Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft
File:                     a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft (raw, json)
Hash identifier:          yDiLJPeCLepxrbpKDjDaRBxZ04JwY7ChN/xvLsvMtuo=
Subject key identifier:   DF:16:B6:CF:3B:86:F0:40:E2:7A:3B:DE:1B:ED:9B:DA:E3:26:8E:35
Authority key identifier: 6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5
Certificate issuer:       /CN=A9120AAA/serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5
Certificate serial:       0201
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft
Manifest number:          01FC
Signing time:             Sat 13 Jun 2026 03:10:10 +0000
Manifest this update:     Sat 13 Jun 2026 03:10:09 +0000
Manifest next update:     Sat 20 Jun 2026 03:10:09 +0000
Files and hashes:         1: a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl (hash: 8XuTdcvH+cFGtSCHoy58GKUO8VH2daIi6DBFnpWDtUM=)
                          2: 8A389AC25C4811EEBE1CF06BC4F9AE02.roa (hash: qK+khHCIuI//dPRwyz9oPvFPdzHoY4nUbkit8bRPNhA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl
                          rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:10:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 513 (0x201)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120AAA, serialNumber=6B57093290D11F65CFB91F1212C28CF733F9C2B5
        Validity
            Not Before: Jun 13 03:10:09 2026 GMT
            Not After : Jun 20 03:10:09 2026 GMT
        Subject: CN=6a2cca12-9c2a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:52:dc:46:b9:9f:29:fd:d4:a8:f1:1d:9f:fb:
                    c1:57:20:49:fd:08:54:7b:f1:2b:65:32:3b:27:95:
                    ec:0a:11:55:95:cc:5e:e3:32:08:b2:6b:32:fd:c8:
                    47:04:e5:1c:5b:77:ab:9c:f9:9f:44:47:5d:8d:ae:
                    b4:72:81:a2:a1:09:72:a8:c9:55:9b:43:6a:5e:0f:
                    41:5d:df:b7:42:8a:b9:f7:3c:05:99:9a:45:04:9a:
                    42:27:16:8a:bd:96:54:e1:8f:d1:26:df:f5:0d:5a:
                    8b:c0:30:75:da:25:51:2b:fb:d1:eb:18:55:bd:8d:
                    7b:cd:1a:00:0f:f0:68:a9:2e:09:bc:74:70:14:0a:
                    67:e0:22:10:e0:71:5a:36:d8:e9:6a:b9:74:e2:c3:
                    f0:4b:2b:3d:7c:0e:48:64:66:d9:1c:66:47:ef:4f:
                    6d:32:7c:0a:ce:bc:57:46:89:66:3c:cc:a5:c6:e0:
                    eb:a7:af:8f:62:dd:dc:60:5c:93:15:63:4f:96:70:
                    45:63:8a:04:b6:3d:04:55:27:58:d0:78:7e:ec:3c:
                    b4:06:cc:1e:8f:15:c6:48:3a:3f:53:cf:e0:7d:06:
                    9b:ec:72:c1:d4:f6:8e:f4:a6:32:a6:b9:87:87:17:
                    6f:61:8f:19:25:71:9c:7f:37:e4:a0:31:63:a9:c7:
                    40:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:16:B6:CF:3B:86:F0:40:E2:7A:3B:DE:1B:ED:9B:DA:E3:26:8E:35
            X509v3 Authority Key Identifier:
                keyid:6B:57:09:32:90:D1:1F:65:CF:B9:1F:12:12:C2:8C:F7:33:F9:C2:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/a1cJMpDRH2XPuR8SEsKM9zP5wrU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120AAA/0CA77C825C4711EEAA9FE966C4F9AE02/a1cJMpDRH2XPuR8SEsKM9zP5wrU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:39:b9:be:28:8f:06:e9:0e:ea:6d:db:c9:d3:62:66:42:05:
         70:37:e5:a5:46:eb:19:ac:84:b9:11:f3:b4:f5:39:28:32:a4:
         a2:01:d9:7a:f8:6e:36:40:5f:35:e2:b8:36:69:d9:52:ef:0a:
         b4:3b:8f:f9:6b:fc:4c:e3:5a:28:1a:eb:17:1b:1b:fb:70:d2:
         88:bf:20:68:88:8d:69:fc:44:cf:95:78:f7:9f:f2:e7:38:46:
         da:27:6c:ab:ac:26:ea:26:72:90:a3:71:c7:04:c4:17:c1:00:
         da:8a:62:88:b4:1c:e7:ad:04:d0:b7:7a:ef:fc:6f:07:aa:5c:
         2d:ee:a0:40:09:44:8c:fc:d0:30:88:81:d7:99:3a:30:9a:31:
         6a:72:08:72:26:a6:71:ec:68:dd:fe:3e:e0:6f:68:2c:88:0b:
         9b:23:64:29:58:e6:d0:ba:e7:a7:f2:a1:05:f2:bf:77:42:00:
         74:f2:ab:88:11:ac:04:eb:f8:7f:32:d3:30:ef:e0:ea:cb:76:
         77:a5:07:28:73:b6:ce:4d:5e:a7:08:b9:72:4f:b3:59:88:4f:
         a8:e1:b3:f3:da:63:61:ad:a9:b4:60:a0:fc:47:b7:8e:83:72:
         cd:da:40:1f:86:98:a0:69:b7:7e:ec:6f:6e:3e:7a:0e:fa:01:
         88:1c:31:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:41 2026 by rpki-client