Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
File:                     rUR6Z_B-gc0JwyLs0QrZQWvESys.mft (raw, json)
Hash identifier:          SQLcIESDBXO9golV5La0j+cjI4UTUFNi0Yx8xVYSA+Y=
Subject key identifier:   F1:C4:B7:7A:18:64:48:05:CA:FD:43:F2:D5:11:8E:14:FA:A4:38:7E
Authority key identifier: AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B
Certificate issuer:       /CN=A9188EB6/serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
Certificate serial:       0496
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
Manifest number:          048F
Signing time:             Mon 02 Mar 2026 01:28:46 +0000
Manifest this update:     Mon 02 Mar 2026 01:28:44 +0000
Manifest next update:     Mon 09 Mar 2026 01:28:44 +0000
Files and hashes:         1: rUR6Z_B-gc0JwyLs0QrZQWvESys.crl (hash: PlXpZjjvZtH7rx0qunglycDmx0GR37BQluN+ahaDTXQ=)
                          2: 09B2D8EC704C11ED97935E7DC4F9AE02.roa (hash: c5g1rHsWNxDvIouk1n/dGRhPWzbyhhfN9823sucQoSo=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl
                          rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 09 Mar 2026 01:28:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1174 (0x496)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9188EB6, serialNumber=AD447A67F07E81CD09C322ECD10AD9416BC44B2B
        Validity
            Not Before: Mar  2 01:28:44 2026 GMT
            Not After : Mar  9 01:28:44 2026 GMT
        Subject: CN=69a4e7cd-a148
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:d9:09:05:af:2c:e6:8e:f1:77:c6:c5:3d:2a:
                    65:3c:74:06:db:fe:9e:d0:47:be:63:6d:e6:32:97:
                    51:5b:16:65:29:12:2d:49:63:a2:f2:10:53:21:62:
                    89:17:e2:3d:f0:80:d5:66:e8:35:bc:d2:12:45:6d:
                    82:11:81:d6:2e:32:30:24:89:67:10:c7:31:cb:41:
                    cc:86:48:42:8a:fc:58:3c:3f:6a:f0:72:e2:a9:7d:
                    7c:3b:ae:7d:a6:52:3c:fa:3b:d6:30:3c:2b:de:03:
                    30:c5:41:1d:77:ad:28:ed:03:06:f9:79:fd:d7:ed:
                    18:57:1c:32:47:45:39:ab:48:37:93:f9:00:cb:d6:
                    d5:9b:90:92:8b:e9:f6:af:12:2f:c2:78:72:f7:79:
                    fc:cc:db:b0:32:db:69:61:07:ff:09:93:32:9e:c6:
                    be:24:5c:68:8b:4a:a4:d1:23:cc:5f:b2:06:2f:e2:
                    9f:43:42:bc:d0:96:3f:0e:8a:ec:2d:51:77:c9:41:
                    9a:1f:31:bc:72:63:59:2b:78:75:e8:dd:e5:2b:99:
                    52:1b:d0:e0:2b:df:15:22:99:da:c0:e4:c4:fe:a9:
                    4c:3f:1e:ab:5c:c6:e8:1b:20:0d:0a:57:9e:eb:ae:
                    4c:9f:5b:67:8f:04:52:64:6c:c6:cd:26:9d:e0:72:
                    3c:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C4:B7:7A:18:64:48:05:CA:FD:43:F2:D5:11:8E:14:FA:A4:38:7E
            X509v3 Authority Key Identifier:
                keyid:AD:44:7A:67:F0:7E:81:CD:09:C3:22:EC:D1:0A:D9:41:6B:C4:4B:2B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/rUR6Z_B-gc0JwyLs0QrZQWvESys.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9188EB6/9C0EF83A74EC11EC93F81A33C4F9AE02/rUR6Z_B-gc0JwyLs0QrZQWvESys.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:05:59:50:37:7b:d9:74:19:c3:05:fb:4d:34:28:cf:e6:d6:
         4d:bd:31:b3:01:5e:f4:28:9c:d3:19:21:eb:3b:b7:86:5e:84:
         f7:f6:8e:2c:1a:27:e0:41:d9:73:1f:74:93:57:2c:11:35:ac:
         19:2c:78:c8:79:62:6b:bd:ff:f6:4a:c7:69:79:7b:3f:ac:1e:
         38:da:dd:42:e4:b1:1b:1b:eb:7d:ed:06:dc:7e:97:1e:8c:a8:
         65:29:96:9d:0b:c4:9a:36:13:89:ec:2f:62:88:59:32:3e:8d:
         4e:bb:73:0e:78:ce:51:68:dc:b8:8a:9c:44:2d:10:7a:77:15:
         0f:2f:9f:c3:0a:f0:b7:91:bd:19:02:5d:f9:06:d0:01:29:c6:
         9b:e9:01:b9:e4:64:5a:62:63:0e:50:3c:c4:f5:be:1a:ad:77:
         86:83:5c:ee:b3:8b:db:c0:2b:53:9a:0d:78:a6:47:1c:b8:31:
         41:05:ff:eb:58:6b:69:ea:1f:93:c8:4a:b7:32:ca:be:0c:20:
         21:3d:9e:86:fb:0d:c4:17:78:a2:ec:61:72:c7:f6:d9:6d:38:
         b8:30:00:8c:b5:05:2a:b9:43:4c:b7:43:50:43:3a:07:8a:46:
         89:16:94:60:97:ed:7e:1a:b9:da:b9:66:54:e9:23:fa:50:0b:
         56:0d:56:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:02:07 2026 by rpki-client