Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
File:                     Y0nPcXs0CWM10fw5e8UEBkinjw4.mft (raw, json)
Hash identifier:          jeWm67q2No7Zb9vNimncPUNNq34A7MpB5g2kVj8xILw=
Subject key identifier:   75:2D:10:F0:29:A4:35:C3:FF:50:8C:A2:38:E6:43:52:05:52:E6:F7
Authority key identifier: 63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E
Certificate issuer:       /CN=A9120D97/serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
Certificate serial:       36
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
Manifest number:          35
Signing time:             Sat 13 Jun 2026 08:40:31 +0000
Manifest this update:     Sat 13 Jun 2026 08:40:30 +0000
Manifest next update:     Sat 20 Jun 2026 08:40:30 +0000
Files and hashes:         1: Y0nPcXs0CWM10fw5e8UEBkinjw4.crl (hash: S/EV43ps0Ut45xaAfD3zzz8wYEw0wtYsqAClAKUwAo0=)
                          2: B2D0F8D2178311F1B32BFEF6283D8C67.roa (hash: 0l1faSsNOHOUv9dts3Hprtyh48iyjB1f/xwuNggdhEY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl
                          rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:40:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9120D97, serialNumber=6349CF717B34096335D1FC397BC5040648A78F0E
        Validity
            Not Before: Jun 13 08:40:30 2026 GMT
            Not After : Jun 20 08:40:30 2026 GMT
        Subject: CN=6a2d177f-3816
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:03:6c:dd:8c:63:08:8b:e9:2f:51:64:fc:af:
                    4b:9f:95:5a:a3:40:9e:6f:01:a5:ca:46:34:4d:85:
                    9b:f4:42:38:93:0f:aa:02:b1:65:3d:c8:06:0c:0a:
                    8c:36:eb:57:5b:70:6e:a1:a1:70:53:4c:d1:e5:68:
                    18:e9:35:62:6b:bb:df:b7:38:f0:29:b9:d2:a4:d2:
                    54:b8:8a:e3:ad:05:8f:cb:c3:cd:8e:ce:95:6b:f6:
                    91:94:3b:bf:8b:c6:2c:1a:14:15:b0:e9:ff:bd:00:
                    90:79:57:4b:93:2e:ac:de:4f:a5:e3:4e:90:8a:52:
                    84:4e:2b:3f:c7:a7:38:0f:31:7f:96:01:04:a3:03:
                    6b:a6:2f:04:52:b8:bc:3e:9d:2d:94:16:2e:c7:08:
                    78:71:d9:f3:82:98:01:b6:72:3f:ab:1c:f0:bc:2e:
                    8f:04:31:00:f5:ac:4a:54:27:22:77:3a:d2:c6:f9:
                    f7:26:60:14:75:b1:cc:ed:bd:39:d8:0c:a8:17:cf:
                    dc:d4:1e:9e:a7:0c:e8:8c:0b:b3:fa:4d:fb:13:65:
                    71:1d:dd:90:c8:7d:6f:56:29:ab:2b:33:5c:fa:16:
                    8e:18:2c:6b:3c:d4:2a:1b:7a:4b:b4:d8:0f:e2:37:
                    2f:58:e4:ff:79:02:08:02:3a:d1:02:02:96:c0:ce:
                    0d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:2D:10:F0:29:A4:35:C3:FF:50:8C:A2:38:E6:43:52:05:52:E6:F7
            X509v3 Authority Key Identifier:
                keyid:63:49:CF:71:7B:34:09:63:35:D1:FC:39:7B:C5:04:06:48:A7:8F:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Y0nPcXs0CWM10fw5e8UEBkinjw4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9120D97/10A99A0A178311F1B7AAC0FF273D8C67/Y0nPcXs0CWM10fw5e8UEBkinjw4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         36:24:af:18:2d:a7:70:62:6e:96:cf:be:14:65:87:3f:85:bd:
         34:fe:ca:61:ec:67:b9:ba:a0:33:a0:6f:f0:fd:4a:94:a0:aa:
         84:eb:db:00:5f:71:99:25:18:80:f8:a6:0c:1f:6d:2d:95:d2:
         68:4a:3b:69:3d:3f:0c:61:0e:af:84:2c:07:19:80:36:fe:84:
         00:6b:cb:ca:d3:90:7f:0e:1a:64:0f:77:af:38:f2:28:43:99:
         78:b9:b7:fa:bf:bb:40:07:85:8c:66:9e:86:97:c2:6a:a6:5a:
         f5:80:74:b4:e4:fd:ec:b5:70:b0:a2:e2:db:c4:94:5b:98:63:
         f2:90:64:cc:c4:bf:26:c9:34:5f:b0:75:cf:0f:2c:51:9a:78:
         5a:d1:a0:70:50:d4:25:45:32:53:a6:d8:81:9d:34:ab:a0:1a:
         40:f3:c1:d2:74:18:92:01:05:14:44:96:7c:dc:73:9d:54:ea:
         a1:13:e2:b7:ce:46:27:b4:b8:20:3f:b1:d4:35:5d:ac:b3:8e:
         2e:be:ba:67:64:fa:24:21:ab:fc:83:30:84:51:eb:69:05:cb:
         30:5d:d4:99:2d:9a:72:01:db:f3:fd:c8:84:3b:d3:50:a6:2a:
         90:7a:09:e7:94:91:bf:f0:4c:35:cc:46:cc:a8:33:c9:7a:7c:
         d3:d7:c4:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:21 2026 by rpki-client