Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
File:                     06m0znk41yolUFSgwIW_eI6wabA.mft (raw, json)
Hash identifier:          UwVqMkcwHk+BeuJdJaTYBUyh6JNAf9NaIHFq4PcnAqE=
Subject key identifier:   4A:F0:FC:E8:FE:F0:50:6C:E7:D6:0B:B7:01:5A:DF:ED:8C:0F:AA:2F
Authority key identifier: D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0
Certificate issuer:       /CN=A914331D/serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
Certificate serial:       09B3
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
Manifest number:          09AA
Signing time:             Fri 12 Jun 2026 19:59:13 +0000
Manifest this update:     Fri 12 Jun 2026 19:59:13 +0000
Manifest next update:     Fri 19 Jun 2026 19:59:13 +0000
Files and hashes:         1: 06m0znk41yolUFSgwIW_eI6wabA.crl (hash: OC6LbprMXDt9rSaB6wnTNv5jdHV+R0iIRHpGaxn28+8=)
                          2: 425602A0AD2111EA9510AC0DC4F9AE02.roa (hash: MlNlXSkj1JPmCyqGlrz2u7koWnM2+ICV+rgfqt+G5Jw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl
                          rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:59:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2483 (0x9b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914331D, serialNumber=D3A9B4CE7938D72A255054A0C085BF788EB069B0
        Validity
            Not Before: Jun 12 19:59:13 2026 GMT
            Not After : Jun 19 19:59:13 2026 GMT
        Subject: CN=6a2c6511-372a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:4f:76:57:b2:ab:7a:89:88:25:de:41:66:32:
                    03:92:84:12:68:e6:2b:7e:88:3f:8a:4b:2c:a8:17:
                    12:e1:29:47:49:79:9c:ce:58:28:11:d9:05:74:e8:
                    b9:ca:c2:8e:b0:8b:1e:94:49:93:4a:fb:29:ae:24:
                    f3:c9:5a:06:3f:e2:53:e7:7b:94:fc:fc:db:65:f7:
                    a3:cc:80:af:da:5c:82:45:b5:28:14:14:d0:6f:cf:
                    69:ad:e1:fd:fc:7c:1a:de:0d:f8:3d:cd:ef:65:a6:
                    ea:85:b3:65:f5:d6:69:ef:b5:3d:1a:57:4c:fa:fb:
                    cf:db:4b:c4:96:a2:7f:3e:9b:d2:98:be:0c:0a:66:
                    c4:50:cf:1c:6f:32:b1:64:7f:44:02:52:50:bb:03:
                    e5:ad:13:ab:26:65:12:86:fc:18:d3:90:b1:b0:f4:
                    21:33:07:84:42:d9:4c:c3:a2:2e:ca:92:ac:69:0a:
                    60:61:98:a4:ba:ac:7a:2d:e8:aa:0f:21:41:1c:e7:
                    90:06:9e:78:ab:84:bb:30:c4:b4:e5:8d:92:5a:0f:
                    2e:df:d4:9f:22:88:b2:c6:91:6d:00:43:bf:16:ab:
                    91:8e:0a:4a:04:3c:26:e7:fa:f4:ff:1a:32:f7:55:
                    22:78:96:22:77:2b:21:ce:19:ef:5e:f1:2f:4a:33:
                    dd:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:FC:E8:FE:F0:50:6C:E7:D6:0B:B7:01:5A:DF:ED:8C:0F:AA:2F
            X509v3 Authority Key Identifier:
                keyid:D3:A9:B4:CE:79:38:D7:2A:25:50:54:A0:C0:85:BF:78:8E:B0:69:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/06m0znk41yolUFSgwIW_eI6wabA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914331D/4B45BFE8AD1E11EA94C7E581C4F9AE02/06m0znk41yolUFSgwIW_eI6wabA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         af:a7:88:aa:1e:61:6f:b4:2c:d1:7f:20:c5:00:2a:43:8b:c9:
         ef:5e:ff:f9:31:ef:6d:a6:d5:bc:4e:30:4e:4c:db:db:7f:5a:
         92:50:61:7f:5b:5d:b0:18:25:08:49:0e:2d:72:4e:11:92:1a:
         9f:6c:9c:33:17:82:b4:c9:86:9e:54:07:88:ff:44:04:28:ba:
         1c:63:aa:bc:f3:f2:6e:43:7c:39:e6:7d:a4:2c:75:98:21:a4:
         5e:7e:85:d6:e1:5b:7d:bb:c7:37:6c:74:6a:27:8a:6e:bb:0b:
         d9:08:31:d7:dd:f9:ad:10:10:63:2f:8a:1c:8a:9b:58:e3:cf:
         7b:8c:b8:fd:c9:13:41:bd:64:3c:54:ff:32:09:63:12:57:b8:
         81:bb:84:cb:08:64:2a:6a:93:4a:c3:46:46:b8:52:5b:2c:80:
         6c:16:a2:09:c0:93:9d:03:5c:62:42:af:94:02:dd:a2:b9:d1:
         5d:29:fd:58:5f:1a:ee:32:be:32:12:33:81:81:db:fd:9c:82:
         d8:68:a2:41:8a:ed:35:16:30:33:49:a5:7f:5d:eb:01:dd:e3:
         51:24:12:a0:c9:12:17:d4:2f:cf:e8:1c:c6:ba:52:01:4a:af:
         24:9a:a5:4f:a2:ab:ea:4a:78:da:6d:ec:70:fa:8c:15:6c:be:
         32:e8:51:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:16:56 2026 by rpki-client