Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
File:                     2iwTK47FBxr425BJG63bwPCntEU.mft (raw, json)
Hash identifier:          ro9MFuDYnlXiTI8eFbuSgipQMwg2Q9T9XqRzkCflZ5o=
Subject key identifier:   97:EF:E1:DF:B6:5E:B4:06:A7:8E:86:F6:BD:78:F4:9B:49:33:41:33
Authority key identifier: DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45
Certificate issuer:       /CN=A91534B8/serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
Certificate serial:       034C
Authority info access:    rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
Manifest number:          034C
Signing time:             Sat 13 Jun 2026 01:00:52 +0000
Manifest this update:     Sat 13 Jun 2026 01:00:52 +0000
Manifest next update:     Sat 20 Jun 2026 01:00:52 +0000
Files and hashes:         1: 2iwTK47FBxr425BJG63bwPCntEU.crl (hash: BvZ2p8oICiI5vRspOXn2pIyFpdCpFL6YITra/6/Ke/w=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl
                          rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 01:00:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 844 (0x34c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91534B8, serialNumber=DA2C132B8EC5071AF8DB90491BADDBC0F0A7B445
        Validity
            Not Before: Jun 13 01:00:52 2026 GMT
            Not After : Jun 20 01:00:52 2026 GMT
        Subject: CN=6a2cabc4-4cbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:2d:d6:6f:93:c7:50:c4:9f:2d:1d:9b:27:23:
                    37:21:5d:e9:47:99:83:8a:44:74:ee:5e:c6:29:17:
                    41:a2:c6:49:bd:68:27:64:f4:83:ff:6a:9e:03:4e:
                    73:bb:20:70:60:50:27:43:86:d7:3b:63:b3:9e:f7:
                    f3:40:d7:c0:d3:15:db:df:22:fc:3a:29:b8:62:d2:
                    5e:f4:e3:dc:16:77:e3:49:65:b0:df:fd:3c:38:66:
                    76:b7:ff:f5:3b:2b:9b:39:cd:c0:04:84:3b:87:1e:
                    ee:87:03:56:c8:5d:98:2a:49:13:4a:dd:d4:3f:dc:
                    4a:e1:5f:d4:f9:27:e8:23:7b:33:b2:65:6d:01:c7:
                    c0:39:a8:48:80:12:89:0c:3a:e4:12:ce:95:b6:12:
                    17:e7:69:7a:0e:b2:78:9f:8c:24:ab:73:c8:3c:30:
                    49:4d:db:31:8f:f8:2a:71:f7:ec:76:36:bc:87:93:
                    3d:9f:c5:04:39:22:3f:11:46:30:99:71:84:38:4b:
                    87:5c:21:ce:30:9d:6c:6d:fd:8c:63:1c:51:d9:72:
                    81:c9:ae:82:33:b2:0e:9e:6b:36:99:ff:9d:a9:91:
                    de:d2:d8:ba:ea:d5:e9:4e:10:c5:43:0e:46:02:b6:
                    43:a9:de:a4:ad:a6:57:3b:60:d8:0b:ae:e8:a2:43:
                    81:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EF:E1:DF:B6:5E:B4:06:A7:8E:86:F6:BD:78:F4:9B:49:33:41:33
            X509v3 Authority Key Identifier:
                keyid:DA:2C:13:2B:8E:C5:07:1A:F8:DB:90:49:1B:AD:DB:C0:F0:A7:B4:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/2iwTK47FBxr425BJG63bwPCntEU.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91534B8/9665997E094411ED8DD10971C4F9AE02/2iwTK47FBxr425BJG63bwPCntEU.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:7e:a4:ff:1d:a0:ac:18:9d:dd:51:11:eb:96:1c:82:37:2d:
         c9:88:23:a3:f3:62:f8:19:27:75:e6:b7:a3:68:cb:ca:b6:38:
         5a:a7:58:3d:5c:5c:83:bf:b8:55:8b:17:00:ed:f0:95:52:ed:
         cd:12:dd:40:83:64:6e:2e:52:14:80:ed:23:74:88:b4:50:8e:
         80:bc:e5:83:07:de:a3:d9:38:a0:cc:14:79:b5:8e:6d:55:85:
         18:cc:75:39:41:53:dd:c5:ac:56:bf:d3:8e:4e:ed:5f:ba:55:
         a1:48:4c:c3:46:30:0a:0e:b4:27:f5:b1:c0:de:cf:be:0c:c0:
         37:08:68:22:98:d5:45:38:f3:f7:fd:e0:f3:f0:7c:9a:c5:ee:
         45:29:b7:56:fe:11:dd:8e:dc:18:04:01:33:2b:69:b6:cf:29:
         9a:69:4a:2f:23:ae:16:a1:ef:9f:c5:1d:d9:93:11:3e:04:02:
         76:42:81:4a:63:85:8e:5b:98:9a:ec:75:58:01:f6:c1:de:4b:
         e6:7a:c0:30:4c:81:c4:a9:a4:8a:0e:7f:49:c0:aa:22:9c:98:
         f3:a3:19:b5:e8:92:66:ba:59:1e:a2:dc:97:44:90:b2:95:6f:
         1c:a1:d0:a6:96:33:7a:33:96:b8:37:01:37:4a:7c:16:39:02:
         c3:e4:4f:93
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICA0wwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NTM0QjgxMTAvBgNVBAUTKERBMkMxMzJCOEVDNTA3MUFGOERCOTA0OTFCQUREQkMw
RjBBN0I0NDUwHhcNMjYwNjEzMDEwMDUyWhcNMjYwNjIwMDEwMDUyWjAYMRYwFAYD
VQQDEw02YTJjYWJjNC00Y2JiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA+C3Wb5PHUMSfLR2bJyM3IV3pR5mDikR07l7GKRdBosZJvWgnZPSD/2qeA05z
uyBwYFAnQ4bXO2OznvfzQNfA0xXb3yL8Oim4YtJe9OPcFnfjSWWw3/08OGZ2t//1
OyubOc3ABIQ7hx7uhwNWyF2YKkkTSt3UP9xK4V/U+SfoI3szsmVtAcfAOahIgBKJ
DDrkEs6VthIX52l6DrJ4n4wkq3PIPDBJTdsxj/gqcffsdja8h5M9n8UEOSI/EUYw
mXGEOEuHXCHOMJ1sbf2MYxxR2XKBya6CM7IOnms2mf+dqZHe0ti66tXpThDFQw5G
ArZDqd6kraZXO2DYC67ookOBlwIDAQABo4ICczCCAm8wHQYDVR0OBBYEFJfv4d+2
XrQGp46G9r149JtJM0EzMB8GA1UdIwQYMBaAFNosEyuOxQca+NuQSRut28Dwp7RF
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1MzRCOC85NjY1OTk3RTA5
NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8yaXdUSzQ3RkJ4cjQyNUJKRzYzYndQQ250
RVUuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzMjJBNUY0MUQ2NjExRTJBM0YyN0Y3Qzcy
RkQxRkYyLzJpd1RLNDdGQnhyNDI1QkpHNjNid1BDbnRFVS5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE1
MzRCOC85NjY1OTk3RTA5NDQxMUVEOEREMTA5NzFDNEY5QUUwMi8yaXdUSzQ3RkJ4
cjQyNUJKRzYzYndQQ250RVUubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEArX6k/x2grBid3VER65YcgjctyYgjo/Ni+Bkndea3o2jLyrY4WqdYPVxcg7+4
VYsXAO3wlVLtzRLdQINkbi5SFIDtI3SItFCOgLzlgwfeo9k4oMwUebWObVWFGMx1
OUFT3cWsVr/Tjk7tX7pVoUhMw0YwCg60J/WxwN7PvgzANwhoIpjVRTjz9/3g8/B8
msXuRSm3Vv4R3Y7cGAQBMytpts8pmmlKLyOuFqHvn8Ud2ZMRPgQCdkKBSmOFjluY
mux1WAH2wd5L5nrAMEyBxKmkig5/ScCqIpyY86MZteiSZrpZHqLcl0SQspVvHKHQ
ppYzejOWuDcBN0p8FjkCw+RPkw==
-----END CERTIFICATE-----
Generated at Sat Jun 13 17:32:09 2026 by rpki-client