Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
File:                     AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft (raw, json)
Hash identifier:          7N38hwqGpNntGJhseSNI+a9sM3QcKID3Da0ZXSDtCb4=
Subject key identifier:   A9:7F:F7:39:20:4E:BC:0F:32:B5:1F:C5:47:0E:9F:F1:35:A3:58:FC
Authority key identifier: 00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F
Certificate issuer:       /CN=A9149C05/serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
Certificate serial:       33
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
Manifest number:          31
Signing time:             Sat 13 Jun 2026 08:43:38 +0000
Manifest this update:     Sat 13 Jun 2026 08:43:38 +0000
Manifest next update:     Sat 20 Jun 2026 08:43:38 +0000
Files and hashes:         1: AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl (hash: ymaSpW6bdp0OBopFZL07R+XsgVtfWg/FvNTRNT+Iad4=)
                          2: FF170F921D0011F1B83A0561033D8C67.roa (hash: 1OUUiGdj/skLatl9uGAc/oJMbEOkngJElWBud8R7SdY=)
                          3: FE51AA4A1D0011F1B83A0561033D8C67.roa (hash: nX9JuDxfEd7grZ7RzFCPrS8jl7ib0YWyM+WZLBvfFBg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl
                          rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:43:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9149C05, serialNumber=008D4F9F5868EC22A7A91ECAADCD7E0D3B31117F
        Validity
            Not Before: Jun 13 08:43:38 2026 GMT
            Not After : Jun 20 08:43:38 2026 GMT
        Subject: CN=6a2d183a-5aad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:05:07:7e:0b:1a:dc:06:ee:c4:a3:7c:7a:96:
                    52:17:59:0c:f2:5a:25:49:c2:b9:bb:a3:7b:56:67:
                    94:68:67:42:85:a0:d4:3d:25:d3:79:75:6f:cd:9f:
                    3e:39:d0:cb:42:49:e1:b7:20:4f:d6:1f:69:51:d9:
                    11:cc:a5:8a:92:b4:52:58:ba:28:f9:cc:02:1f:f7:
                    c2:6a:d0:47:b2:c9:10:9e:eb:30:eb:32:89:59:68:
                    33:f3:75:c5:22:73:fe:8a:38:c9:28:ce:c6:af:9e:
                    cd:d5:87:ce:ec:97:d2:7c:f4:bc:14:b9:7e:c6:89:
                    26:0e:bd:a5:58:f0:9f:ce:bf:10:f4:de:d7:df:86:
                    27:f8:60:e0:63:48:ea:01:bd:33:8a:1b:76:83:19:
                    0d:c8:0f:93:bb:77:97:b1:f4:0f:ca:2a:59:eb:e7:
                    b0:a1:18:22:1f:53:6b:29:5f:d2:15:a1:21:3c:6c:
                    8d:6c:f0:1f:8c:a1:54:86:63:54:4c:81:45:aa:d5:
                    12:5f:41:c1:6d:08:2e:f3:15:48:8d:28:94:dc:cb:
                    5a:d7:27:38:63:87:ce:65:20:10:64:a2:5e:db:4f:
                    2e:f3:67:c7:b3:24:26:1f:43:32:04:d6:28:48:8f:
                    85:bd:07:fe:d2:8c:46:50:af:f1:8a:81:bb:8c:e3:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7F:F7:39:20:4E:BC:0F:32:B5:1F:C5:47:0E:9F:F1:35:A3:58:FC
            X509v3 Authority Key Identifier:
                keyid:00:8D:4F:9F:58:68:EC:22:A7:A9:1E:CA:AD:CD:7E:0D:3B:31:11:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9149C05/77BAC4301D0011F1A1210B1E033D8C67/AI1Pn1ho7CKnqR7Krc1-DTsxEX8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         8c:5d:cc:b7:b6:5b:f8:f5:d6:81:89:ee:5d:d6:02:f8:5e:a3:
         12:1b:b5:c4:a1:4a:f8:34:a2:78:93:cb:24:7f:b7:95:62:74:
         ec:b5:57:a3:9b:69:a6:db:6f:0a:60:9e:e8:b9:10:57:d9:07:
         52:cd:99:c2:05:93:19:21:a4:ef:5a:ca:d2:a5:02:e7:0f:26:
         12:a9:d4:6a:7c:35:fc:ec:59:65:5d:ae:b4:29:80:34:d7:38:
         ff:04:87:a1:ac:57:26:8b:81:36:0b:b0:61:6e:b7:77:92:89:
         6c:c2:64:f0:45:0b:3c:b9:33:52:63:1b:a3:75:44:2e:84:69:
         21:f2:ec:42:91:1b:c0:0a:d6:e2:f8:a4:cb:f0:2d:28:ed:c5:
         68:53:47:36:36:d7:5f:38:b3:db:c4:01:7b:f9:b0:3a:01:d0:
         cb:ed:7f:ad:10:03:29:68:5d:2c:3e:ef:c7:8c:b4:cc:fd:61:
         0f:2d:51:ae:74:c3:19:9f:fc:87:b1:f5:95:60:84:46:4f:9a:
         b3:c3:d7:fb:2c:9c:70:4f:e6:0b:5e:1d:00:1d:e5:0c:8b:32:
         df:7b:be:be:b4:66:c0:04:55:3c:e8:d8:bc:27:fb:bb:7c:2c:
         5b:85:b6:3d:9f:40:99:d4:8c:e0:8b:c8:2f:0a:04:46:26:dc:
         fa:e2:a3:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 23:22:34 2026 by rpki-client