Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
File:                     DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft (raw, json)
Hash identifier:          BgbsM/GzeSPceUH2WbpOhNbUQ9WyDPQP21ypLMkasg8=
Subject key identifier:   66:71:56:BD:4A:2D:7F:82:2C:35:DF:DF:9B:46:58:6A:E5:48:D3:86
Authority key identifier: 0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47
Certificate issuer:       /CN=A911DEBE/serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
Certificate serial:       09CF
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
Manifest number:          09C5
Signing time:             Fri 12 Jun 2026 19:55:36 +0000
Manifest this update:     Fri 12 Jun 2026 19:55:36 +0000
Manifest next update:     Fri 19 Jun 2026 19:55:36 +0000
Files and hashes:         1: DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl (hash: jKeCBmrMtjRJoA/kX+1INdB9su3mVSiq572NbNBSvIo=)
                          2: A4955B14A91B11EA924D2D7BC4F9AE02.roa (hash: CDcLRqPOlIl7GGhyIqwucsiXiEcpvCH7QLIogd4pmBQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl
                          rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:55:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2511 (0x9cf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911DEBE, serialNumber=0C015C06D1CD237842B67057C1D54A20EF272D47
        Validity
            Not Before: Jun 12 19:55:36 2026 GMT
            Not After : Jun 19 19:55:36 2026 GMT
        Subject: CN=6a2c6438-8a8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0c:ed:35:2f:d5:e9:2e:72:0d:38:86:57:7c:
                    a5:13:12:73:13:52:5a:b3:49:bd:92:cf:17:df:ce:
                    f5:98:a2:fa:f6:36:ac:21:bb:40:bd:b5:36:c0:b1:
                    b9:a9:db:b4:48:18:e8:42:39:d2:e2:a1:08:07:aa:
                    51:de:9e:06:a2:bb:26:4e:80:99:11:2b:d7:e7:02:
                    46:bf:38:3a:88:1b:14:f1:00:85:f5:ef:30:a9:23:
                    98:85:d6:8f:93:e8:6e:59:57:2f:8f:cb:fa:ce:69:
                    e9:b5:ee:06:2c:c4:5d:74:fd:ed:12:f1:aa:d2:dd:
                    1d:b4:18:cc:f2:9b:8f:56:8a:5c:f6:dc:e9:95:d2:
                    b6:c9:70:db:0e:e7:a6:f3:17:90:29:00:da:22:d5:
                    55:40:51:bf:79:fa:ba:c6:1b:f2:e2:6e:82:b5:b0:
                    d1:9b:b9:ef:bf:84:88:13:d0:9e:27:76:6d:57:89:
                    be:45:80:47:88:16:94:f6:d0:b4:66:d8:15:db:35:
                    b1:fc:8f:87:f8:73:18:57:60:50:3e:11:86:8c:74:
                    3b:6c:f5:e9:c9:3e:bf:17:f9:d7:07:cf:10:9c:9e:
                    38:70:70:75:b2:39:9d:56:44:ac:1a:2b:14:9f:57:
                    49:d7:6f:23:4f:c1:70:d5:a4:91:32:1d:81:71:dd:
                    9c:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:71:56:BD:4A:2D:7F:82:2C:35:DF:DF:9B:46:58:6A:E5:48:D3:86
            X509v3 Authority Key Identifier:
                keyid:0C:01:5C:06:D1:CD:23:78:42:B6:70:57:C1:D5:4A:20:EF:27:2D:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DAFcBtHNI3hCtnBXwdVKIO8nLUc.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911DEBE/79433FCAA91711EA9481866FC4F9AE02/DAFcBtHNI3hCtnBXwdVKIO8nLUc.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         21:4e:59:4f:ce:08:57:0d:99:23:9a:2d:39:1b:b3:6f:6f:cf:
         41:c9:e8:cc:9a:6d:ba:0d:df:a0:97:c2:16:4c:e9:95:7c:22:
         f5:d7:63:e4:88:45:5c:be:99:37:7a:f1:3c:01:8a:1c:1a:00:
         55:0e:4e:0b:90:af:c8:7e:be:6d:b3:03:01:78:49:fd:ec:67:
         6f:2d:94:3d:82:3d:fb:72:ad:24:31:01:62:1d:fc:8f:04:fe:
         c5:ba:68:09:be:4c:e8:38:08:2d:53:df:5e:f0:0b:bd:f1:22:
         ca:3e:7c:fc:7e:24:63:0b:26:e8:03:17:36:83:68:a8:56:42:
         90:75:42:d1:48:4e:15:05:f9:c0:04:11:06:68:85:0e:d7:38:
         5d:25:3d:e2:af:ae:b7:ad:8e:1d:c1:de:4b:db:d7:60:18:61:
         e4:9b:41:c7:9a:31:d9:9c:cf:15:6d:2c:2f:91:90:1e:7b:eb:
         fa:2a:43:af:f6:f9:c7:7c:d0:3c:41:ec:9e:de:46:9b:74:24:
         e8:92:99:04:36:1f:28:8e:63:e7:ab:ac:c5:1f:96:69:71:2f:
         73:44:27:f8:9d:4c:28:83:e3:a4:b2:93:e9:15:e0:57:1e:5d:
         c3:9f:c3:19:ab:10:85:bb:0e:69:c9:4e:61:cc:d7:0a:e1:b1:
         83:b2:0c:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:54:16 2026 by rpki-client