 475 (0x1db)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
        Validity
            Not Before: Jun 13 03:47:28 2026 GMT
            Not After : Jun 20 03:47:28 2026 GMT
        Subject: CN=6a2cd2d0-f880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:b3:25:30:98:82:f1:c8:37:8c:8d:88:46:c9:
                    81:f5:61:17:4d:30:2d:21:e1:2e:b3:02:34:1f:08:
                    21:b7:42:9b:5b:c2:f8:09:68:25:29:7e:5e:92:20:
                    2b:4f:9e:6b:dd:75:44:69:cf:32:0e:be:b9:45:26:
                    c5:21:f4:2a:39:3f:e6:9b:cd:eb:d0:2d:06:84:32:
                    cf:4f:06:e4:01:54:23:b9:70:15:1b:08:4a:49:bf:
                    4c:30:f9:6c:df:80:44:68:d1:3d:84:e5:4f:f5:22:
                    f4:85:d1:da:a1:7c:9b:ca:e0:aa:7a:70:af:d9:4e:
                    b4:73:76:7b:1b:a5:f4:12:32:56:0f:c6:55:e3:c9:
                    01:96:bc:37:8d:7d:97:4d:bc:f8:73:3f:10:86:0b:
                    8c:a1:7e:b2:49:af:61:31:e0:d9:37:18:49:20:86:
                    82:be:6f:82:7d:36:15:1f:87:ce:ef:fb:22:f8:86:
                    57:6e:1f:94:e7:1d:b1:ff:19:5d:e3:4c:c1:91:65:
                    59:11:1c:d8:3c:e5:fa:e4:a0:e4:64:91:b1:ea:91:
                    92:c8:51:a1:75:67:b3:22:01:7f:1d:ed:39:88:3f:
                    29:c6:36:1a:d4:79:e1:a3:24:01:6d:07:62:d6:21:
                    03:51:b1:31:c6:74:af:c7:e9:60:ac:ab:2d:81:40:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5C:A1:12:21:83:85:B3:C7:A9:5D:99:BE:A4:75:28:D0:90:62:E3
            X509v3 Authority Key Identifier:
                keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         84:3d:c3:17:54:63:91:90:ef:d3:14:72:50:78:21:a8:7b:a8:
         1e:51:d1:f2:28:6d:d9:2e:12:51:b1:65:83:9b:ab:68:93:59:
         40:f0:f7:fd:cb:75:24:a9:df:5a:3f:b7:08:22:76:e5:38:6a:
         3b:22:d4:93:00:a6:32:c3:c1:f2:9a:c0:a8:2e:6c:d3:64:25:
         69:cd:da:7c:94:5c:0f:ec:48:f0:a8:0a:41:01:6a:4d:d7:f1:
         58:5b:9f:53:70:cb:21:0e:1e:99:42:14:d6:56:12:2c:52:ac:
         d1:66:ab:7f:a2:37:84:11:82:67:9f:66:f8:43:ca:66:11:a9:
         90:9e:00:5e:92:1b:a0:a3:71:05:cf:82:4a:12:e4:71:62:3a:
         30:47:6e:bb:79:58:87:cd:56:1d:3b:4c:3c:47:96:f2:2c:4c:
         60:67:c6:b7:87:21:67:1f:b9:ed:37:40:a3:23:d4:0e:14:43:
         64:a1:a0:f1:98:df:76:c8:f5:62:4c:ac:28:e8:bf:6e:78:95:
         11:1b:83:aa:ff:26:35:1d:15:e3:03:73:6a:3f:9a:3f:5c:77:
         04:db:0d:9a:19:4c:43:0a:2d:83:88:92:ba:94:39:fe:13:58:
         6d:56:7a:42:db:a8:37:58:29:be:ae:3f:e4:cc:66:88:16:64:
         cb:a5:9d:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:24:58 2026 by rpki-client