Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
File:                     p9_UyRMyvR5BzybbGCIdHXBY_dU.mft (raw, json)
Hash identifier:          TKXeTi0vAZ97RacQ5dyqsmmjELkLnO2LCKh6dm7R9m0=
Subject key identifier:   3D:27:B7:3A:4D:2C:AC:81:02:6A:41:AD:2A:1E:FE:AD:3F:39:35:A4
Authority key identifier: A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5
Certificate issuer:       /CN=A91EC9AE/serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
Certificate serial:       0439
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
Manifest number:          0423
Signing time:             Sat 13 Jun 2026 00:22:28 +0000
Manifest this update:     Sat 13 Jun 2026 00:22:28 +0000
Manifest next update:     Sat 20 Jun 2026 00:22:28 +0000
Files and hashes:         1: p9_UyRMyvR5BzybbGCIdHXBY_dU.crl (hash: JTWzIRbmhPFh3tmWIHoVN81JtTTSXrkkg9dkvzZkAOY=)
                          2: 2C9AACDAB2FC11ECA5096770C4F9AE02.roa (hash: cDFKFHhC5GlJqNQ2HDJvUzee5BZxbAM3dWkd8XKUt+8=)
                          3: A0A6A84EB5B911EC8AADD413C4F9AE02.roa (hash: s8YJHb+stY5uowp1aYz9CMh3CieUulWCEWzyjMliPJ0=)
                          4: 2DE26240B2FC11ECA5096770C4F9AE02.roa (hash: nSCtkyME0OPFIQuGYl4VSkayTNuGmQDZdJ+nhdKyDqA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl
                          rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:22:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1081 (0x439)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91EC9AE, serialNumber=A7DFD4C91332BD1E41CF26DB18221D1D7058FDD5
        Validity
            Not Before: Jun 13 00:22:28 2026 GMT
            Not After : Jun 20 00:22:28 2026 GMT
        Subject: CN=6a2ca2c4-40c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:79:ef:88:2c:81:01:9f:b9:d3:cc:47:11:4c:
                    b0:ee:1f:7e:e7:50:f3:8b:58:9a:d2:6c:01:65:1b:
                    29:80:b5:7a:32:1b:d4:8a:6c:c9:22:64:8c:e3:76:
                    c1:e1:1e:15:11:b6:d6:fa:fc:69:de:b5:af:76:03:
                    26:ca:d7:4f:d6:8b:2b:95:31:9c:d0:40:05:47:2d:
                    7f:8c:f0:b6:24:b4:87:35:11:86:bb:e9:37:84:94:
                    ee:7f:ee:04:c1:8b:e0:2f:19:98:d6:dd:20:73:82:
                    7a:f5:8d:59:f7:93:d2:5f:b5:a1:24:63:a4:1d:66:
                    3a:6e:7a:c0:70:c6:65:1a:b4:78:9e:25:71:c8:65:
                    d1:c0:72:46:03:a0:2a:f7:99:df:3c:ef:b8:96:8e:
                    3d:8c:79:6f:47:18:6e:1f:9b:28:38:d1:d7:b9:0c:
                    65:68:e4:ea:ca:41:67:39:8f:ff:a8:23:5b:98:41:
                    c0:03:41:0c:aa:f6:37:a9:74:c4:73:ff:de:09:e4:
                    a0:86:d5:9d:5e:61:93:8b:d4:97:80:6c:3c:3f:2a:
                    f3:28:6d:5f:3e:62:e4:2f:c9:ce:4c:98:a1:aa:5b:
                    aa:ed:7e:65:80:4f:35:e4:61:5b:44:a8:ba:6f:c8:
                    68:1c:de:81:cb:57:2f:df:c6:f5:9f:18:38:ee:58:
                    5c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:27:B7:3A:4D:2C:AC:81:02:6A:41:AD:2A:1E:FE:AD:3F:39:35:A4
            X509v3 Authority Key Identifier:
                keyid:A7:DF:D4:C9:13:32:BD:1E:41:CF:26:DB:18:22:1D:1D:70:58:FD:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/p9_UyRMyvR5BzybbGCIdHXBY_dU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91EC9AE/F7E4A2AEB2F411EC9BED3753C4F9AE02/p9_UyRMyvR5BzybbGCIdHXBY_dU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:61:90:43:56:48:40:56:f9:38:b4:1f:53:3b:7a:63:24:
         6d:d8:ed:ae:05:1e:11:22:2d:55:3f:62:60:a6:40:75:90:9e:
         91:af:b3:0a:7b:99:12:7d:9d:e9:74:4a:5f:bb:bb:fc:f1:c4:
         0b:27:4b:21:87:bb:ed:9d:b2:4c:c9:2f:d1:d0:8e:6d:c7:8f:
         6b:29:6a:84:45:14:6e:ba:a6:e7:a0:6c:03:f1:5c:49:7c:60:
         58:1d:91:d5:04:ff:0e:9a:a8:5c:bc:cd:ba:af:0f:f9:47:8c:
         9a:02:ce:82:8d:76:80:4c:10:30:99:55:c9:1d:fd:35:1c:e3:
         4b:32:6d:e9:5d:da:23:11:b2:13:74:9a:59:7c:1e:4d:3f:7e:
         5e:5d:34:23:ac:ee:b7:06:3e:7c:92:a2:38:4c:c6:4b:84:e3:
         64:d7:81:92:69:40:7b:de:ae:bc:85:12:57:97:2c:1f:91:3a:
         7d:19:c4:87:48:a6:43:02:37:74:99:be:b0:d6:71:ce:b8:41:
         46:e6:e4:fa:f6:b0:ad:bd:b7:7f:50:e4:9f:2e:a8:a2:99:8c:
         f3:2c:b3:35:fc:bf:5e:38:88:4c:43:4b:95:30:5f:f0:d0:d0:
         a3:c4:6a:52:2a:18:87:90:b3:d1:86:05:76:8e:1f:25:92:24:
         27:ed:cd:bd
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBDkwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
RUM5QUUxMTAvBgNVBAUTKEE3REZENEM5MTMzMkJEMUU0MUNGMjZEQjE4MjIxRDFE
NzA1OEZERDUwHhcNMjYwNjEzMDAyMjI4WhcNMjYwNjIwMDAyMjI4WjAYMRYwFAYD
VQQDEw02YTJjYTJjNC00MGM2MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAoXnviCyBAZ+508xHEUyw7h9+51Dzi1ia0mwBZRspgLV6MhvUimzJImSM43bB
4R4VEbbW+vxp3rWvdgMmytdP1osrlTGc0EAFRy1/jPC2JLSHNRGGu+k3hJTuf+4E
wYvgLxmY1t0gc4J69Y1Z95PSX7WhJGOkHWY6bnrAcMZlGrR4niVxyGXRwHJGA6Aq
95nfPO+4lo49jHlvRxhuH5soONHXuQxlaOTqykFnOY//qCNbmEHAA0EMqvY3qXTE
c//eCeSghtWdXmGTi9SXgGw8PyrzKG1fPmLkL8nOTJihqluq7X5lgE815GFbRKi6
b8hoHN6By1cv38b1nxg47lhc1wIDAQABo4ICczCCAm8wHQYDVR0OBBYEFD0ntzpN
LKyBAmpBrSoe/q0/OTWkMB8GA1UdIwQYMBaAFKff1MkTMr0eQc8m2xgiHR1wWP3V
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFFQzlBRS9GN0U0QTJBRUIy
RjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZSNUJ6eWJiR0NJZEhYQllf
ZFUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3A5X1V5Uk15dlI1Qnp5YmJHQ0lkSFhCWV9kVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFF
QzlBRS9GN0U0QTJBRUIyRjQxMUVDOUJFRDM3NTNDNEY5QUUwMi9wOV9VeVJNeXZS
NUJ6eWJiR0NJZEhYQllfZFUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAV5phkENWSEBW+Ti0H1M7emMkbdjtrgUeESItVT9iYKZAdZCeka+zCnuZEn2d
6XRKX7u7/PHECydLIYe77Z2yTMkv0dCObcePaylqhEUUbrqm56BsA/FcSXxgWB2R
1QT/DpqoXLzNuq8P+UeMmgLOgo12gEwQMJlVyR39NRzjSzJt6V3aIxGyE3SaWXwe
TT9+Xl00I6zutwY+fJKiOEzGS4TjZNeBkmlAe96uvIUSV5csH5E6fRnEh0imQwI3
dJm+sNZxzrhBRubk+vawrb23f1Dkny6oopmM8yyzNfy/XjiITENLlTBf8NDQo8Rq
UioYh5Cz0YYFdo4fJZIkJ+3NvQ==
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:25:24 2026 by rpki-client