Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
File:                     S-UGizexYyUw_1Ijhue3-wGI6eo.mft (raw, json)
Hash identifier:          zt6F5hp+DjwB/WlQApn9nlwaj69JFhzI9Fc8HqNob/M=
Subject key identifier:   2C:F1:3E:63:4B:14:49:1D:5B:5B:08:37:11:58:A8:D9:DC:BA:A4:28
Authority key identifier: 4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA
Certificate issuer:       /CN=A9172BD3/serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
Certificate serial:       01BB
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
Manifest number:          01AF
Signing time:             Fri 17 Apr 2026 03:48:57 +0000
Manifest this update:     Fri 17 Apr 2026 03:48:56 +0000
Manifest next update:     Fri 24 Apr 2026 03:48:56 +0000
Files and hashes:         1: S-UGizexYyUw_1Ijhue3-wGI6eo.crl (hash: BETeCmF+/V79FYKSRiPU1hAd4KUgHWw4RwLMUUhZTFE=)
                          2: 2DAB7B74BE4211EE970F4140C4F9AE02.roa (hash: Zp+vDxjgp9IBMQisqTAyGrA6N1rfRNHRmhhuRUlKotI=)
                          3: B979F0F4BE4211EE9D6A1D6CC4F9AE02.roa (hash: Mu781u2UOCsoMogGCO1asa+hOVZHkRFUxZxq0Tk4hzk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl
                          rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 03:48:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9172BD3, serialNumber=4BE5068B37B1632530FF522386E7B7FB0188E9EA
        Validity
            Not Before: Apr 17 03:48:56 2026 GMT
            Not After : Apr 24 03:48:56 2026 GMT
        Subject: CN=69e1ada8-dfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fc:b8:d6:41:ca:47:9f:a7:9d:d6:17:98:65:
                    98:8c:ea:c7:f0:1c:73:33:8f:79:ef:93:0f:2a:8b:
                    07:7d:3c:5e:b0:5f:90:dc:9a:b9:7f:33:cb:73:28:
                    d2:17:fe:17:dd:5d:3d:a5:c0:f4:cb:51:32:e3:84:
                    bc:39:38:1a:d9:f1:da:eb:99:b3:07:38:73:15:99:
                    0e:e4:59:56:fd:4b:f3:1c:4a:62:d1:ca:ba:58:73:
                    26:d9:5d:bc:a2:db:e6:77:18:d7:4d:10:ee:80:8b:
                    7c:71:90:24:d1:1b:43:70:86:6b:e2:61:eb:54:fe:
                    4a:f0:21:5d:b7:2a:f0:80:03:66:89:0b:9a:e0:1a:
                    2d:ce:1b:fa:b1:52:c4:86:50:e6:5e:32:35:46:13:
                    01:39:2b:7a:17:17:7e:0c:92:df:c2:6b:51:c1:9e:
                    3a:23:0f:54:ba:de:fd:11:44:e2:38:55:dc:eb:ec:
                    bf:08:4b:d2:90:a1:4d:ad:1d:ae:f3:ba:33:82:17:
                    9a:3b:e5:76:d0:d1:bf:5c:f1:3d:2c:0c:37:77:4c:
                    3b:06:74:06:0e:c4:7a:c7:0f:df:0f:9e:76:27:1c:
                    00:1f:07:c2:17:fa:ef:13:13:23:1f:f3:ce:72:f0:
                    ab:72:d1:69:84:c9:00:db:52:57:0e:d9:6e:b2:ed:
                    fa:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:F1:3E:63:4B:14:49:1D:5B:5B:08:37:11:58:A8:D9:DC:BA:A4:28
            X509v3 Authority Key Identifier:
                keyid:4B:E5:06:8B:37:B1:63:25:30:FF:52:23:86:E7:B7:FB:01:88:E9:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/S-UGizexYyUw_1Ijhue3-wGI6eo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9172BD3/E80F137CB99211EEAB9F1D19C4F9AE02/S-UGizexYyUw_1Ijhue3-wGI6eo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a0:d3:40:68:13:56:dc:f1:e6:ed:d6:a0:a8:48:ad:03:1e:f9:
         19:48:71:8d:c8:ad:c3:ec:b0:aa:08:7a:88:72:5d:d9:7d:95:
         57:1d:71:9b:56:fb:09:08:93:2d:f1:fb:b7:6d:3e:cf:31:f7:
         74:1b:73:c4:62:f3:3c:dd:8d:5c:7a:9d:4e:38:2b:49:4c:56:
         b5:c4:14:c3:27:2a:a8:73:97:06:c4:67:e2:a6:c6:fb:b2:2d:
         8d:52:7d:bf:f2:d6:aa:5c:8d:66:13:94:f2:9f:c4:cf:85:7e:
         6e:11:6e:24:b8:a8:76:3d:d0:92:9b:ae:58:01:a7:5d:6f:24:
         13:43:30:cc:cf:22:41:0d:03:59:2f:5a:a2:39:b3:47:09:b9:
         2b:56:9a:69:f0:51:ad:b4:35:23:f5:ae:52:75:a1:98:06:49:
         6d:df:14:f2:39:c0:db:89:92:3f:12:ec:59:39:eb:df:86:f8:
         35:69:04:c6:8a:bd:ad:67:92:5f:b3:49:5f:17:d2:3b:61:9e:
         18:d5:ed:12:ed:81:b8:f3:5f:b8:cb:e4:12:84:19:3c:7c:93:
         d4:af:48:13:19:80:9b:5e:29:7f:33:62:f5:79:0a:6d:30:9e:
         08:03:98:f7:1c:be:ee:6f:d7:38:01:ad:c1:81:48:0c:eb:74:
         d5:b5:11:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:04:35 2026 by rpki-client