Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
File:                     u99YzWESke9boarLayzE7VCwEVc.mft (raw, json)
Hash identifier:          xQk8mUOmXQEp/9uP2gPRLb2jhw2TUw6dUxGFiFiVOOU=
Subject key identifier:   77:31:20:5B:D3:D4:70:C4:34:69:9F:4E:73:B1:BE:FF:26:AC:B2:93
Authority key identifier: BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57
Certificate issuer:       /CN=A91D46FD/serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
Certificate serial:       04FC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
Manifest number:          04E0
Signing time:             Fri 12 Jun 2026 23:53:00 +0000
Manifest this update:     Fri 12 Jun 2026 23:53:00 +0000
Manifest next update:     Fri 19 Jun 2026 23:53:00 +0000
Files and hashes:         1: u99YzWESke9boarLayzE7VCwEVc.crl (hash: 1OpcmgYe3L0c0u580AXFf8uZgsfpUEtTUY7WF5Aa/gs=)
                          2: 08241A166B1111EE99759439C4F9AE02.roa (hash: K46zscW9+DlHk+xiudMsMr6EAgw3qNVaD7QCOdFwwmc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl
                          rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:52:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1276 (0x4fc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91D46FD, serialNumber=BBDF58CD611291EF5BA1AACB6B2CC4ED50B01157
        Validity
            Not Before: Jun 12 23:53:00 2026 GMT
            Not After : Jun 19 23:53:00 2026 GMT
        Subject: CN=6a2c9bdc-cc5b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:79:cc:d9:ad:b0:11:1b:71:9d:d3:88:ff:1f:
                    f3:15:7e:46:6e:06:ce:ee:29:43:b3:6d:15:58:0e:
                    d5:c0:38:1f:84:fd:8f:1b:7a:91:0d:7c:30:38:20:
                    b6:c7:6e:76:3b:8f:44:6b:3e:70:26:da:60:e7:be:
                    ad:56:8c:c0:7f:c5:30:20:13:8e:0b:db:eb:73:f6:
                    27:41:80:fa:e2:a9:f3:ea:b0:02:7a:ea:f4:ee:d0:
                    60:c8:44:aa:aa:a0:c9:c6:38:e4:1b:63:4d:e2:35:
                    3d:b2:5d:bf:5d:c2:05:e0:dd:01:08:11:a9:28:70:
                    90:80:18:40:6c:37:60:00:f9:c2:a1:26:53:03:b6:
                    a4:27:9e:b1:e6:72:88:74:59:67:52:56:90:af:9a:
                    d9:80:52:36:ab:a9:dd:6c:25:30:75:c3:92:11:24:
                    f3:b9:e2:0d:65:9a:e4:16:55:03:1e:b0:11:cf:b5:
                    b6:b9:c2:29:dc:18:20:f3:1d:ae:d3:74:68:08:c6:
                    9a:24:53:f1:ac:37:b8:af:b6:e3:4d:a1:0b:1f:29:
                    74:b1:86:49:da:61:ce:82:d4:51:c5:e8:90:a8:ad:
                    5b:f8:a9:be:94:e4:1a:8c:0c:19:2e:84:d3:63:d6:
                    be:7f:48:72:36:2d:dc:29:ce:6b:dc:c8:b3:67:12:
                    57:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:31:20:5B:D3:D4:70:C4:34:69:9F:4E:73:B1:BE:FF:26:AC:B2:93
            X509v3 Authority Key Identifier:
                keyid:BB:DF:58:CD:61:12:91:EF:5B:A1:AA:CB:6B:2C:C4:ED:50:B0:11:57

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/u99YzWESke9boarLayzE7VCwEVc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91D46FD/59BF214E745111ECA9E9F858C4F9AE02/u99YzWESke9boarLayzE7VCwEVc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         86:a3:68:75:52:31:4c:ed:98:01:24:0c:a2:ce:ed:9d:ad:6b:
         62:a2:86:77:9a:23:ac:07:b7:4e:0f:d7:de:96:5f:3c:97:25:
         5a:09:d3:ed:8f:0b:f5:91:e8:bf:c3:4d:89:58:a5:f8:fb:8d:
         34:a1:0d:6f:f1:72:1d:d2:4c:c3:4a:21:31:5b:5a:61:21:e2:
         e7:7f:d8:45:17:44:f9:7d:b3:e0:44:eb:2b:e7:63:1d:ca:37:
         64:9c:6c:5c:29:43:11:56:62:d2:14:31:e7:4c:8e:00:b1:c1:
         b9:bf:88:03:ae:91:ee:8c:e6:56:17:5d:69:bb:ad:d9:2e:5b:
         2f:4b:04:f3:12:32:06:1f:d8:3a:43:57:41:5c:27:c0:18:90:
         2f:48:e6:4f:06:f7:35:6e:21:0c:31:7a:de:da:42:5b:9e:86:
         09:78:08:f4:bd:53:61:ee:17:97:32:60:3f:bd:e1:ae:58:b2:
         37:bc:0b:9e:5f:67:5f:11:30:b6:29:22:cb:e5:e4:47:41:e9:
         cc:97:c4:0a:56:38:4e:13:8c:aa:fb:d5:cb:c5:05:d2:2e:a6:
         00:73:1b:ea:e1:06:b0:a7:39:f7:41:07:b4:20:93:da:70:89:
         33:94:c7:ac:6c:c8:ee:4b:c0:4c:73:9f:65:60:7b:8d:9a:b2:
         2f:79:ce:0f
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBPwwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RDQ2RkQxMTAvBgNVBAUTKEJCREY1OENENjExMjkxRUY1QkExQUFDQjZCMkNDNEVE
NTBCMDExNTcwHhcNMjYwNjEyMjM1MzAwWhcNMjYwNjE5MjM1MzAwWjAYMRYwFAYD
VQQDEw02YTJjOWJkYy1jYzViMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoHnM2a2wERtxndOI/x/zFX5GbgbO7ilDs20VWA7VwDgfhP2PG3qRDXwwOCC2
x252O49Eaz5wJtpg576tVozAf8UwIBOOC9vrc/YnQYD64qnz6rACeur07tBgyESq
qqDJxjjkG2NN4jU9sl2/XcIF4N0BCBGpKHCQgBhAbDdgAPnCoSZTA7akJ56x5nKI
dFlnUlaQr5rZgFI2q6ndbCUwdcOSESTzueINZZrkFlUDHrARz7W2ucIp3Bgg8x2u
03RoCMaaJFPxrDe4r7bjTaELHyl0sYZJ2mHOgtRRxeiQqK1b+Km+lOQajAwZLoTT
Y9a+f0hyNi3cKc5r3MizZxJXMwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHcxIFvT
1HDENGmfTnOxvv8mrLKTMB8GA1UdIwQYMBaAFLvfWM1hEpHvW6Gqy2ssxO1QsBFX
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFENDZGRC81OUJGMjE0RTc0
NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tlOWJvYXJMYXl6RTdWQ3dF
VmMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3U5OVl6V0VTa2U5Ym9hckxheXpFN1ZDd0VWYy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFE
NDZGRC81OUJGMjE0RTc0NTExMUVDQTlFOUY4NThDNEY5QUUwMi91OTlZeldFU2tl
OWJvYXJMYXl6RTdWQ3dFVmMubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAhqNodVIxTO2YASQMos7tna1rYqKGd5ojrAe3Tg/X3pZfPJclWgnT7Y8L9ZHo
v8NNiVil+PuNNKENb/FyHdJMw0ohMVtaYSHi53/YRRdE+X2z4ETrK+djHco3ZJxs
XClDEVZi0hQx50yOALHBub+IA66R7ozmVhddabut2S5bL0sE8xIyBh/YOkNXQVwn
wBiQL0jmTwb3NW4hDDF63tpCW56GCXgI9L1TYe4XlzJgP73hrliyN7wLnl9nXxEw
tikiy+XkR0HpzJfEClY4ThOMqvvVy8UF0i6mAHMb6uEGsKc590EHtCCT2nCJM5TH
rGzI7kvATHOfZWB7jZqyL3nODw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 10:06:13 2026 by rpki-client