Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
File:                     aU9WG2PafMV3kxY21HiK0rC0riA.mft (raw, json)
Hash identifier:          XPPUi1MCQO68ARAJsh4E+w8w4r2q/pZUNZviE4f9GeU=
Subject key identifier:   FD:DA:CB:AE:1D:D1:B4:8A:B8:C4:DD:9C:78:A0:F2:A4:23:74:B2:69
Authority key identifier: 69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20
Certificate issuer:       /CN=A91A9083/serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
Certificate serial:       0111
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
Manifest number:          010D
Signing time:             Sat 13 Jun 2026 06:09:43 +0000
Manifest this update:     Sat 13 Jun 2026 06:09:42 +0000
Manifest next update:     Sat 20 Jun 2026 06:09:42 +0000
Files and hashes:         1: aU9WG2PafMV3kxY21HiK0rC0riA.crl (hash: +HVtyarYkmQx6GHBVM/FEWe0bS526qGvo2AhePwdJkc=)
                          2: 8DDA6872D25311EF8EBE2767C4F9AE02.roa (hash: GJJAq7Y4rDKXzfncSIrWC7/k2iyBuKfDbZCWqya2Ycc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl
                          rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 02:50:16 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 273 (0x111)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91A9083, serialNumber=694F561B63DA7CC577931636D4788AD2B0B4AE20
        Validity
            Not Before: Jun 13 06:09:42 2026 GMT
            Not After : Jun 20 06:09:42 2026 GMT
        Subject: CN=6a2cf427-91e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:20:f9:fa:e7:0a:f7:45:dc:e8:d2:de:09:14:
                    d5:fe:25:a5:15:55:27:82:5c:3c:eb:7b:c4:ea:54:
                    99:50:5e:cf:7e:25:0c:18:2a:c6:cd:1a:a7:9d:a6:
                    e9:c5:11:a9:3f:f3:57:91:a1:74:ea:78:3a:22:1c:
                    7d:be:c5:6d:c0:35:44:74:e3:50:34:e0:c1:d5:c1:
                    23:d2:51:4f:63:f2:de:2b:f2:73:7e:f8:85:5d:6f:
                    a7:29:66:d7:9a:6c:f4:26:da:18:fe:78:18:a7:15:
                    4b:f1:92:45:8c:0d:8f:fa:22:ba:b8:13:a1:7d:db:
                    5a:b6:14:66:82:df:00:05:ed:16:ef:b7:16:26:44:
                    03:98:97:c3:b1:a5:52:69:18:ed:5d:1f:28:87:0a:
                    67:ae:93:39:b2:9d:c9:88:45:ca:3e:bc:f6:e7:88:
                    0e:a8:70:cc:7c:1d:7b:99:b5:7b:b9:0e:01:76:02:
                    84:36:5d:b0:7b:4f:4a:41:54:4e:db:8f:de:ef:cf:
                    19:32:d7:dd:38:eb:f5:64:81:fe:1f:2e:52:b5:c6:
                    75:c6:83:ad:69:ef:31:7d:1f:ce:0a:17:68:3e:36:
                    10:00:d1:26:74:01:a2:40:27:b5:18:3c:7d:52:18:
                    c8:8b:21:1d:14:cf:e2:9b:e3:e1:50:c3:e7:3d:9a:
                    84:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:DA:CB:AE:1D:D1:B4:8A:B8:C4:DD:9C:78:A0:F2:A4:23:74:B2:69
            X509v3 Authority Key Identifier:
                keyid:69:4F:56:1B:63:DA:7C:C5:77:93:16:36:D4:78:8A:D2:B0:B4:AE:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aU9WG2PafMV3kxY21HiK0rC0riA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91A9083/C86CD806D1B011EF8833C933C4F9AE02/aU9WG2PafMV3kxY21HiK0rC0riA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         5b:d5:1d:be:b7:86:58:e3:58:ac:3a:11:0d:39:ca:3d:97:f1:
         d2:cf:bb:26:20:7f:2f:3c:f7:ed:38:49:a4:f5:12:5a:3c:74:
         7e:50:df:6e:9e:73:7e:30:4d:5d:d1:18:ab:dd:22:7f:6f:e3:
         37:31:0a:a9:93:4d:bc:7d:38:67:d7:70:fa:0c:d1:0a:86:5a:
         a8:bc:cd:74:19:8f:78:e1:31:39:87:f8:4c:68:18:42:d6:24:
         f0:40:54:9c:91:92:a3:25:7d:a3:80:b5:57:07:6f:81:52:c3:
         92:83:c1:57:07:1d:86:91:cd:9f:1b:ec:3a:f4:a4:aa:62:7d:
         8c:2b:0c:fb:7c:4c:c6:6e:4f:bd:a1:2f:cd:e3:48:08:e3:d1:
         92:92:e8:f4:ef:0a:b8:38:a5:f7:43:ea:ea:aa:0e:5f:04:45:
         7d:ce:ef:ee:a3:2e:92:c7:f8:82:1c:2f:54:08:63:4a:15:3c:
         05:7e:a7:ef:3f:4a:58:9f:31:df:90:e5:0f:b8:23:13:95:86:
         90:1e:bf:9b:f6:be:a9:0d:41:f4:7e:ba:ab:c7:c5:f8:5e:a7:
         64:4e:39:93:22:df:14:11:ff:8f:87:38:88:07:b6:7c:e4:d6:
         91:a8:21:7e:7e:98:35:8e:62:b3:2a:e7:79:89:47:fa:12:97:
         61:b2:f4:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:57:27 2026 by rpki-client