Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
File:                     o8s5jsc5UXR2LZMDPnBgnWD03bI.mft (raw, json)
Hash identifier:          XfREFSR9ECMQKz1oyxC/Izc09sQtj4OdAKFIGKnpaQQ=
Subject key identifier:   96:5A:D4:8C:03:DC:B2:98:71:B3:64:91:E8:00:07:2D:60:FA:53:84
Authority key identifier: A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2
Certificate issuer:       /CN=A911606A/serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
Certificate serial:       01CD
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
Manifest number:          01C6
Signing time:             Wed 17 Jun 2026 03:58:05 +0000
Manifest this update:     Wed 17 Jun 2026 03:58:04 +0000
Manifest next update:     Wed 24 Jun 2026 03:58:04 +0000
Files and hashes:         1: o8s5jsc5UXR2LZMDPnBgnWD03bI.crl (hash: 4Por64nMEzdV0VRl3SMEDR/dgo5AcwwbgnwnxJX4Clk=)
                          2: EEEC4B6ABD9D11EE9839661CC4F9AE02.roa (hash: vF01duODiwTYz9/MMIZAj5OF+2YRcDoyyVIZ0SFGCBU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl
                          rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911606A, serialNumber=A3CB398EC7395174762D93033E70609D60F4DDB2
        Validity
            Not Before: Jun 17 03:58:04 2026 GMT
            Not After : Jun 24 03:58:04 2026 GMT
        Subject: CN=6a321b4d-c197
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ee:04:71:45:fd:15:22:1f:f3:cc:8e:66:88:
                    0a:92:1c:ad:22:48:bf:1b:8c:6f:f2:21:99:34:cb:
                    32:3d:1a:c3:a2:c8:6e:ce:ba:86:40:d9:f0:37:2d:
                    25:34:d8:e4:ae:b4:d9:42:3b:5e:01:78:29:00:6e:
                    51:00:26:5b:af:ef:94:5b:9b:32:0f:32:35:6a:ed:
                    17:32:a9:de:35:8a:2b:53:7f:3a:14:2f:6d:ab:7a:
                    64:e3:ed:db:51:15:3e:d9:84:75:8a:ef:f3:0b:b7:
                    c2:7e:a1:d1:1a:20:55:e4:43:e3:ee:ec:e2:0b:14:
                    96:9a:87:4e:75:8e:d2:a2:64:4d:12:1f:b6:6c:b8:
                    39:39:48:dc:09:75:8b:17:07:ec:33:d9:69:d8:51:
                    d7:6d:8c:db:5a:a9:85:a3:a0:07:9f:9b:60:b3:37:
                    53:76:75:a4:89:b9:b9:f7:4b:c2:07:ae:3b:b5:5d:
                    d4:35:03:0a:f8:6d:88:a4:f4:46:ac:7b:07:2f:34:
                    55:c6:8f:58:bd:c6:19:14:62:87:e2:56:91:28:54:
                    7c:14:ec:b1:a0:27:92:7e:a0:45:d7:69:95:33:4d:
                    30:cc:21:84:50:69:0d:6d:83:50:df:f7:e6:2e:1f:
                    f3:35:75:ff:0d:70:78:ca:1c:82:20:fc:ac:ec:7e:
                    52:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5A:D4:8C:03:DC:B2:98:71:B3:64:91:E8:00:07:2D:60:FA:53:84
            X509v3 Authority Key Identifier:
                keyid:A3:CB:39:8E:C7:39:51:74:76:2D:93:03:3E:70:60:9D:60:F4:DD:B2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/o8s5jsc5UXR2LZMDPnBgnWD03bI.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911606A/4F2588E4BB4511EE830C985DC4F9AE02/o8s5jsc5UXR2LZMDPnBgnWD03bI.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9b:38:87:0a:4b:33:ae:af:50:25:36:6b:49:9a:ec:b6:44:20:
         d5:96:72:39:6b:2b:9e:b9:4f:7b:fd:a5:e9:a0:c8:27:f9:9d:
         80:47:bf:db:e2:57:85:8c:5c:6f:69:29:2b:7f:52:23:c9:d6:
         e6:c4:98:3f:73:1c:1e:f1:4c:62:cf:98:ec:ee:dc:f2:2f:6a:
         63:89:06:3d:26:eb:15:73:a1:e0:16:0f:fb:2f:99:9f:8c:78:
         00:5d:c5:9b:a1:2c:04:04:24:87:13:fe:36:c7:d4:c8:2b:ad:
         99:85:c4:f9:ae:20:80:4d:d9:35:16:65:13:a7:d4:17:bd:ef:
         4b:7e:30:90:56:63:65:11:45:34:82:11:ef:30:58:d4:51:7c:
         49:04:40:29:6b:ac:ff:45:17:7c:aa:fd:01:7a:06:55:c5:c5:
         e7:64:a2:11:9f:b9:c8:60:4c:90:15:2e:0a:b4:39:0c:69:1b:
         75:97:34:a0:d3:25:54:cc:67:57:73:5b:1a:48:ca:0e:9e:88:
         9a:7c:4e:c5:b1:c7:39:66:c9:3a:48:b8:f6:c5:75:e6:2a:ae:
         95:2e:b6:10:0f:12:e1:b3:6d:4d:e8:6e:12:20:03:c4:1b:ff:
         0b:65:18:23:b6:23:72:4b:a9:06:b7:86:70:33:e3:2c:45:2b:
         70:8a:2c:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 09:26:34 2026 by rpki-client