Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
File:                     AQtAe3X24zjzr7WajWJxXDwC7PQ.mft (raw, json)
Hash identifier:          EIss2tPJ+G5uopSCArq3uesugoAqM8+V2/yxeqaU6MI=
Subject key identifier:   FB:F9:7F:91:1F:C6:DC:13:FC:60:19:1B:DD:ED:CF:B0:D0:0F:99:88
Authority key identifier: 01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4
Certificate issuer:       /CN=A9132EC7/serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
Certificate serial:       17A1
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
Manifest number:          1789
Signing time:             Fri 12 Jun 2026 16:33:22 +0000
Manifest this update:     Fri 12 Jun 2026 16:33:21 +0000
Manifest next update:     Fri 19 Jun 2026 16:33:21 +0000
Files and hashes:         1: AQtAe3X24zjzr7WajWJxXDwC7PQ.crl (hash: zCjZgamwuA/MSB/A1ScmmBPfs/OecrHeqQrePz2CMos=)
                          2: 0D4F5906FA7911E7B85F4E7EC4F9AE02.roa (hash: Fg8/Dw7mAMJse8JvCxq2d50l5CfSCBU4vZ7nmbzgYwg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl
                          rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:33:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6049 (0x17a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9132EC7, serialNumber=010B407B75F6E338F3AFB59A8D62715C3C02ECF4
        Validity
            Not Before: Jun 12 16:33:21 2026 GMT
            Not After : Jun 19 16:33:21 2026 GMT
        Subject: CN=6a2c34d1-5bd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:50:21:e3:4f:46:20:c4:08:e8:3f:40:f4:72:
                    7e:f5:86:ca:ce:f5:d5:30:d7:13:d0:22:97:89:74:
                    f5:2f:a3:f4:74:14:d6:ea:06:d2:18:65:82:4f:98:
                    1e:48:b1:e1:78:54:5a:6f:76:cb:16:30:d2:d8:30:
                    a6:9c:27:21:9f:de:81:2c:b6:b9:62:b7:f1:42:81:
                    7a:ef:1e:b8:23:cd:b0:92:67:c0:e3:39:02:95:d6:
                    ba:92:8a:1b:01:63:30:b8:61:22:f1:76:45:4d:69:
                    ee:09:51:3b:a7:10:19:d9:b8:98:c8:c0:ec:ff:f7:
                    94:8f:0a:1c:a9:89:6b:ef:7a:22:0b:89:82:3a:19:
                    dc:cc:9d:59:f8:ea:f9:e0:2f:98:26:c9:ae:60:2a:
                    60:17:57:52:17:c8:1f:53:e0:b8:d8:6f:87:0e:4f:
                    ab:13:7e:87:5d:59:f5:4d:d8:f6:03:9f:e7:b9:97:
                    e1:ae:71:8c:ac:ec:77:44:80:be:6f:be:f4:33:3f:
                    af:2d:e5:3d:fb:69:ac:23:f7:6d:58:28:69:86:45:
                    93:8a:5d:8f:7c:d0:6f:80:49:24:76:33:9f:9f:b0:
                    f7:59:ff:8b:03:b5:45:59:24:09:53:9e:00:28:a6:
                    2c:09:dd:d0:a0:95:7b:77:e2:86:c9:7e:bd:56:1c:
                    75:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:F9:7F:91:1F:C6:DC:13:FC:60:19:1B:DD:ED:CF:B0:D0:0F:99:88
            X509v3 Authority Key Identifier:
                keyid:01:0B:40:7B:75:F6:E3:38:F3:AF:B5:9A:8D:62:71:5C:3C:02:EC:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AQtAe3X24zjzr7WajWJxXDwC7PQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9132EC7/2934726AFA7811E79CB6087DC4F9AE02/AQtAe3X24zjzr7WajWJxXDwC7PQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         35:e5:3c:b4:f7:15:48:d4:9b:8f:05:82:66:21:f9:69:b5:21:
         4b:95:36:4e:77:aa:34:d4:2b:8c:a1:f3:5c:cf:c9:4a:8c:a5:
         36:ec:ee:73:b0:d0:72:8d:20:24:15:c8:41:c1:79:bb:36:6d:
         c5:18:e6:6d:f3:18:ec:d6:86:d1:2e:64:8e:df:d9:f0:f9:3a:
         c0:5f:44:03:e5:4c:92:77:bd:a0:9e:a8:c4:73:f9:36:51:6b:
         87:0a:37:84:a1:cc:08:ef:1d:48:c2:56:6d:f1:71:8d:73:58:
         1a:90:b1:b7:e2:14:16:84:14:7b:63:96:8a:28:57:61:f3:ee:
         ac:f1:fe:6b:b8:f8:8e:e9:67:ae:1c:11:a1:4e:91:cf:f7:d6:
         a7:22:37:82:e3:2c:2d:70:6a:bf:8e:71:3e:7f:fa:8f:23:41:
         4b:a6:76:79:98:aa:11:a7:d6:56:c7:6e:88:0d:f3:7e:59:a9:
         b2:c5:11:06:58:6d:fe:15:2d:d3:37:49:6c:b0:16:dd:fa:7d:
         f7:cb:59:7f:5c:b5:43:90:05:c8:b7:15:ce:e1:f7:0d:45:d2:
         5a:b4:ef:af:85:a1:80:cf:1b:27:f3:eb:47:32:41:14:e6:b5:
         05:cb:14:be:ae:b0:a1:da:1f:44:87:e4:69:ed:b7:c5:71:18:
         a5:3f:aa:4c
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICF6EwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
MzJFQzcxMTAvBgNVBAUTKDAxMEI0MDdCNzVGNkUzMzhGM0FGQjU5QThENjI3MTVD
M0MwMkVDRjQwHhcNMjYwNjEyMTYzMzIxWhcNMjYwNjE5MTYzMzIxWjAYMRYwFAYD
VQQDEw02YTJjMzRkMS01YmQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAwVAh409GIMQI6D9A9HJ+9YbKzvXVMNcT0CKXiXT1L6P0dBTW6gbSGGWCT5ge
SLHheFRab3bLFjDS2DCmnCchn96BLLa5YrfxQoF67x64I82wkmfA4zkClda6koob
AWMwuGEi8XZFTWnuCVE7pxAZ2biYyMDs//eUjwocqYlr73oiC4mCOhnczJ1Z+Or5
4C+YJsmuYCpgF1dSF8gfU+C42G+HDk+rE36HXVn1Tdj2A5/nuZfhrnGMrOx3RIC+
b770Mz+vLeU9+2msI/dtWChphkWTil2PfNBvgEkkdjOfn7D3Wf+LA7VFWSQJU54A
KKYsCd3QoJV7d+KGyX69Vhx1MwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFPv5f5Ef
xtwT/GAZG93tz7DQD5mIMB8GA1UdIwQYMBaAFAELQHt19uM486+1mo1icVw8Auz0
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzMkVDNy8yOTM0NzI2QUZB
NzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6anpyN1dhaldKeFhEd0M3
UFEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL0FRdEFlM1gyNHpqenI3V2FqV0p4WER3QzdQUS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz
MkVDNy8yOTM0NzI2QUZBNzgxMUU3OUNCNjA4N0RDNEY5QUUwMi9BUXRBZTNYMjR6
anpyN1dhaldKeFhEd0M3UFEubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEANeU8tPcVSNSbjwWCZiH5abUhS5U2TneqNNQrjKHzXM/JSoylNuzuc7DQco0g
JBXIQcF5uzZtxRjmbfMY7NaG0S5kjt/Z8Pk6wF9EA+VMkne9oJ6oxHP5NlFrhwo3
hKHMCO8dSMJWbfFxjXNYGpCxt+IUFoQUe2OWiihXYfPurPH+a7j4julnrhwRoU6R
z/fWpyI3guMsLXBqv45xPn/6jyNBS6Z2eZiqEafWVsduiA3zflmpssURBlht/hUt
0zdJbLAW3fp998tZf1y1Q5AFyLcVzuH3DUXSWrTvr4WhgM8bJ/PrRzJBFOa1BcsU
vq6wodofRIfkae23xXEYpT+qTA==
-----END CERTIFICATE-----
Generated at Sun Jun 14 01:56:31 2026 by rpki-client