Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
File:                     4_FvnXPM7iaTkVokT0S1U6TbPcw.mft (raw, json)
Hash identifier:          Fd8ARARRqraDYfG/Le5kB7lWsYcxN6F0MLPGy+ay/LM=
Subject key identifier:   C9:46:9B:AB:C4:64:8B:C2:40:54:71:11:A2:F0:B0:06:18:AE:82:C8
Authority key identifier: E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC
Certificate issuer:       /CN=A9145B13/serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
Certificate serial:       0123
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
Manifest number:          011F
Signing time:             Sat 13 Jun 2026 05:47:45 +0000
Manifest this update:     Sat 13 Jun 2026 05:47:45 +0000
Manifest next update:     Sat 20 Jun 2026 05:47:45 +0000
Files and hashes:         1: 4_FvnXPM7iaTkVokT0S1U6TbPcw.crl (hash: 1tryQZvkGXZ3okQuZBXng4cMAV/4wSjyceFQRU+xEHg=)
                          2: 05E4CBECB12911EF993BC12DC4F9AE02.roa (hash: UgNLpnpsPwAz2rvVqCqPMBi0JxC9elqJ20s+71NKi0w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl
                          rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:47:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 291 (0x123)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9145B13, serialNumber=E3F16F9D73CCEE2693915A244F44B553A4DB3DCC
        Validity
            Not Before: Jun 13 05:47:45 2026 GMT
            Not After : Jun 20 05:47:45 2026 GMT
        Subject: CN=6a2cef01-8e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ba:60:96:ec:3d:69:d3:d5:a1:e3:22:3e:3c:
                    65:32:b0:9f:03:b1:b0:87:37:13:3b:b9:5b:6b:86:
                    e8:88:f1:71:c2:db:e5:f9:3b:68:e4:b8:3f:92:07:
                    a1:7f:58:1b:83:7f:80:1b:c1:ef:2b:b0:58:a3:12:
                    0f:d1:42:30:f3:09:37:0f:68:32:f7:d9:d0:74:91:
                    46:46:5e:db:42:7d:f5:cb:8e:43:36:a9:96:e7:c1:
                    70:33:98:27:e4:77:1e:a6:4a:e1:aa:4a:e3:1d:e0:
                    a2:57:f6:c8:8e:06:8c:ad:4c:29:ee:4a:5a:85:b7:
                    28:71:fc:5f:4f:4b:fe:ea:e4:e2:6a:9f:30:d4:10:
                    8e:46:c0:f0:f9:92:76:be:bb:0e:c9:28:94:78:65:
                    13:d8:e2:6d:63:3a:82:56:3c:6e:d1:0c:05:6c:98:
                    0e:cb:6b:4f:4e:1c:d1:f8:50:9c:8a:bc:c6:36:8a:
                    83:5d:cc:23:34:85:96:63:b5:de:4a:19:07:48:3b:
                    db:06:86:fb:b4:56:c7:0e:e7:b9:4a:15:a1:a0:1e:
                    df:77:56:bc:7c:12:97:38:a6:22:6d:e8:da:58:6a:
                    87:b6:9f:41:3b:04:e6:c5:39:07:01:ef:0e:43:49:
                    23:30:90:54:6f:98:71:9a:e1:ba:12:5b:a6:e4:37:
                    93:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:46:9B:AB:C4:64:8B:C2:40:54:71:11:A2:F0:B0:06:18:AE:82:C8
            X509v3 Authority Key Identifier:
                keyid:E3:F1:6F:9D:73:CC:EE:26:93:91:5A:24:4F:44:B5:53:A4:DB:3D:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/4_FvnXPM7iaTkVokT0S1U6TbPcw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9145B13/4637FBF2B12811EFB750A52BC4F9AE02/4_FvnXPM7iaTkVokT0S1U6TbPcw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         39:64:59:bd:19:0f:f6:1c:64:c9:07:0c:e4:00:19:0d:a3:a4:
         da:10:50:9d:42:d0:5a:6f:ff:55:85:8a:47:bd:e6:1c:1a:5c:
         8f:a8:2b:bd:01:b5:94:75:e0:9c:9f:a6:7e:8d:2b:d7:3b:4c:
         71:c2:75:29:c1:7d:6d:20:28:17:c2:a9:a5:3d:f9:de:a4:2f:
         e5:4a:45:ed:3b:08:32:4e:5b:cb:98:61:5e:14:fb:d8:c8:da:
         1a:1c:60:21:77:20:1b:b6:ae:5f:b0:b1:6b:9a:53:40:91:06:
         df:1a:8a:18:c8:eb:61:b5:26:75:66:45:3e:02:f4:6a:45:b9:
         2c:11:44:ca:fd:ed:00:d0:6d:0b:4b:6b:76:b7:26:ee:9d:cf:
         3c:cc:e0:a7:8b:8d:df:70:e9:82:d9:62:61:99:bb:dc:b2:09:
         7f:d9:5a:8a:43:a3:20:d3:5c:66:3f:9c:5d:ee:1a:90:bc:1c:
         38:5f:46:30:00:48:06:c9:06:98:e0:62:15:ea:69:ad:c0:14:
         c4:af:45:e8:4e:20:24:01:1e:b5:98:7a:9e:73:f2:2c:bc:1e:
         1c:bf:24:63:29:c6:7a:37:70:9f:82:06:b7:ec:53:13:0a:dc:
         12:99:a9:4e:63:83:23:25:e0:45:ff:80:4d:da:71:93:0d:9a:
         bf:05:98:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:32:13 2026 by rpki-client