Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
File:                     r1VYG6En4gkKClRi_nvOcGFvLNw.mft (raw, json)
Hash identifier:          quu74bO8KcPDPPbgZ1qqQNqas/sP07k3qNo0we7ntCo=
Subject key identifier:   30:D7:A0:B2:EA:73:26:B3:81:97:A3:0F:88:F7:6B:C1:2B:91:A2:64
Authority key identifier: AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC
Certificate issuer:       /CN=A914B758/serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
Certificate serial:       03DD
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
Manifest number:          03D1
Signing time:             Sat 13 Jun 2026 00:37:19 +0000
Manifest this update:     Sat 13 Jun 2026 00:37:18 +0000
Manifest next update:     Sat 20 Jun 2026 00:37:18 +0000
Files and hashes:         1: r1VYG6En4gkKClRi_nvOcGFvLNw.crl (hash: 9IVEpMyHmwMKYx4UalMhuV4ErTQ93zfzMa5ypoEQVFU=)
                          2: 1B22E756D37711EC9A8FF526C4F9AE02.roa (hash: OFMvnZfCLjiSwnf1cPBu30hzFhRBACJBgYSyDP0KQYg=)
                          3: 1CA2FA08D37711EC9A8FF526C4F9AE02.roa (hash: iFAiKmbeS48rOELgvs1ZiWGavpi+F11E+IY53nPuF8E=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl
                          rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:37:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 989 (0x3dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914B758, serialNumber=AF55581BA127E2090A0A5462FE7BCE70616F2CDC
        Validity
            Not Before: Jun 13 00:37:18 2026 GMT
            Not After : Jun 20 00:37:18 2026 GMT
        Subject: CN=6a2ca63f-ca50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:0a:b8:52:82:7d:09:b6:3a:a3:fe:54:6e:22:
                    2b:4c:cd:9a:e9:39:eb:51:32:50:97:00:1f:6b:b7:
                    4d:81:ed:d4:17:29:ee:ee:1d:df:c1:e2:e0:7c:3b:
                    db:29:00:68:6e:8f:ee:1b:a2:a9:d0:c3:cd:c9:a2:
                    d4:92:e2:8f:db:8f:0c:1c:b4:47:9d:9b:81:03:a3:
                    4b:9e:ea:26:f8:0f:64:f6:ad:50:ff:18:06:b8:bd:
                    37:f0:d9:b8:2e:94:b2:a9:02:ed:80:cc:e8:8e:ad:
                    60:7f:d7:25:44:ce:43:76:d5:11:a6:c4:15:98:08:
                    82:1e:9a:ec:11:10:3d:69:8b:df:66:d1:c4:ee:79:
                    75:90:53:35:70:cb:96:34:02:38:46:53:f4:29:a7:
                    5e:95:1a:e8:b6:a6:62:80:18:9f:ab:80:22:fa:06:
                    dc:5c:93:5d:3e:fc:29:cc:c3:8b:f3:3d:af:0a:a9:
                    c5:7b:c7:c3:c0:0a:15:04:64:da:86:83:c9:d1:b3:
                    81:37:52:23:a5:b5:f6:be:c7:5c:a6:ff:30:fa:19:
                    de:55:97:6e:f6:28:58:bf:fd:88:16:9c:bd:e5:c1:
                    33:28:a6:2f:fc:9e:02:c4:1f:6c:12:bb:76:00:e8:
                    30:8d:4f:b8:c0:f9:b7:53:09:3e:37:48:f0:d6:f7:
                    07:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:D7:A0:B2:EA:73:26:B3:81:97:A3:0F:88:F7:6B:C1:2B:91:A2:64
            X509v3 Authority Key Identifier:
                keyid:AF:55:58:1B:A1:27:E2:09:0A:0A:54:62:FE:7B:CE:70:61:6F:2C:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/r1VYG6En4gkKClRi_nvOcGFvLNw.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914B758/4C7A2868D36E11ECB2614453C4F9AE02/r1VYG6En4gkKClRi_nvOcGFvLNw.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2c:5b:45:a8:22:36:aa:ed:ba:e7:29:81:36:59:ed:20:62:89:
         f8:da:2e:09:4b:2e:e4:54:b1:8d:47:b4:3e:31:29:24:39:0b:
         1a:6b:92:6d:39:eb:44:48:94:a5:1f:cc:38:f0:7d:3a:63:0f:
         f9:10:14:3b:cf:48:bc:ce:54:19:ed:62:a4:10:dc:ba:ff:1e:
         70:8a:f1:eb:e0:21:b0:80:61:75:25:ef:37:e3:b6:9a:2e:f8:
         58:f8:9d:52:78:d8:b0:16:1e:75:87:cc:f4:f2:df:b0:02:f0:
         8a:2f:cc:7a:c5:6a:dd:d6:99:2d:fc:54:e5:42:83:88:d3:ec:
         fc:b5:93:2c:f2:50:18:a3:4f:71:df:fc:d5:20:3e:fe:db:83:
         5c:1c:c1:c3:09:d2:c0:b2:81:a2:3b:62:f7:89:d9:c5:1e:61:
         fe:cc:79:14:eb:cf:37:3e:97:b1:2d:db:6e:77:8c:b9:e3:a8:
         f3:9d:8e:15:1e:49:b0:f3:b2:08:7d:6d:c9:51:92:b2:32:be:
         1e:19:75:2b:16:fb:83:5f:47:cb:58:eb:bf:96:89:5c:ef:30:
         d6:57:9b:7a:37:b0:59:56:d6:40:c4:68:26:d4:f4:04:b6:60:
         35:4b:e6:10:d7:72:57:54:4a:29:8c:e6:d1:f5:b8:fb:a4:91:
         db:89:71:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:45:53 2026 by rpki-client