Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
File:                     pXN62XE221PCG287HU13Hc1XMTo.mft (raw, json)
Hash identifier:          9x+qi9Z9wO7bxu0K/rndfO8Y9fn2e09Qfk7zWA04IQ8=
Subject key identifier:   F1:C3:71:89:B2:6F:AC:42:D2:D3:B7:FF:FC:CD:7D:09:7A:5D:CD:58
Authority key identifier: A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A
Certificate issuer:       /CN=A9146F33/serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
Certificate serial:       04AC
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
Manifest number:          04A1
Signing time:             Sat 13 Jun 2026 00:01:15 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:14 +0000
Manifest next update:     Sat 20 Jun 2026 00:01:14 +0000
Files and hashes:         1: pXN62XE221PCG287HU13Hc1XMTo.crl (hash: 42NgSV+SF2dirm9esIQCEXUXPKBwOLMDuwjaP4ETusM=)
                          2: EE23EF6E857B11ECA3F32D50C4F9AE02.roa (hash: 2Drp2NUST+4Mxc9fvB99so6MZjFruiAkCYPMwsvvfnY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl
                          rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:01:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1196 (0x4ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9146F33, serialNumber=A5737AD97136DB53C21B6F3B1D4D771DCD57313A
        Validity
            Not Before: Jun 13 00:01:14 2026 GMT
            Not After : Jun 20 00:01:14 2026 GMT
        Subject: CN=6a2c9dcb-29b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:4e:db:f5:7d:da:b3:61:4e:d9:05:d0:05:
                    17:d1:68:1e:7a:98:e8:ad:6e:da:4e:60:c2:4b:11:
                    b8:6b:ae:28:0b:6d:ef:df:55:0d:ee:d0:7b:12:94:
                    4c:8a:d6:3e:88:94:04:73:7a:50:37:55:23:21:5d:
                    b4:28:6b:6f:a4:13:2a:0e:f3:7d:57:b0:3e:f6:bf:
                    ce:44:c4:21:10:49:62:35:56:89:1d:a2:81:11:27:
                    5b:a4:c5:ee:66:78:22:92:1d:7c:f6:09:61:2a:2f:
                    b0:04:b7:ca:2b:ad:f6:e1:93:ad:35:0a:6d:a6:e1:
                    37:f1:df:53:11:3b:78:9d:a1:6c:72:55:b3:fa:dc:
                    ef:79:f0:5c:41:b2:29:87:f3:11:d6:a0:11:14:a4:
                    b7:7b:9f:2c:90:d2:11:e7:0c:f8:28:ea:87:d1:98:
                    e4:e4:ec:26:e0:4b:c6:dc:63:3f:b3:1b:32:db:07:
                    d0:5c:97:0d:66:7b:d4:22:12:8f:d7:3e:74:52:78:
                    bc:8f:46:20:98:1a:67:18:cb:27:d5:02:26:bb:fd:
                    b5:73:9f:32:ab:bf:d7:df:94:0e:1e:a8:68:bb:4d:
                    e5:07:c2:4f:6d:0a:20:0c:4a:54:de:0e:b9:32:36:
                    3d:c3:13:d8:58:a8:ff:be:00:29:b1:94:41:5f:72:
                    9d:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C3:71:89:B2:6F:AC:42:D2:D3:B7:FF:FC:CD:7D:09:7A:5D:CD:58
            X509v3 Authority Key Identifier:
                keyid:A5:73:7A:D9:71:36:DB:53:C2:1B:6F:3B:1D:4D:77:1D:CD:57:31:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pXN62XE221PCG287HU13Hc1XMTo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9146F33/B165BB8A851111ECB9D3357CC4F9AE02/pXN62XE221PCG287HU13Hc1XMTo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         90:e4:f7:60:15:47:90:2b:37:bf:8f:d4:87:69:da:be:63:02:
         64:17:b5:a8:04:da:2d:37:fb:4d:9e:85:ec:5c:a1:e6:0a:17:
         3e:57:89:f1:c8:c6:40:1a:d8:0c:b4:15:d9:a9:01:a6:ed:84:
         5a:57:29:f3:6c:4e:26:5a:af:5a:3f:45:ab:c1:1f:88:12:4c:
         1c:32:18:e5:11:46:ff:b4:fa:de:ca:5e:cd:1d:63:06:d4:45:
         00:cb:c5:c1:20:b8:f9:2a:88:26:eb:4b:b4:81:7a:15:3a:3e:
         98:6b:24:fd:5e:7c:68:bb:6d:dc:06:da:f8:39:a7:cf:67:31:
         29:21:2b:33:16:82:69:fa:8a:b3:9f:c0:41:09:aa:cd:39:69:
         c8:99:e0:68:8c:1d:2d:41:0f:6b:d9:2b:18:f9:c9:aa:a3:c5:
         8b:ac:d8:75:ab:8f:d5:89:bc:32:69:88:91:69:32:3c:48:0f:
         f4:0a:4c:3e:f3:6b:2a:e5:bb:4f:1d:10:85:eb:7c:5f:14:79:
         da:ed:fa:57:82:fc:ab:3e:62:f3:b5:7a:d1:09:35:f4:9c:7a:
         5b:c4:6a:61:9c:c7:f9:26:9d:90:f1:6d:f0:34:05:e0:93:8f:
         1f:19:83:f7:36:5a:a7:ab:db:4a:78:6a:c2:ba:44:bf:59:c6:
         b0:d0:ac:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 11:04:19 2026 by rpki-client