Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft
File:                     9MMKd261o-yKw-4ApaqmCiPvLng.mft (raw, json)
Hash identifier:          eHLYLIAEuOv/MSSjP+I8ItgJoL6TZ5c4WI+l3NK3H88=
Subject key identifier:   69:34:C8:B9:84:C2:68:98:97:4A:91:23:E5:07:68:FB:8E:09:20:74
Authority key identifier: F4:C3:0A:77:6E:B5:A3:EC:8A:C3:EE:00:A5:AA:A6:0A:23:EF:2E:78
Certificate issuer:       /CN=A911DD4C/serialNumber=F4C30A776EB5A3EC8AC3EE00A5AAA60A23EF2E78
Certificate serial:       21
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMKd261o-yKw-4ApaqmCiPvLng.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft
Manifest number:          1F
Signing time:             Sat 13 Jun 2026 08:55:52 +0000
Manifest this update:     Sat 13 Jun 2026 08:55:52 +0000
Manifest next update:     Sat 20 Jun 2026 08:55:52 +0000
Files and hashes:         1: 9MMKd261o-yKw-4ApaqmCiPvLng.crl (hash: LdJmE4gnjTxtCORQplvp1r78QN7a0/au8quI8KSZ/AM=)
                          2: 2FCFD692395C11F1A22F7EE2CB833773.roa (hash: N0Hc/HxaJxuTJcm6mTEnZUv6QgPmxBhvGFlA3gJBs0c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.crl
                          rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMKd261o-yKw-4ApaqmCiPvLng.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:55:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DD4C, serialNumber=F4C30A776EB5A3EC8AC3EE00A5AAA60A23EF2E78
        Validity
            Not Before: Jun 13 08:55:52 2026 GMT
            Not After : Jun 20 08:55:52 2026 GMT
        Subject: CN=6a2d1b18-d432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:69:c7:a2:b0:ea:f4:25:97:02:60:65:ff:9e:
                    f7:bf:f3:14:58:06:fb:13:6a:ff:8c:8e:03:90:17:
                    73:49:1a:1f:d0:01:7e:a8:0e:83:b9:4e:e7:0c:cd:
                    0b:6b:25:1e:7a:8a:9d:72:c2:6f:3f:b5:37:36:14:
                    be:59:28:12:31:1b:40:b3:d2:83:ac:55:81:a6:25:
                    b0:14:bd:64:24:1b:5a:68:ae:82:03:46:61:d5:73:
                    43:0d:ba:16:5b:af:67:96:cd:88:5f:74:ba:7e:59:
                    93:7f:34:c5:bd:54:6e:7e:d4:e3:4e:2a:c2:2e:27:
                    62:d1:98:ec:7c:c8:95:a2:5f:0b:d4:52:b7:71:3f:
                    12:77:2f:dc:9a:05:b6:1c:2a:28:5a:a2:13:ff:e6:
                    e2:ef:81:db:b3:63:3e:8f:96:a7:90:0d:c3:b3:60:
                    75:95:b3:a4:06:ef:10:9f:24:dd:41:96:ae:a4:7a:
                    3c:2a:0a:18:15:6e:b6:72:99:80:99:ed:3f:5a:dc:
                    ba:bf:c7:c4:43:17:d9:ff:6a:9d:9f:68:65:c2:ce:
                    3a:dd:16:43:3e:d1:47:88:53:4f:c6:eb:a5:21:96:
                    e3:0e:47:2c:83:e7:a7:fe:13:61:56:2d:49:d9:59:
                    16:83:0b:eb:91:45:d8:be:11:3d:2d:e2:bc:48:78:
                    dc:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:34:C8:B9:84:C2:68:98:97:4A:91:23:E5:07:68:FB:8E:09:20:74
            X509v3 Authority Key Identifier:
                keyid:F4:C3:0A:77:6E:B5:A3:EC:8A:C3:EE:00:A5:AA:A6:0A:23:EF:2E:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/9MMKd261o-yKw-4ApaqmCiPvLng.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DD4C/8D5D3828395B11F19CECA08BCB833773/9MMKd261o-yKw-4ApaqmCiPvLng.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         27:87:a3:5f:bb:21:af:4a:af:27:be:69:b6:d2:a0:b9:c4:d1:
         27:4d:75:e0:68:1c:dc:bd:65:41:3b:31:85:9f:b3:66:b2:dc:
         c8:dd:25:cb:c8:ef:ad:7e:fb:82:bb:3d:a2:2e:d6:73:98:1a:
         f9:f0:aa:99:b7:64:d4:ca:e1:58:8d:4b:9f:21:56:8d:71:bd:
         51:cb:af:73:b9:84:a5:25:cb:a3:51:ee:3e:ca:47:22:74:05:
         bf:12:1a:88:6c:f2:ca:59:9b:cb:98:a7:75:5c:ca:66:ce:0f:
         74:24:be:a0:e3:6f:11:e4:d1:13:69:8e:7a:42:c6:87:78:a8:
         ba:0e:e9:2f:33:91:fd:9c:c3:1b:07:6e:46:cf:72:ed:a4:5d:
         a3:77:df:70:dc:8c:13:b8:5f:c2:58:26:19:04:f0:db:ae:c4:
         68:f4:25:ea:a8:5f:c5:34:ce:72:0f:d1:4a:9d:bd:a7:28:aa:
         c8:24:b2:c1:0e:c1:87:e9:fc:78:cf:18:4d:62:ba:41:ae:bc:
         98:71:0d:1a:b9:bc:1e:b1:41:e9:67:3e:58:25:30:13:3c:4e:
         c6:ea:1d:e2:92:f7:cb:c9:f4:e0:63:b7:1d:aa:ee:d0:07:9e:
         7b:44:0a:d6:75:84:ea:51:88:d8:38:8c:2e:99:d4:0e:85:bb:
         b3:e5:e1:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:10:23 2026 by rpki-client