Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
File:                     srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft (raw, json)
Hash identifier:          nOb7jnDnyzteUmxPq+k3chX0H11eapwo72aQXGdSiFQ=
Subject key identifier:   91:57:12:B1:BE:FF:5A:6F:A9:F8:54:3A:C3:11:6D:57:A5:2C:06:C6
Authority key identifier: B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58
Certificate issuer:       /CN=A914397B/serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
Certificate serial:       0B43
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
Manifest number:          0B3B
Signing time:             Fri 12 Jun 2026 19:16:11 +0000
Manifest this update:     Fri 12 Jun 2026 19:16:11 +0000
Manifest next update:     Fri 19 Jun 2026 19:16:11 +0000
Files and hashes:         1: srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl (hash: msjs3STQKOYZLpcfVLUPBps4lyGD2wDljCWO0h4Rwtc=)
                          2: 8109A2E65EA111EA879CA66DC4F9AE02.roa (hash: 2j4qtY2NB4o4xIh+eTu9IqpJ1nrHSsrqDfHSIXATQH0=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl
                          rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 19:16:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2883 (0xb43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914397B, serialNumber=B2BA4D275A498FB4646C7BC06E2623E16BE79058
        Validity
            Not Before: Jun 12 19:16:11 2026 GMT
            Not After : Jun 19 19:16:11 2026 GMT
        Subject: CN=6a2c5afb-1390
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:e9:67:c0:42:af:1f:02:fd:57:67:bf:8e:a7:
                    75:0a:f5:dd:61:f3:df:96:f2:6f:c5:c8:12:8e:50:
                    a0:9c:d2:d4:c3:2b:9d:c6:ac:96:d5:d6:81:b3:41:
                    e9:43:76:4e:80:5b:6c:31:9c:5d:17:70:06:c8:39:
                    f3:3e:45:24:f3:9d:38:37:8b:7c:aa:b2:b5:7d:32:
                    d4:e7:c8:f4:71:ed:54:2d:8b:12:4b:8b:7d:3f:91:
                    92:5d:a7:36:3b:07:f9:2e:d0:a3:ff:6d:ec:58:d0:
                    da:84:b6:a4:ba:38:90:78:a3:92:a9:92:44:74:4a:
                    c9:18:f1:d5:f0:af:62:f3:3d:ac:e1:0c:a7:2d:d3:
                    88:fb:48:f4:28:00:a5:65:0d:a7:76:97:82:6d:64:
                    bc:2a:ca:59:59:b1:ec:c3:70:1a:0a:cf:69:d2:ad:
                    42:5a:77:9a:46:46:03:9f:40:7c:18:ea:f3:9f:b8:
                    ff:86:dd:ab:df:05:26:96:3b:40:f2:31:5a:a2:85:
                    23:b3:8b:78:2c:67:a4:ba:6a:c8:b2:9b:63:8f:7d:
                    81:71:38:1c:53:47:f0:89:94:12:3b:cc:0d:96:f3:
                    76:ee:93:be:f9:65:68:24:ee:17:2b:16:e4:67:f6:
                    b1:f8:0d:1f:c1:98:b5:4f:ec:d7:64:71:35:89:92:
                    ca:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:12:B1:BE:FF:5A:6F:A9:F8:54:3A:C3:11:6D:57:A5:2C:06:C6
            X509v3 Authority Key Identifier:
                keyid:B2:BA:4D:27:5A:49:8F:B4:64:6C:7B:C0:6E:26:23:E1:6B:E7:90:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/srpNJ1pJj7RkbHvAbiYj4WvnkFg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914397B/0E0401A25EA011EA9A26466BC4F9AE02/srpNJ1pJj7RkbHvAbiYj4WvnkFg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         62:d4:25:30:e0:c6:c3:69:af:da:e1:a0:39:53:79:9c:34:98:
         e1:f0:c7:08:ca:1b:21:12:fb:f8:f2:2a:3f:a0:3f:10:77:4f:
         82:2a:50:b6:e8:65:89:e9:aa:d5:e4:a9:66:b6:88:6a:a4:4c:
         12:64:55:53:5f:eb:23:e7:06:16:b6:12:2a:a4:e9:40:a0:b0:
         3c:0d:49:8b:d5:82:76:f7:9f:2d:5e:d2:68:f0:97:1a:60:19:
         35:68:79:67:c7:0f:7e:54:4e:33:63:b2:bc:4d:92:ee:1b:f4:
         ff:8c:e7:a9:51:d9:69:f7:74:06:e9:28:f9:40:35:f2:e7:cb:
         e8:36:17:d4:78:f5:da:1a:44:ea:4c:88:d6:51:28:ab:ae:9c:
         ea:6a:2e:94:d3:f8:bf:fe:97:c5:b5:93:a5:05:51:2a:6a:8a:
         9c:a1:da:0b:fc:61:2a:1e:c6:34:71:96:d8:cf:92:ec:5b:0e:
         c8:82:b2:3a:ab:6d:39:60:b8:02:f0:8d:cc:84:86:dc:a4:45:
         d0:66:1b:6c:76:da:0a:84:70:aa:72:d7:e1:93:db:3e:4f:d0:
         b6:6c:23:99:52:29:31:45:09:d5:6d:23:65:b6:c1:91:84:4d:
         01:92:5d:11:c0:24:bd:38:26:42:4b:af:3a:87:25:fc:fd:80:
         94:a9:83:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:45:51 2026 by rpki-client