Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
File:                     CViGFDhyEOi2mtPDGnNhnXVe0MA.mft (raw, json)
Hash identifier:          eNASewO5jSvLuLK4W6raiKKYcWuD5um2v9ESwgFSiK4=
Subject key identifier:   EB:FE:66:86:1D:AA:45:45:78:AD:97:79:93:9E:1B:8D:78:35:D2:B8
Authority key identifier: 09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0
Certificate issuer:       /CN=A914CB22/serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
Certificate serial:       01E4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
Manifest number:          01DE
Signing time:             Sat 13 Jun 2026 03:31:05 +0000
Manifest this update:     Sat 13 Jun 2026 03:31:04 +0000
Manifest next update:     Sat 20 Jun 2026 03:31:04 +0000
Files and hashes:         1: CViGFDhyEOi2mtPDGnNhnXVe0MA.crl (hash: PR0Z++fLk9KbeO5rdWXnIcFJk2f0ijGTQBvKfD+lpQQ=)
                          2: 2F996DC6C77311EEBD6F2D2BC4F9AE02.roa (hash: AWmRUUuHw7qvkIYfsKHsasjQBa7Xv/yb5/iOLvXpkFs=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl
                          rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:31:03 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 484 (0x1e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A914CB22, serialNumber=09588614387210E8B69AD3C31A73619D755ED0C0
        Validity
            Not Before: Jun 13 03:31:04 2026 GMT
            Not After : Jun 20 03:31:04 2026 GMT
        Subject: CN=6a2ccef8-6c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:24:c1:57:c4:df:53:f1:78:80:65:ce:6f:c5:
                    33:a4:a7:42:9f:0d:2b:24:05:7b:98:10:79:12:f9:
                    64:2c:2a:a6:38:2e:aa:84:9b:17:10:fa:6c:dc:79:
                    73:0e:d4:50:4a:ca:b1:ee:25:58:4c:af:96:3a:55:
                    60:95:15:ae:f2:26:72:70:cc:c8:9f:a9:df:2a:f3:
                    d6:28:ed:be:59:8d:89:8f:67:39:9f:20:4b:85:35:
                    63:40:6e:0b:2d:30:98:99:cf:e1:1d:ab:d3:04:c1:
                    46:03:3f:0d:01:5a:6e:ad:de:d1:28:94:7f:9b:79:
                    a3:7e:0c:cd:94:f2:e8:91:1e:f7:38:19:f2:b5:9d:
                    79:ef:a5:9e:7c:4a:7a:39:3b:7d:1b:2b:46:61:19:
                    59:bc:6d:09:24:ab:48:09:c7:b1:fc:78:05:5a:db:
                    d0:ec:e4:31:b4:66:95:3d:5b:7c:c9:83:43:d4:e9:
                    03:8d:5f:6d:18:bd:78:06:a0:19:3d:ef:a8:97:34:
                    a0:1b:43:e1:75:c2:e5:d3:02:13:41:c8:81:0e:f3:
                    66:e3:64:b4:be:0f:6c:10:5f:18:33:17:e6:7a:03:
                    7d:6f:d6:83:79:13:86:d0:78:69:59:aa:ff:cb:bc:
                    2b:43:9c:3a:3f:a6:99:0e:c1:27:a6:0f:4c:0d:34:
                    1d:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:FE:66:86:1D:AA:45:45:78:AD:97:79:93:9E:1B:8D:78:35:D2:B8
            X509v3 Authority Key Identifier:
                keyid:09:58:86:14:38:72:10:E8:B6:9A:D3:C3:1A:73:61:9D:75:5E:D0:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/CViGFDhyEOi2mtPDGnNhnXVe0MA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A914CB22/6602E9788CD111EEB61FC638C4F9AE02/CViGFDhyEOi2mtPDGnNhnXVe0MA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         81:67:00:27:16:c3:2c:cc:fd:44:2e:6b:b9:a4:92:73:54:11:
         e3:99:48:0e:01:28:1d:47:7c:a7:0b:d4:d9:5b:f4:93:17:41:
         1f:5c:74:db:92:80:9f:df:3b:df:bb:b5:be:88:58:09:43:78:
         9d:d9:6d:ba:41:03:5b:00:f1:6b:0a:37:6f:fb:66:2b:4f:73:
         c8:a4:65:5d:6b:27:f4:d5:aa:cc:75:aa:34:b8:d6:90:e0:44:
         ff:0a:72:d5:92:ad:a3:5d:43:7c:c7:f1:33:7a:81:46:5f:98:
         bd:a8:85:97:c6:fd:c5:e2:58:55:60:24:e5:ca:33:67:69:e3:
         0a:2e:00:97:18:11:af:7e:09:44:30:00:04:3a:00:22:f1:08:
         99:d6:39:d9:f2:f2:1b:44:fb:02:0e:f3:27:af:19:27:ff:a8:
         d7:a8:bc:0e:83:ac:c5:9a:da:56:4d:a5:76:5c:44:86:c5:73:
         2b:e9:e6:6e:fb:12:a1:46:49:50:71:a2:4b:10:5f:a3:3e:01:
         42:d6:c0:c2:eb:21:f5:11:4a:58:4f:ef:e8:8b:9d:33:93:fc:
         cb:05:b3:dc:58:3b:08:d7:53:c5:66:37:4a:e6:64:f9:0d:04:
         26:b5:b8:89:69:42:3b:02:36:a4:d9:b8:20:f8:e4:ee:5e:f4:
         2b:b7:36:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:27:38 2026 by rpki-client