Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
File:                     zGkjHByhW84A7o1F08z_3kUtS5I.mft (raw, json)
Hash identifier:          NEyxTBcaaF/4M1VaMOtjIUaICruwMXuv8+GmB+mIIxA=
Subject key identifier:   A2:0C:AB:D1:4C:FA:80:BF:A7:05:C8:9E:99:BA:CD:E5:02:A1:51:7E
Authority key identifier: CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92
Certificate issuer:       /CN=A9144436/serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
Certificate serial:       1586
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
Manifest number:          155F
Signing time:             Fri 12 Jun 2026 16:45:24 +0000
Manifest this update:     Fri 12 Jun 2026 16:45:24 +0000
Manifest next update:     Fri 19 Jun 2026 16:45:24 +0000
Files and hashes:         1: zGkjHByhW84A7o1F08z_3kUtS5I.crl (hash: NXHCTdEL94vSYULJX2CBXbN+flzWmS28usiNKgqwmXM=)
                          2: 186C59282D8B11EAA862AD56C4F9AE02.roa (hash: c3V4is6FxJWguSVJuid3bqOWHNBU9BhpqKFdoluzAPo=)
                          3: 1086CEC42ACA11EE88AEAE19C4F9AE02.roa (hash: ZmY2QYzyAhSTsePe4zn0H+5k+aBVvIw3u0RjxVpoXEs=)
                          4: 59D3C5822AF711EE8EDEA185C4F9AE02.roa (hash: 0NwFrvM9IRvJJO9gyp3K+Hhph/Q11YURFU2ihH7vWSU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl
                          rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:45:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5510 (0x1586)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9144436, serialNumber=CC69231C1CA15BCE00EE8D45D3CCFFDE452D4B92
        Validity
            Not Before: Jun 12 16:45:24 2026 GMT
            Not After : Jun 19 16:45:24 2026 GMT
        Subject: CN=6a2c37a4-3cc7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c8:b3:c1:86:71:7c:3e:a3:e0:39:e6:4e:2a:
                    ed:d4:47:9a:ec:82:e0:f4:94:d6:1d:97:3b:87:49:
                    81:08:74:66:62:31:5a:f5:79:f0:c1:91:6b:27:53:
                    c7:f1:49:1c:0c:54:4b:47:93:6c:1b:18:db:04:1e:
                    58:e0:63:29:87:94:eb:9e:82:c4:32:af:fa:20:a7:
                    63:98:78:83:bf:1d:ae:11:1b:cb:50:0a:f9:bd:76:
                    93:0e:8c:1c:aa:b5:43:6d:48:37:ce:91:d3:2a:42:
                    da:e9:2a:05:c2:33:9a:dd:16:51:3e:42:f2:d4:19:
                    f7:8e:4d:bd:7c:9b:e6:8d:f3:d5:1d:59:7a:a5:13:
                    ab:28:92:68:f2:a5:e7:33:4d:5e:4f:4c:78:ff:13:
                    f5:7e:c7:6f:f6:b8:b2:51:92:4d:19:42:f0:61:6f:
                    7a:d6:db:ae:bf:f1:60:3b:82:c5:0a:ce:f7:ba:50:
                    ee:40:06:cf:4e:ff:5a:33:7a:0a:d7:96:b8:dc:32:
                    fa:71:ee:83:be:5a:6b:67:08:75:d3:21:b5:08:fa:
                    19:19:4b:f2:49:92:a1:9d:02:6e:d3:6f:0c:bd:58:
                    04:93:89:f3:43:1a:1b:39:b1:fc:fe:31:58:fe:22:
                    65:37:1e:a0:e1:8d:fe:4c:4b:b1:07:88:a9:05:f6:
                    93:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:0C:AB:D1:4C:FA:80:BF:A7:05:C8:9E:99:BA:CD:E5:02:A1:51:7E
            X509v3 Authority Key Identifier:
                keyid:CC:69:23:1C:1C:A1:5B:CE:00:EE:8D:45:D3:CC:FF:DE:45:2D:4B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zGkjHByhW84A7o1F08z_3kUtS5I.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9144436/6407E06665E911E8B527A323C4F9AE02/zGkjHByhW84A7o1F08z_3kUtS5I.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ab:5f:0a:5c:18:ce:43:14:52:8c:ac:17:db:d9:b9:78:92:65:
         00:49:dd:d2:3f:61:99:9c:2b:4a:dc:0d:5f:50:21:ac:10:5d:
         ef:58:ea:44:0f:f2:7d:fd:38:f0:92:2a:90:32:f9:be:b7:8f:
         28:b0:bc:d9:ed:11:6c:6b:79:6c:c5:b2:19:a8:81:3d:47:21:
         24:cb:e4:13:6f:7f:73:5f:e9:39:25:ce:08:f8:bd:c2:18:92:
         2e:63:73:0a:14:3b:b5:4a:6e:84:51:02:ca:72:b8:b8:c7:b0:
         67:dd:3a:27:cd:a6:29:8d:58:ae:5e:70:a4:da:66:1f:2e:3b:
         33:4c:81:90:83:82:bf:5c:1d:12:84:a1:f9:45:98:73:fb:36:
         71:0f:10:22:bb:5c:3a:26:86:a0:c9:78:5a:da:ab:4d:64:59:
         3f:d1:41:75:5b:1d:6d:a0:39:fb:a9:c1:1d:b9:d9:b7:13:bf:
         2f:f2:4c:ad:01:56:ee:09:83:04:ba:77:80:67:d8:c2:79:88:
         97:1a:b6:93:5c:89:aa:a5:1f:98:79:ae:cb:94:eb:6b:38:2e:
         cc:37:a1:24:91:25:bc:2c:c1:fd:67:75:1d:a7:77:41:92:51:
         3f:52:d4:d4:2a:52:8c:f5:c5:6f:b6:b1:87:92:1f:ae:6b:bd:
         e4:53:8f:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:34:20 2026 by rpki-client