Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
File:                     rRUDmr5-BIRna8sqkCopVqgDzs8.mft (raw, json)
Hash identifier:          laKzMXBFm9k5fBxCpJIICbAoPKPZ6dyuzqBDAtzDLM8=
Subject key identifier:   06:DB:64:54:98:9C:1E:C1:4F:53:23:53:45:FA:BA:9E:9B:2A:AD:0D
Authority key identifier: AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF
Certificate issuer:       /CN=A917C876/serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
Certificate serial:       24
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
Manifest number:          20
Signing time:             Fri 17 Apr 2026 08:35:45 +0000
Manifest this update:     Fri 17 Apr 2026 08:35:45 +0000
Manifest next update:     Fri 24 Apr 2026 08:35:45 +0000
Files and hashes:         1: rRUDmr5-BIRna8sqkCopVqgDzs8.crl (hash: sS7M04qdadY7gCEeUlFPzwk4rwFDy7DqQBqiTLClXpI=)
                          2: 85126BD6109111F19502AD2A353D8C67.roa (hash: T5GMIPyPaLrmTYrRWcGwkxKhGNJdhN+jLIOEn2RD910=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl
                          rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 Apr 2026 08:35:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917C876, serialNumber=AD15039ABE7E0484676BCB2A902A2956A803CECF
        Validity
            Not Before: Apr 17 08:35:45 2026 GMT
            Not After : Apr 24 08:35:45 2026 GMT
        Subject: CN=69e1f0e1-f81e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:fc:26:3d:63:18:c8:7a:29:28:d1:6e:ef:
                    71:db:2a:42:eb:b2:05:6c:ab:70:e0:4b:6d:79:09:
                    bb:7e:6d:0d:71:81:fb:75:4a:20:45:55:16:b3:26:
                    6b:fd:48:72:65:91:4c:a1:89:d7:4e:85:27:07:b3:
                    34:35:30:9b:9b:f7:34:d8:b5:e9:24:f1:d4:99:89:
                    3c:19:fb:39:b8:fc:e6:bb:33:8a:e8:f6:d5:86:61:
                    ce:81:8b:c9:61:06:86:82:49:ce:c2:23:20:ae:b8:
                    e8:f8:c0:d5:f7:52:93:11:d9:b1:51:79:4e:cd:44:
                    b4:b7:c4:cd:a2:ce:d9:41:52:21:79:2b:56:57:86:
                    96:f3:2f:91:2f:b4:a8:f8:d7:9b:21:7c:97:38:6e:
                    09:1d:a9:80:b1:cb:73:64:d3:28:29:d4:54:de:5f:
                    7b:75:e6:c3:84:d1:fd:d6:9d:8c:24:f9:f8:05:5f:
                    a7:08:91:87:b0:0f:af:ce:2c:2f:03:19:6f:2f:a5:
                    9b:18:ee:b2:eb:34:d2:9b:89:f3:24:a0:e4:98:c6:
                    57:77:d0:9e:36:e8:de:95:84:94:9a:9f:6a:71:cc:
                    40:ce:ae:70:5b:d0:21:76:64:a4:b8:57:45:f4:38:
                    65:3b:f4:c6:e7:88:6b:56:d4:76:b7:59:a5:1f:f5:
                    11:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:DB:64:54:98:9C:1E:C1:4F:53:23:53:45:FA:BA:9E:9B:2A:AD:0D
            X509v3 Authority Key Identifier:
                keyid:AD:15:03:9A:BE:7E:04:84:67:6B:CB:2A:90:2A:29:56:A8:03:CE:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/rRUDmr5-BIRna8sqkCopVqgDzs8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917C876/DBA1D55A109011F180BBBFFF333D8C67/rRUDmr5-BIRna8sqkCopVqgDzs8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8f:f2:03:2e:1b:1f:55:3a:68:23:04:33:41:86:7c:08:59:5c:
         f7:7c:b4:4e:76:3f:37:bd:94:42:b2:6b:ae:6d:1d:ab:80:40:
         0a:ae:c9:0d:3e:93:9b:ab:17:85:ca:e1:3b:70:71:5a:f2:ad:
         98:a0:b5:d4:56:0e:b1:69:08:3a:a1:5a:5d:c1:db:35:00:b3:
         0f:e4:84:cc:26:12:dd:a1:aa:82:f9:08:b1:c2:bc:69:76:2d:
         90:d8:19:00:99:ee:60:1f:06:6b:ab:95:ab:9e:9c:c4:dd:5e:
         11:6b:cf:b9:66:55:7e:ed:5d:18:a8:29:da:9a:0b:ef:ec:07:
         89:78:0e:1f:3c:ab:11:55:a4:25:47:a9:04:25:e8:de:63:9a:
         e0:c8:77:40:27:44:79:6c:0a:c0:92:c7:4a:0b:68:bc:14:c0:
         b4:b1:e1:2c:ee:c9:ee:1e:af:ce:47:91:33:33:64:07:73:88:
         0c:32:34:df:f9:26:99:00:db:67:f8:c3:fa:93:72:00:f6:d2:
         49:7e:33:59:0a:c7:49:6c:ce:a3:5d:27:c5:d9:56:95:44:5b:
         31:d9:36:a5:e7:45:9c:9d:62:86:52:05:f0:d1:4f:f1:8e:49:
         e8:e1:e3:40:a5:ad:7e:1b:85:c9:00:6e:f0:b4:fe:ce:39:51:
         94:27:7a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:37:59 2026 by rpki-client