Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
File:                     A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft (raw, json)
Hash identifier:          rrvIvN7YNZzwNRwQ/zBQ4O/ilWkAaIeFCHKdVPm2T+0=
Subject key identifier:   78:4D:06:36:7F:4B:4E:E1:6F:30:0D:32:C1:BE:A0:26:43:B8:9F:35
Authority key identifier: 03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90
Certificate issuer:       /CN=A911FA99/serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
Certificate serial:       0C11
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
Manifest number:          0C07
Signing time:             Tue 16 Jun 2026 18:52:32 +0000
Manifest this update:     Tue 16 Jun 2026 18:52:32 +0000
Manifest next update:     Tue 23 Jun 2026 18:52:32 +0000
Files and hashes:         1: A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl (hash: 4ZAglK3Uj0KfGNv7ISHMnhnxlzICZYGeU5pejRZpkKg=)
                          2: 730BD0EC384011EAADE7134BC4F9AE02.roa (hash: 7OphPJqSmTlpEbi6K2ZmGGrAGrBjLWZQ16BfKwVh54w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl
                          rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 22 Jun 2026 01:32:31 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3089 (0xc11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A911FA99, serialNumber=03A8566C8031F562199DF99D9B99B9C7E719F890
        Validity
            Not Before: Jun 16 18:52:32 2026 GMT
            Not After : Jun 23 18:52:32 2026 GMT
        Subject: CN=6a319b70-d6b1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:e2:90:1e:dc:81:e6:46:9d:7b:b6:98:19:b7:
                    d2:55:e2:5b:0c:d1:0e:ef:e4:b3:7a:06:71:3f:f9:
                    04:e9:29:2a:55:23:1c:eb:ed:28:a0:af:ac:9e:9b:
                    f8:32:bd:4e:06:ec:bb:a6:57:52:f6:3c:1e:67:e6:
                    2a:8b:c4:12:83:54:bc:3f:e9:c2:f2:73:d2:b2:ee:
                    ad:8c:c2:39:fc:f2:35:bd:4d:ba:65:df:ab:77:82:
                    14:d7:38:7d:1f:3c:2f:84:08:26:13:a5:97:cb:78:
                    40:ca:dd:e0:db:e5:f0:04:41:19:b2:ff:03:2d:0a:
                    54:af:21:e8:a6:3b:51:a1:3a:a7:00:a1:fb:72:c9:
                    9b:32:0d:3e:ce:a1:a1:00:ca:d8:a7:ce:5d:d5:a7:
                    97:e1:28:39:f9:8c:3b:f1:47:55:70:7f:04:c3:07:
                    16:3a:8c:b8:55:4f:61:70:9d:bc:17:21:d0:4a:5c:
                    d2:e7:2b:bf:57:69:9f:be:4e:6c:b5:3a:26:65:9e:
                    65:9e:8c:a5:47:ab:03:4e:eb:0f:3b:69:95:01:38:
                    8d:0e:5d:9c:8f:08:54:d8:05:01:f9:1e:cb:32:61:
                    09:0d:b6:15:b0:90:11:fe:70:32:9b:e4:06:5b:4d:
                    a1:42:10:98:ae:6b:0a:87:3e:f9:e2:21:c7:82:b3:
                    7d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4D:06:36:7F:4B:4E:E1:6F:30:0D:32:C1:BE:A0:26:43:B8:9F:35
            X509v3 Authority Key Identifier:
                keyid:03:A8:56:6C:80:31:F5:62:19:9D:F9:9D:9B:99:B9:C7:E7:19:F8:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A911FA99/06023C76383F11EAAEE89445C4F9AE02/A6hWbIAx9WIZnfmdm5m5x-cZ-JA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:77:27:cb:76:0c:44:d6:08:71:29:70:3d:fb:1e:f7:df:8b:
         4e:4f:ae:d4:5a:a1:c9:e6:02:e0:1c:7e:92:ad:45:74:e2:59:
         50:52:5d:cf:23:79:84:c0:1a:5c:f6:65:77:d4:29:27:c7:a9:
         b1:c1:7d:e6:5c:62:01:bb:e1:d9:39:d1:07:fe:cd:5a:a0:c2:
         68:c9:bc:88:31:bf:b2:c3:32:72:67:04:77:66:c0:ff:3d:21:
         4d:4a:fb:80:ec:3e:b0:08:d6:5c:15:9c:7e:bb:db:5f:bc:00:
         a5:e0:fb:1a:a5:aa:33:78:44:3b:26:32:3b:52:6e:ef:e1:cd:
         89:b2:5a:27:5a:ff:22:d0:c8:41:1f:da:c4:9b:3b:89:52:9b:
         32:3e:51:7e:de:4b:65:45:c0:bb:e7:9d:65:d7:7d:b1:f7:bd:
         41:f0:f4:72:28:d0:f5:c5:f3:72:95:d3:21:ed:64:db:f3:bd:
         a7:45:bd:28:d3:85:49:b1:1c:c1:8b:8d:fe:8b:f7:99:e3:9d:
         20:31:d8:a2:b0:6e:09:df:fe:56:5b:ae:6b:63:4c:5a:b5:ab:
         1c:e8:e9:4d:36:d0:22:8d:00:56:d0:86:c3:0d:51:e0:95:d3:
         97:68:51:37:aa:35:5f:84:8b:f9:7e:41:12:c9:5f:f4:e4:8a:
         e9:69:33:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:01:09 2026 by rpki-client