Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
File:                     _bJ1TZUGMOsR34TihVyqt9Fib4A.mft (raw, json)
Hash identifier:          gqf3g7jWn6d6paBRiT2lLem7uqYkvp8esG2xaDijPrE=
Subject key identifier:   6F:BD:7C:26:71:25:87:8B:BA:F8:06:F7:B5:3E:94:6B:48:A9:41:34
Authority key identifier: FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80
Certificate issuer:       /CN=A911D834/serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
Certificate serial:       35B1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
Manifest number:          3579
Signing time:             Fri 12 Jun 2026 14:38:06 +0000
Manifest this update:     Fri 12 Jun 2026 14:38:06 +0000
Manifest next update:     Fri 19 Jun 2026 14:38:06 +0000
Files and hashes:         1: _bJ1TZUGMOsR34TihVyqt9Fib4A.crl (hash: +Lp+qodmzxCDOv2nR83FhKS/y0DMSGJCpM0ExsXMfOs=)
                          2: 5F436F7E39A011EE923F683AC4F9AE02.roa (hash: d1VOETNhFOccLSwqdQXH2GNl8fCdfHMVZ6K7EwkYRNQ=)
                          3: F62323DEB97911F0A728D041C4F9AE02.roa (hash: VYA799jHHyf/EZwQx98vKIoBtcAMfoZki4v45ia4iow=)
                          4: DA8A3692A59411F0BF072D6DC4F9AE02.roa (hash: KPbP95r3TCc58AOeYUlQqKFz/YOZ3L4nxR/B312mHxQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl
                          rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 14:38:05 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13745 (0x35b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911D834, serialNumber=FDB2754D950630EB11DF84E2855CAAB7D1626F80
        Validity
            Not Before: Jun 12 14:38:06 2026 GMT
            Not After : Jun 19 14:38:06 2026 GMT
        Subject: CN=6a2c19ce-62f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:21:5b:e8:88:25:3b:82:bb:9b:85:5d:e4:2e:
                    0f:2c:8b:ac:d1:fc:c6:b0:b9:ea:aa:f8:32:2f:b7:
                    0a:ef:49:a0:75:87:76:d9:63:7b:30:5f:c1:66:16:
                    ee:4d:b8:1d:98:f1:54:84:2c:ab:17:52:2b:3b:82:
                    bb:b2:7b:6f:dc:0a:da:76:ec:63:bf:c0:e4:1c:9e:
                    d1:9b:5d:04:6e:c8:61:8d:ce:5c:27:f3:c9:1e:5c:
                    4e:dc:33:0d:5f:31:51:98:2b:84:f8:af:09:f8:06:
                    63:50:67:25:1d:9e:0f:b6:e7:64:94:b7:02:77:79:
                    c5:06:42:c5:9a:83:66:d9:12:78:65:72:d9:38:46:
                    ba:d7:ac:2d:8f:19:4b:5a:5a:82:69:c1:89:95:1c:
                    e1:cf:90:b2:22:ee:e3:e7:2e:56:7f:bd:ec:69:75:
                    7d:e2:77:b9:eb:f9:3d:00:85:31:8f:37:de:ee:6f:
                    04:e8:c2:b7:09:3f:6f:43:08:67:31:60:1e:2b:41:
                    37:a3:fc:36:06:de:14:b8:13:46:fa:0c:30:b9:72:
                    ee:49:51:fd:40:dd:23:a3:45:86:2b:90:f2:fe:17:
                    68:28:58:bf:98:d3:bf:5a:1a:a7:e4:d6:35:84:b7:
                    b2:dc:b4:c4:59:a8:cf:00:2e:63:ad:14:ce:fe:67:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:BD:7C:26:71:25:87:8B:BA:F8:06:F7:B5:3E:94:6B:48:A9:41:34
            X509v3 Authority Key Identifier:
                keyid:FD:B2:75:4D:95:06:30:EB:11:DF:84:E2:85:5C:AA:B7:D1:62:6F:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/_bJ1TZUGMOsR34TihVyqt9Fib4A.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911D834/DFBA50B81D8D11E2824DEDEB08B02CD2/_bJ1TZUGMOsR34TihVyqt9Fib4A.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         52:80:06:78:3c:98:73:60:3b:71:61:61:32:1e:1e:b0:ea:ee:
         04:1e:fa:c8:e2:08:b2:08:e8:31:93:ba:46:01:a6:09:29:bf:
         f1:19:96:53:57:27:e1:28:a3:52:eb:4d:43:57:c8:34:9d:9d:
         de:72:6d:a0:83:bf:4d:a4:3d:1f:7d:40:fb:55:f4:af:7a:99:
         26:a2:1b:7c:5f:39:7b:23:d7:e8:ea:d7:72:e4:f9:61:2d:ba:
         d4:47:6f:a2:18:67:7e:ac:13:cd:d0:ca:50:e5:76:e5:cb:f5:
         f6:dc:fc:96:8c:a5:13:0b:c3:9e:06:35:a3:91:df:6d:db:21:
         73:af:61:cd:3b:dc:e4:4b:05:f5:96:9f:81:07:e2:c2:70:55:
         42:e3:eb:18:b7:98:a4:06:55:64:83:97:b6:7a:4f:4f:43:de:
         47:93:be:ba:25:9b:df:0a:88:fd:6a:4d:49:22:6b:5e:1e:b0:
         8e:3f:7d:cb:3a:c3:47:f0:a3:38:8b:52:50:6d:d5:82:81:0b:
         7f:6e:09:4e:16:b7:fd:cf:c1:f9:9d:7d:de:f5:0c:0c:6c:03:
         d0:4a:7c:e8:7d:c2:cd:a2:6a:6e:a5:5d:2a:73:88:28:2f:08:
         76:35:3d:fc:0f:b1:1b:2b:8f:24:2c:69:2a:2a:53:7f:df:f1:
         c5:d1:32:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 09:56:11 2026 by rpki-client