Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
File:                     Mh0Kt4oavjUafbeTINn_03KgjEU.mft (raw, json)
Hash identifier:          pnzVALD1qkXE4OVan0Cc1OvHssHFUk98fBalWqBhSVE=
Subject key identifier:   77:1D:12:4B:53:30:CF:85:D5:53:38:F3:EE:CC:FB:1A:88:F8:75:A6
Authority key identifier: 32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45
Certificate issuer:       /CN=A9110FEF/serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
Certificate serial:       02BA
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
Manifest number:          02AE
Signing time:             Sat 13 Jun 2026 01:36:30 +0000
Manifest this update:     Sat 13 Jun 2026 01:36:29 +0000
Manifest next update:     Sat 20 Jun 2026 01:36:29 +0000
Files and hashes:         1: Mh0Kt4oavjUafbeTINn_03KgjEU.crl (hash: XFWxcbL5C+baM4LlrmFXVjyRVOoW76JRlDsaoXUhkwo=)
                          2: 47DA361A3F8F11EF8FA3802DC4F9AE02.roa (hash: q5FKevNzsmGawtE5NPpNF5JroMkuiRvFoRzrdCWxt1U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl
                          rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:36:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 698 (0x2ba)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9110FEF, serialNumber=321D0AB78A1ABE351A7DB79320D9FFD372A08C45
        Validity
            Not Before: Jun 13 01:36:29 2026 GMT
            Not After : Jun 20 01:36:29 2026 GMT
        Subject: CN=6a2cb41e-fbcc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:de:dd:98:98:7f:94:57:ff:be:ce:fe:19:e3:
                    be:77:86:f6:f5:c1:e6:f7:cb:6f:fe:cb:1f:01:35:
                    ef:03:42:9a:5a:c1:b9:b7:f4:af:8a:5b:22:23:47:
                    35:5a:35:65:d6:bf:18:48:a2:d4:97:46:de:41:c3:
                    6d:75:1a:92:33:bd:4d:7f:58:77:a9:49:74:68:85:
                    15:a1:9d:c9:f4:2e:39:04:72:2f:41:87:33:1e:81:
                    d6:56:a5:04:ec:6c:e1:9c:05:98:39:93:fc:5d:93:
                    13:d0:7e:a2:db:72:a7:b8:e5:88:d8:d3:d6:22:72:
                    b6:4f:2b:05:75:31:7f:83:b2:5f:ad:2c:44:f6:ec:
                    92:93:ea:e0:70:6b:3e:91:1d:3b:24:7c:7e:06:39:
                    26:74:50:c1:b0:03:33:5f:dc:f2:4b:e6:3c:4a:92:
                    ec:9a:b7:90:78:22:20:12:b9:aa:47:82:d1:33:92:
                    91:b2:f4:0c:18:cf:4b:5e:0f:bc:ba:9e:08:57:67:
                    c0:48:05:09:f1:dc:65:94:a6:67:30:91:77:7a:2a:
                    02:36:7b:86:7e:6d:3a:fd:50:e9:20:e1:80:38:9f:
                    03:ab:f1:39:9c:fb:6f:41:30:7c:22:48:ba:01:03:
                    9f:b9:83:da:fe:ca:db:e5:5a:9e:3c:c8:68:e0:d3:
                    d8:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:1D:12:4B:53:30:CF:85:D5:53:38:F3:EE:CC:FB:1A:88:F8:75:A6
            X509v3 Authority Key Identifier:
                keyid:32:1D:0A:B7:8A:1A:BE:35:1A:7D:B7:93:20:D9:FF:D3:72:A0:8C:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Mh0Kt4oavjUafbeTINn_03KgjEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9110FEF/B0363D6064F511ED82B03C11C4F9AE02/Mh0Kt4oavjUafbeTINn_03KgjEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1a:7b:33:1d:69:e8:2a:cb:fd:91:0c:29:c5:eb:39:95:2c:73:
         ab:7a:1e:b2:60:03:9c:d9:e9:b2:60:11:0a:cc:41:b6:ae:1a:
         ff:34:6a:dc:05:2a:e6:3f:d8:49:3f:49:c5:55:98:dc:dd:19:
         38:c9:62:34:39:b4:b6:84:38:74:12:9b:0a:ca:97:5d:e6:a3:
         1c:6e:45:09:8e:f0:4b:e8:2a:36:b2:f4:2b:f1:8d:ec:6c:29:
         bc:c1:04:15:c7:8e:8b:32:74:4a:c2:49:64:db:dd:d7:2c:c5:
         f9:cb:46:6d:41:03:30:ff:d3:7e:a8:be:3b:f8:b6:16:32:a1:
         8f:f4:16:04:02:79:6c:d1:f3:27:17:b8:26:6e:bf:79:e1:55:
         3c:29:fb:02:e6:77:15:4e:fa:2d:a5:09:26:0c:4b:37:5b:20:
         05:f7:b8:e9:cb:3b:5e:ad:c7:29:b5:e1:7b:9a:6f:c8:68:34:
         35:cb:bd:d8:1b:2a:03:c6:58:f9:00:21:c2:fa:11:f5:57:64:
         0c:af:f4:a5:f4:87:87:12:7a:d7:ac:a4:cb:da:a1:bc:e5:8d:
         d8:2f:c2:b5:24:18:65:a8:70:ce:6b:39:a4:0b:fd:28:ad:5d:
         cf:2b:1b:2d:6d:a8:6f:6c:1a:b1:d4:50:91:7d:97:5c:21:32:
         7a:e5:ec:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:03:07 2026 by rpki-client