Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
File:                     xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft (raw, json)
Hash identifier:          SUfhgDaFu1Lnzj1uGB3B41LLDsW1qglrStHJuC4ep5I=
Subject key identifier:   74:17:FB:11:BD:78:2B:6E:A6:77:67:0C:99:C5:64:01:1F:E1:69:97
Authority key identifier: C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE
Certificate issuer:       /CN=A9118166/serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
Certificate serial:       087F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
Manifest number:          0877
Signing time:             Fri 12 Jun 2026 20:43:34 +0000
Manifest this update:     Fri 12 Jun 2026 20:43:34 +0000
Manifest next update:     Fri 19 Jun 2026 20:43:34 +0000
Files and hashes:         1: xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl (hash: t+qq/xNEcdTKioodMWIsz/2+SZDZTEIfMt/4GSDBNBY=)
                          2: 6AF8F822FDAB11EAAAB1FB37C4F9AE02.roa (hash: 0atk63T1W/wzmM9R09qN0CbSSQOZFaD/GMI/cNzoG4U=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl
                          rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:43:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2175 (0x87f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9118166, serialNumber=C6D0067F24281CE1F49C90812D15B1F561B95DDE
        Validity
            Not Before: Jun 12 20:43:34 2026 GMT
            Not After : Jun 19 20:43:34 2026 GMT
        Subject: CN=6a2c6f76-d14a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1e:66:12:7e:e6:9a:1d:76:70:ab:94:dc:7b:
                    b1:4e:f1:e1:a1:c0:d3:ae:c8:0f:db:32:2e:86:aa:
                    a4:73:44:b1:66:49:11:1b:12:d2:90:7e:a7:6e:3b:
                    61:66:39:03:92:09:86:2f:89:4d:b2:c6:86:27:0d:
                    5a:c1:e4:f9:d8:94:86:7d:97:39:0f:5f:a2:be:2b:
                    bd:e1:17:d4:90:d8:d0:a3:28:e2:9a:5a:84:3c:65:
                    ca:e0:a4:8b:67:1b:f7:e3:47:0d:86:43:ad:84:bd:
                    ea:a5:ab:72:cb:44:bd:a8:64:fc:50:0e:9b:cd:10:
                    ec:15:c9:15:aa:ef:18:fc:17:a2:a0:77:be:6c:76:
                    57:49:a8:dd:9d:b4:ac:12:15:dd:9e:a8:47:c1:98:
                    27:1e:01:4f:79:f0:21:93:06:48:f6:67:c6:e0:6d:
                    50:6d:c8:0e:f1:a8:0a:29:ac:2c:19:21:d4:ab:ab:
                    f9:cf:b7:0e:46:df:19:45:53:30:c8:a6:46:80:77:
                    5b:28:40:10:b9:e8:3d:49:fc:7f:0b:c3:1e:1f:e6:
                    15:34:ff:b0:13:c6:01:a5:4a:39:84:8f:f1:ce:20:
                    04:6e:99:5e:9b:4a:60:a0:51:27:d6:c2:f1:5e:0a:
                    be:e4:67:aa:ce:50:e4:af:1a:22:0e:04:12:4d:91:
                    6f:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:17:FB:11:BD:78:2B:6E:A6:77:67:0C:99:C5:64:01:1F:E1:69:97
            X509v3 Authority Key Identifier:
                keyid:C6:D0:06:7F:24:28:1C:E1:F4:9C:90:81:2D:15:B1:F5:61:B9:5D:DE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9118166/28C1D022FD8911EA9463B635C4F9AE02/xtAGfyQoHOH0nJCBLRWx9WG5Xd4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:bd:17:5e:6d:e5:fc:79:06:45:eb:5d:fb:22:e7:7b:8b:da:
         ef:31:1e:18:95:15:d0:8b:a2:8f:29:10:ac:c5:86:00:ac:7a:
         a5:bb:78:cc:51:0e:bf:79:4d:11:6d:f5:29:88:9a:f9:86:cf:
         0e:4f:79:f5:41:82:ca:32:da:ea:87:2c:28:e7:93:be:f8:83:
         ce:8a:fc:89:cc:d2:66:1a:93:ad:9c:f0:3e:ef:d5:33:bd:47:
         4c:b6:54:12:6d:55:f6:f0:de:cf:33:ce:a7:59:0c:a5:d4:62:
         dd:87:c4:b2:07:3b:5a:8f:77:81:96:9f:ee:d9:e3:3b:b4:97:
         a0:a3:4a:77:2a:d3:fc:6d:08:20:8c:2f:e0:b4:90:af:e9:84:
         09:00:c9:26:5a:3d:3f:9b:a3:fa:c9:0c:17:f3:7c:34:5d:ff:
         76:ed:98:62:5a:b9:0f:28:27:a2:a1:5d:6d:df:4f:d9:41:b8:
         75:9b:2c:c9:a4:05:52:7d:94:47:b0:b8:8a:88:59:dc:43:a6:
         bf:68:ac:0a:12:36:c0:7c:ae:82:93:d5:5f:d1:d0:55:60:38:
         7b:60:80:37:59:a1:4b:c3:41:09:d1:32:cf:77:a9:19:e9:e4:
         bb:37:bd:ef:2e:24:d4:65:a3:5a:1b:fd:62:4a:bd:02:ae:aa:
         79:61:5c:a9
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICCH8wDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MTgxNjYxMTAvBgNVBAUTKEM2RDAwNjdGMjQyODFDRTFGNDlDOTA4MTJEMTVCMUY1
NjFCOTVEREUwHhcNMjYwNjEyMjA0MzM0WhcNMjYwNjE5MjA0MzM0WjAYMRYwFAYD
VQQDEw02YTJjNmY3Ni1kMTRhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAlR5mEn7mmh12cKuU3HuxTvHhocDTrsgP2zIuhqqkc0SxZkkRGxLSkH6nbjth
ZjkDkgmGL4lNssaGJw1aweT52JSGfZc5D1+iviu94RfUkNjQoyjimlqEPGXK4KSL
Zxv340cNhkOthL3qpatyy0S9qGT8UA6bzRDsFckVqu8Y/BeioHe+bHZXSajdnbSs
EhXdnqhHwZgnHgFPefAhkwZI9mfG4G1QbcgO8agKKawsGSHUq6v5z7cORt8ZRVMw
yKZGgHdbKEAQueg9Sfx/C8MeH+YVNP+wE8YBpUo5hI/xziAEbplem0pgoFEn1sLx
Xgq+5GeqzlDkrxoiDgQSTZFvKQIDAQABo4ICczCCAm8wHQYDVR0OBBYEFHQX+xG9
eCtupndnDJnFZAEf4WmXMB8GA1UdIwQYMBaAFMbQBn8kKBzh9JyQgS0VsfVhuV3e
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTExODE2Ni8yOEMxRDAyMkZE
ODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hPSDBuSkNCTFJXeDlXRzVY
ZDQuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL3h0QUdmeVFvSE9IMG5KQ0JMUld4OVdHNVhkNC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEx
ODE2Ni8yOEMxRDAyMkZEODkxMUVBOTQ2M0I2MzVDNEY5QUUwMi94dEFHZnlRb0hP
SDBuSkNCTFJXeDlXRzVYZDQubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEALL0XXm3l/HkGRetd+yLne4va7zEeGJUV0IuijykQrMWGAKx6pbt4zFEOv3lN
EW31KYia+YbPDk959UGCyjLa6ocsKOeTvviDzor8iczSZhqTrZzwPu/VM71HTLZU
Em1V9vDezzPOp1kMpdRi3YfEsgc7Wo93gZaf7tnjO7SXoKNKdyrT/G0IIIwv4LSQ
r+mECQDJJlo9P5uj+skMF/N8NF3/du2YYlq5DygnoqFdbd9P2UG4dZssyaQFUn2U
R7C4iohZ3EOmv2isChI2wHyugpPVX9HQVWA4e2CAN1mhS8NBCdEyz3epGenkuze9
7y4k1GWjWhv9Ykq9Aq6qeWFcqQ==
-----END CERTIFICATE-----
Generated at Sun Jun 14 00:16:08 2026 by rpki-client