Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
File:                     FU2hKxG1QFxQywEZ42qL8-0NIbw.mft (raw, json)
Hash identifier:          aa5zzmRj6mQc0hD5BFU5P+htytOLKLQiYzfi9+Y3QuA=
Subject key identifier:   6B:A2:CD:DE:68:65:4A:AF:23:23:F1:B1:6A:3B:30:BC:A7:EC:CC:B5
Authority key identifier: 15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC
Certificate issuer:       /CN=A912A2C1/serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
Certificate serial:       0C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
Manifest number:          0B
Signing time:             Sat 13 Jun 2026 09:12:20 +0000
Manifest this update:     Sat 13 Jun 2026 09:12:19 +0000
Manifest next update:     Sat 20 Jun 2026 09:12:19 +0000
Files and hashes:         1: FU2hKxG1QFxQywEZ42qL8-0NIbw.crl (hash: qqtmkKk4lFaYkIasU5FFboHdCFV/I/OchoQUJnzz31U=)
                          2: 77A068EA57D611F1A509C21FCD833773.roa (hash: obXRKQp33behMNw0kLg97yChlSrOJ2Iv9yjscfOnr/I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl
                          rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 09:12:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A912A2C1, serialNumber=154DA12B11B5405C50CB0119E36A8BF3ED0D21BC
        Validity
            Not Before: Jun 13 09:12:19 2026 GMT
            Not After : Jun 20 09:12:19 2026 GMT
        Subject: CN=6a2d1ef4-0daf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2b:bb:1a:98:86:2a:40:58:01:b3:07:f8:ee:
                    b6:38:8a:cf:38:9d:60:5b:08:f4:50:4d:51:19:91:
                    50:1f:20:c5:84:71:2b:2a:f1:36:93:90:0f:2e:f1:
                    5f:0d:13:4d:6f:f6:6e:f0:39:42:34:20:fe:e8:53:
                    5b:a9:c7:d8:8c:fc:7a:6e:e6:23:d4:7e:b6:ee:8c:
                    1b:43:4f:90:5e:94:6f:ea:0a:42:1d:9b:89:ef:51:
                    7a:5d:b2:f2:0e:48:ab:3d:03:9e:16:f4:12:5c:1e:
                    40:cc:aa:f7:93:8e:c5:26:11:e6:fd:a7:f7:2b:cb:
                    1e:b9:33:22:1a:51:ad:d6:6e:52:cc:58:4a:49:8a:
                    1d:38:f3:66:41:c9:53:38:07:77:2e:6e:d4:d4:a3:
                    a8:d7:dc:ee:d8:47:67:79:5b:6a:00:92:e9:21:37:
                    70:e5:16:88:07:e0:4e:c3:91:12:10:cd:e2:56:ea:
                    76:06:82:39:78:25:75:2f:ae:78:ee:40:f0:be:21:
                    d0:84:ed:5c:32:f7:77:85:3c:02:2f:3c:3e:6d:ba:
                    0b:7d:24:d8:bd:bf:1b:12:ed:81:b7:95:49:ce:22:
                    45:2d:4f:7b:f1:5d:2b:6e:ec:8d:88:32:c7:e5:e1:
                    34:8e:25:ea:c2:b6:04:c7:86:70:74:fa:53:3c:c1:
                    b8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A2:CD:DE:68:65:4A:AF:23:23:F1:B1:6A:3B:30:BC:A7:EC:CC:B5
            X509v3 Authority Key Identifier:
                keyid:15:4D:A1:2B:11:B5:40:5C:50:CB:01:19:E3:6A:8B:F3:ED:0D:21:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/FU2hKxG1QFxQywEZ42qL8-0NIbw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A912A2C1/189CD96457D611F1BCD070CCCC833773/FU2hKxG1QFxQywEZ42qL8-0NIbw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         83:37:06:18:53:96:eb:20:09:dd:4a:d1:d5:47:d7:d0:27:0e:
         e4:ec:db:fa:1f:f5:56:60:f8:34:62:90:aa:ef:86:84:f7:fd:
         63:70:8d:4b:51:dc:a8:61:90:93:d7:c7:86:db:1a:f3:04:62:
         8a:05:a5:24:19:a9:ae:b3:cc:83:48:5d:3b:c9:a8:0c:43:a6:
         6e:bf:dd:37:b4:63:e4:7c:16:b5:f7:fd:a6:63:f6:9d:7b:ad:
         61:86:6b:10:a1:77:66:fe:3e:60:28:8b:b9:fd:f3:7f:d5:b1:
         36:71:83:66:90:fe:da:c5:7d:12:f1:71:4c:53:d2:e3:53:c1:
         51:b8:48:9f:90:b0:f5:a4:3b:33:bf:59:6e:a5:2f:28:bb:b7:
         d0:66:20:ec:d0:1f:c7:fb:d3:c8:8f:83:ea:1e:d8:fb:93:2a:
         79:7b:15:70:5d:23:b2:00:4e:f6:5b:81:9e:89:2d:1e:ff:83:
         0c:d5:88:b0:dc:68:59:7e:90:14:c9:1c:2a:04:55:31:0f:7d:
         3d:02:20:4e:77:14:8a:c7:8b:27:6a:d9:8a:62:57:e3:8d:18:
         31:de:99:22:d0:7b:73:b1:60:98:66:29:5a:1c:c3:45:70:dd:
         26:23:74:de:d9:5e:19:58:c9:9b:aa:f2:7f:3d:24:ac:a0:9f:
         dd:a8:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 20:06:56 2026 by rpki-client