Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
File:                     H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft (raw, json)
Hash identifier:          gmL9FQl1H9tt1Ng0GpnZ12mhxc6g951v//uBpn6vWb0=
Subject key identifier:   60:6D:6A:1C:F2:8C:98:FF:1C:B0:6C:D6:6B:66:C3:F4:67:B9:F2:50
Authority key identifier: 1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB
Certificate issuer:       /CN=A912708C/serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
Certificate serial:       0686
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
Manifest number:          067E
Signing time:             Fri 12 Jun 2026 22:35:11 +0000
Manifest this update:     Fri 12 Jun 2026 22:35:11 +0000
Manifest next update:     Fri 19 Jun 2026 22:35:11 +0000
Files and hashes:         1: H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl (hash: tGzRc88DwDpiicaF0GfsEwEjnbDKR+nwHcZ3XL5wrec=)
                          2: 8AA59866C55511EBA7DB557EC4F9AE02.roa (hash: O7fGHxjN+FQFGsWlRiNdIknWpbcrH7a7kZFkM8vfbFU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl
                          rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 22:35:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1670 (0x686)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912708C, serialNumber=1FD5A182D593347570F2D9186D2484C9095C5FFB
        Validity
            Not Before: Jun 12 22:35:11 2026 GMT
            Not After : Jun 19 22:35:11 2026 GMT
        Subject: CN=6a2c899f-0419
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:ea:07:b2:a0:b5:e8:6d:2b:22:49:ac:a8:3c:
                    94:25:00:c4:97:13:7a:71:1c:33:79:3a:0e:bc:e9:
                    2c:0a:4a:18:64:98:07:83:15:12:ef:ea:3a:77:6f:
                    26:cd:51:f4:68:bf:43:99:0c:2f:35:5e:91:7b:2e:
                    56:b3:1e:22:95:c2:7c:30:2d:08:3b:3f:58:8b:87:
                    de:cb:c1:be:51:97:a3:5f:c5:95:bc:2a:8b:0a:ff:
                    0e:2e:24:ad:0b:37:8f:03:6f:6e:3c:57:74:a1:a2:
                    94:ba:2e:96:e8:e3:31:d4:59:5c:38:d4:33:31:6a:
                    29:4d:62:7d:9a:cd:d0:e4:9b:8b:49:ae:fc:74:cf:
                    1f:ff:fc:a7:60:21:df:0a:a6:e1:fc:16:32:e1:dc:
                    34:95:aa:6f:7f:5d:2c:41:ec:5b:17:5f:ad:df:78:
                    e0:fd:58:f1:8f:c6:cc:26:69:af:88:a7:f8:5b:70:
                    32:aa:74:2f:f3:7b:be:87:27:68:51:9e:6d:7a:15:
                    ef:7c:ab:67:77:5e:ab:83:3b:77:4c:ea:64:68:7a:
                    50:bd:6b:af:a6:6a:33:a7:c2:44:ef:fc:6e:a1:37:
                    c8:d1:8e:16:7c:97:66:23:51:c7:0d:e9:ab:b8:95:
                    e7:39:30:23:93:ba:8e:39:cd:ed:d9:e6:d4:da:16:
                    69:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:6D:6A:1C:F2:8C:98:FF:1C:B0:6C:D6:6B:66:C3:F4:67:B9:F2:50
            X509v3 Authority Key Identifier:
                keyid:1F:D5:A1:82:D5:93:34:75:70:F2:D9:18:6D:24:84:C9:09:5C:5F:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/H9WhgtWTNHVw8tkYbSSEyQlcX_s.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912708C/168034FEC55111EBA018BC75C4F9AE02/H9WhgtWTNHVw8tkYbSSEyQlcX_s.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8b:32:15:0d:59:73:3e:d9:6e:d2:b6:a0:4e:67:78:ba:30:c4:
         60:b7:95:74:ec:b6:36:5a:b6:e6:28:3c:a8:bd:da:ff:fd:9d:
         45:cc:c0:06:fd:5d:3c:54:4c:86:c1:ee:2a:ae:f5:18:21:73:
         a8:8b:71:d9:36:3e:ea:56:91:f9:36:24:30:60:d1:d7:06:5d:
         82:3a:25:59:66:93:25:4e:52:e4:50:49:fd:90:b0:31:d2:86:
         2e:39:31:c5:97:d7:a3:1d:bb:9e:da:f1:b2:6e:21:d1:35:6c:
         10:40:5e:a6:3b:ee:af:17:11:74:ff:11:3d:72:81:d6:3d:dc:
         fc:a6:bc:18:2d:ad:74:fa:d8:c4:ed:19:27:b0:2b:27:bb:c9:
         c1:9b:63:d1:67:9c:66:a9:e9:d0:9d:a6:66:5a:c6:72:81:2b:
         59:39:f8:a6:f8:78:e6:03:ef:91:6b:41:db:ce:17:7c:4f:ac:
         f5:c7:54:c3:b6:21:11:cf:05:08:40:14:90:13:41:8a:4e:2b:
         92:9f:5a:7b:84:e9:68:37:ae:4b:cd:a1:b5:01:a5:38:db:39:
         7e:64:aa:71:98:d4:50:a2:52:a8:e4:42:7e:35:b4:e3:ea:8b:
         2f:66:fd:2f:30:23:7c:43:bc:3c:c2:bf:07:aa:37:e7:99:22:
         ae:bd:02:c3
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICBoYwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MjcwOEMxMTAvBgNVBAUTKDFGRDVBMTgyRDU5MzM0NzU3MEYyRDkxODZEMjQ4NEM5
MDk1QzVGRkIwHhcNMjYwNjEyMjIzNTExWhcNMjYwNjE5MjIzNTExWjAYMRYwFAYD
VQQDEw02YTJjODk5Zi0wNDE5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAvuoHsqC16G0rIkmsqDyUJQDElxN6cRwzeToOvOksCkoYZJgHgxUS7+o6d28m
zVH0aL9DmQwvNV6Rey5Wsx4ilcJ8MC0IOz9Yi4fey8G+UZejX8WVvCqLCv8OLiSt
CzePA29uPFd0oaKUui6W6OMx1FlcONQzMWopTWJ9ms3Q5JuLSa78dM8f//ynYCHf
Cqbh/BYy4dw0lapvf10sQexbF1+t33jg/Vjxj8bMJmmviKf4W3AyqnQv83u+hydo
UZ5tehXvfKtnd16rgzt3TOpkaHpQvWuvpmozp8JE7/xuoTfI0Y4WfJdmI1HHDemr
uJXnOTAjk7qOOc3t2ebU2hZpawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFGBtahzy
jJj/HLBs1mtmw/RnufJQMB8GA1UdIwQYMBaAFB/VoYLVkzR1cPLZGG0khMkJXF/7
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEyNzA4Qy8xNjgwMzRGRUM1
NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5IVnc4dGtZYlNTRXlRbGNY
X3MuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0g5V2hndFdUTkhWdzh0a1liU1NFeVFsY1hfcy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEy
NzA4Qy8xNjgwMzRGRUM1NTExMUVCQTAxOEJDNzVDNEY5QUUwMi9IOVdoZ3RXVE5I
Vnc4dGtZYlNTRXlRbGNYX3MubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAizIVDVlzPtlu0ragTmd4ujDEYLeVdOy2Nlq25ig8qL3a//2dRczABv1dPFRM
hsHuKq71GCFzqItx2TY+6laR+TYkMGDR1wZdgjolWWaTJU5S5FBJ/ZCwMdKGLjkx
xZfXox27ntrxsm4h0TVsEEBepjvurxcRdP8RPXKB1j3c/Ka8GC2tdPrYxO0ZJ7Ar
J7vJwZtj0WecZqnp0J2mZlrGcoErWTn4pvh45gPvkWtB284XfE+s9cdUw7YhEc8F
CEAUkBNBik4rkp9ae4TpaDeuS82htQGlONs5fmSqcZjUUKJSqORCfjW04+qLL2b9
LzAjfEO8PMK/B6o355kirr0Cww==
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:18:49 2026 by rpki-client