Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
File:                     Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft (raw, json)
Hash identifier:          dOlzf6ItJEJAPscY+dTiwtV70xfwSoZPgEvPGzuN6QU=
Subject key identifier:   C1:48:C3:24:32:52:B1:3F:27:1C:78:91:94:35:AD:D9:BB:CB:29:83
Authority key identifier: 36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60
Certificate issuer:       /CN=A91803DB/serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
Certificate serial:       122A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
Manifest number:          109B
Signing time:             Fri 12 Jun 2026 17:30:09 +0000
Manifest this update:     Fri 12 Jun 2026 17:30:08 +0000
Manifest next update:     Fri 19 Jun 2026 17:30:08 +0000
Files and hashes:         1: Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl (hash: 0ZLPifxrSysQPEmeBAW5yoaZhE9yB6bkCHh/5zuj+Kk=)
                          2: C2356A948FE811E98B967A66C4F9AE02.roa (hash: Spu6ueKiAix7Vx1bbz3QuH8zuY42SfhsOYEFzJ/3W4o=)
                          3: B969078EB94B11EB8CFABC23C4F9AE02.roa (hash: KmEu0JXVBtwzMz7EetZKwa8KqrgE2kj5+Y9cCaXraFo=)
                          4: F3011EAAB88311EBB2078C50C4F9AE02.roa (hash: RdnFjFlQSbXhKdwY5kMqtzBzkUycrU7RuwuLidB948U=)
                          5: C435900ACF7C11F0AAC14644C4F9AE02.roa (hash: m9D73VL27f9lVIbOReJ6AOP2zRgFJFj+KEXEimjyt7I=)
                          6: 8224E55C345F11F0BD514C6CC4F9AE02.roa (hash: k1IfgBcHOoF2DvAmPhMFiueaAUbhFvWp7b5AsEN0aGA=)
                          7: 5C4E5A6EB9E511EB9717B256C4F9AE02.roa (hash: wW2NNDoiiggQLts6yoRWeEta8EfkfmkpuQXd4IRvuj4=)
                          8: 2A4EE13E7CFD11F08A91EE21C4F9AE02.roa (hash: VlAWA5/d+uBjOMZi4UPagGvqPim5oPM3SxEdySpg39I=)
                          9: 50D040327CFD11F0B32D4522C4F9AE02.roa (hash: J+oM/GM4p3/6d6pclXs1NjnCH5p34XNUGcl5IM3ZZ78=)
                          10: 49F4FFBA0A1C11EEA415BE0CC4F9AE02.roa (hash: t0lrWYbEsDKRavSA+NYxahXVuuhYWwqHsIgE48/DyB8=)
                          11: FD5158C044C511F0ABA4E977C4F9AE02.roa (hash: jAhN4tezvJPwZDVpGZejWw4TU5H1Av+GZW6zZMmb67I=)
                          12: 9394D360345F11F0AB96776CC4F9AE02.roa (hash: Dy3vf2brgO7ffq8geCJNrRWY4aeeqFaFWyK7H7SMUrk=)
                          13: C4A85FD48FE811E98B967A66C4F9AE02.roa (hash: Yra/cySrBt0zcZ3P5GOXeK6swd+KmGvdWYxnM5VydGA=)
                          14: 71043990C4D811EA88E6B21FC4F9AE02.roa (hash: SwqLx1ykNlWfnGxIgnnplctUN2Uh69BTnr1sDfxJRlM=)
                          15: C3BEAC38CF7C11F0B0EB4644C4F9AE02.roa (hash: 0xacdRxIlt6XlMYC4ytgm5Wnpkb/XtvJrzfDYrQNkow=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl
                          rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 17:30:08 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4650 (0x122a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91803DB, serialNumber=36ED8B675EA7238085AFA06C093E54A9D3FD7B60
        Validity
            Not Before: Jun 12 17:30:08 2026 GMT
            Not After : Jun 19 17:30:08 2026 GMT
        Subject: CN=6a2c4221-a434
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:5e:3d:00:dd:83:5c:ab:5a:53:4b:49:69:bb:
                    e5:ce:88:f1:e5:97:50:7c:eb:5a:77:db:82:bc:25:
                    5c:b1:cb:7a:1f:a9:13:c2:08:c1:c8:79:9d:10:bc:
                    61:63:82:36:d7:9b:87:f2:30:5f:1b:98:d7:3a:ac:
                    de:2b:96:78:4a:a5:3d:01:e3:08:d6:eb:07:cf:51:
                    0a:66:5d:71:62:bc:2c:51:50:2d:d3:91:e2:d5:01:
                    6a:ea:22:14:40:8b:12:3f:48:06:1d:bc:da:ff:6d:
                    5b:92:ad:23:69:e0:f2:e4:44:42:43:48:7b:6c:f3:
                    85:a7:11:11:28:bd:77:ab:86:b5:c7:b5:5c:8d:a5:
                    98:96:23:0d:c2:49:26:d6:93:a4:7c:12:0a:1f:03:
                    33:73:ef:01:cc:f5:fb:fc:d2:8d:57:b9:f3:f1:7e:
                    db:d5:aa:87:8f:15:41:7f:d6:82:e3:c3:e6:a8:58:
                    70:ff:74:ae:26:a7:a5:22:63:ca:7c:f4:de:8a:47:
                    c6:a1:3a:20:f8:4a:1e:24:ba:bb:09:4e:e6:d3:ae:
                    8f:40:f5:e1:7a:3e:ab:e8:77:ef:a9:6f:7a:1d:62:
                    b5:c8:8a:8a:94:ff:c7:f0:51:bc:f0:a2:ba:d1:76:
                    93:18:55:30:08:98:d5:7d:af:34:f5:4f:0c:6b:8a:
                    39:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:48:C3:24:32:52:B1:3F:27:1C:78:91:94:35:AD:D9:BB:CB:29:83
            X509v3 Authority Key Identifier:
                keyid:36:ED:8B:67:5E:A7:23:80:85:AF:A0:6C:09:3E:54:A9:D3:FD:7B:60

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91803DB/0DC35D3E8DD411E9BFE2C556C4F9AE02/Nu2LZ16nI4CFr6BsCT5UqdP9e2A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8d:3a:2a:bd:10:71:85:51:27:ee:c8:0d:86:62:b9:ac:9b:33:
         ad:00:45:cd:c5:19:e9:fa:ba:ca:89:fb:a2:92:0c:06:70:e8:
         21:11:3a:16:f9:0d:02:11:69:97:40:52:2b:60:8b:f4:76:54:
         4b:b9:ff:22:16:ea:1d:e7:9a:80:72:16:a2:b6:10:78:c9:af:
         3e:89:29:f4:6a:70:3d:0c:d2:da:77:f7:4f:b1:40:45:9b:4e:
         db:7c:bb:0e:54:77:b6:9d:fc:15:d9:26:b9:3c:68:7f:06:0f:
         ca:21:a5:2b:37:45:ee:ec:7e:36:c0:1a:a6:20:b4:fe:a3:95:
         0b:93:24:fd:f5:c4:3d:d0:fb:22:b0:bd:c7:75:a2:5e:53:59:
         a0:64:7e:88:8b:f5:8a:af:27:8f:1f:20:87:16:2f:43:d8:79:
         b7:4d:ac:f9:10:ee:a7:63:95:77:ba:11:3b:08:1c:64:bc:94:
         6a:03:db:10:76:34:13:b3:0f:58:8e:f8:07:5f:3c:a1:1b:23:
         3f:d3:54:37:cc:cd:a9:d5:87:81:a5:d5:44:0d:f5:84:fa:ca:
         3d:e4:44:db:32:79:4a:73:67:6c:a2:3f:e2:5f:17:9f:45:48:
         3d:82:0b:cb:40:53:51:33:db:25:c6:4d:24:3a:04:51:56:58:
         f8:13:5a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:14:50 2026 by rpki-client