Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
File:                     uHLzTVUlH6dw7MOT0mcSED1VBzc.mft (raw, json)
Hash identifier:          4Q/xg0B1pIiKYf8JpNjt4455mfHj8SQT+GkohBbU6xQ=
Subject key identifier:   69:86:1A:A8:D9:BE:F8:FB:73:64:8C:D2:9D:B1:50:32:15:56:46:20
Authority key identifier: B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37
Certificate issuer:       /CN=A917C606/serialNumber=B872F34D55251FA770ECC393D26712103D550737
Certificate serial:       0492
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
Manifest number:          0484
Signing time:             Sat 13 Jun 2026 00:06:23 +0000
Manifest this update:     Sat 13 Jun 2026 00:06:22 +0000
Manifest next update:     Sat 20 Jun 2026 00:06:22 +0000
Files and hashes:         1: uHLzTVUlH6dw7MOT0mcSED1VBzc.crl (hash: adJ82Z8j4O+wcqIFEmjnE3L1a7cNGp6mvN/+VX+fHnM=)
                          2: 945375FAF69511EC90A47215C4F9AE02.roa (hash: zMi/iKJQrGzXvdGe1pLHWvdh1dvtB0WJqrM1vceGtKE=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl
                          rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:06:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1170 (0x492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C606, serialNumber=B872F34D55251FA770ECC393D26712103D550737
        Validity
            Not Before: Jun 13 00:06:22 2026 GMT
            Not After : Jun 20 00:06:22 2026 GMT
        Subject: CN=6a2c9efe-d77d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:6c:89:9c:98:33:34:da:3c:b9:8f:9c:08:cf:
                    77:f8:25:ea:56:b8:52:e7:1f:df:bf:45:89:75:a6:
                    b6:90:ef:ef:27:13:7b:07:ef:75:cf:04:d5:4f:a2:
                    d2:35:3c:1e:6e:91:96:8d:50:9d:2a:81:42:19:c6:
                    5b:5e:33:9d:33:b8:23:72:6b:38:d2:a3:57:fe:19:
                    aa:f1:c1:ca:c4:31:0e:e7:c5:b3:fd:cc:ce:7b:5e:
                    a3:91:48:04:00:e5:0c:0d:9e:3d:8b:79:ab:e8:26:
                    c7:14:43:b3:41:01:2b:08:1b:59:b2:b3:86:73:38:
                    0e:14:be:5a:81:66:7e:51:03:8d:e6:56:a9:1c:a2:
                    bf:27:af:dc:58:3d:95:a7:14:e6:8b:36:30:5f:8b:
                    d5:b2:7e:c8:47:da:27:d8:62:fa:4b:8b:54:e8:4c:
                    b8:95:b7:9e:d2:2d:1a:88:7f:92:69:53:63:f1:df:
                    e2:35:5b:3d:08:df:3f:e5:c1:57:80:23:f2:12:93:
                    66:06:a1:75:f8:74:5c:ee:69:f2:e8:65:20:bf:ef:
                    00:37:d7:ff:04:5b:a8:6d:dd:f3:df:33:0d:ec:2d:
                    12:04:06:d1:82:f7:b7:d7:b3:a8:7d:d1:85:ac:0f:
                    73:ba:f4:39:13:e3:dd:ec:b2:41:45:c7:46:21:4c:
                    1c:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:86:1A:A8:D9:BE:F8:FB:73:64:8C:D2:9D:B1:50:32:15:56:46:20
            X509v3 Authority Key Identifier:
                keyid:B8:72:F3:4D:55:25:1F:A7:70:EC:C3:93:D2:67:12:10:3D:55:07:37

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uHLzTVUlH6dw7MOT0mcSED1VBzc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C606/7C8B137A8FC911EC8155DB61C4F9AE02/uHLzTVUlH6dw7MOT0mcSED1VBzc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         a3:f6:f9:ff:1a:3e:4f:b8:ca:8d:20:c8:b7:05:ed:a5:0e:39:
         3b:fd:b2:1b:46:00:ba:75:ed:e9:73:de:10:03:ae:ed:15:d9:
         fc:fa:35:8b:f8:48:86:84:3b:f0:b1:c5:9b:a5:9d:47:69:59:
         03:d7:8b:a0:50:af:c7:4f:cf:4d:6e:e9:9e:95:6c:d8:24:16:
         4c:78:a1:20:bb:fc:42:e2:39:c8:cd:6d:f4:f3:ca:1e:25:bb:
         cb:69:fd:09:29:92:90:e5:ec:2c:56:4e:01:82:53:b8:82:31:
         ff:94:80:dc:01:d6:01:24:02:b2:3d:3d:38:6b:d0:a9:71:07:
         d3:df:29:3b:ed:26:b4:8c:2b:e1:57:e9:0b:ac:4a:34:08:d6:
         c9:47:78:ba:b7:17:2d:92:8b:b4:b5:2f:fb:d4:13:e0:b1:d8:
         78:57:8e:aa:6f:c4:78:1c:e5:92:a5:5b:d0:f4:49:4f:1c:49:
         50:69:f9:8c:3e:a9:57:81:46:ec:80:f8:b6:35:a6:e2:a2:5b:
         d9:37:58:0e:a7:e4:24:ad:5c:e3:b1:72:d0:19:35:40:d7:e9:
         3f:85:6f:70:f6:9e:2f:3c:ab:49:fe:b0:0c:29:2f:27:34:41:
         25:99:d4:35:35:10:cf:c7:ca:9a:02:0a:28:5f:8e:7c:15:e3:
         67:70:bb:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:58:43 2026 by rpki-client