Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
File:                     zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft (raw, json)
Hash identifier:          AhgPZHSgFTaIrY/XWo7HEraB1Qyaqr4+VOZZWNVizSk=
Subject key identifier:   A3:AD:77:1C:8B:B8:0D:D9:88:2E:5D:12:80:8B:4D:A0:72:17:F5:C3
Authority key identifier: CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48
Certificate issuer:       /CN=A91565C6/serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
Certificate serial:       0101
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
Manifest number:          F9
Signing time:             Sat 13 Jun 2026 06:24:56 +0000
Manifest this update:     Sat 13 Jun 2026 06:24:55 +0000
Manifest next update:     Sat 20 Jun 2026 06:24:55 +0000
Files and hashes:         1: zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl (hash: hjz8X1RXDPYNpPKvF0s42MHwOkXjT1okJSFPHsTWlOo=)
                          2: 37783B4E20CC11F18B0BA4B30A3D8C67.roa (hash: U3KVjwUBLUlPVHRa+0vAy5Ai0f/M4Fs7JbPDlUfLDwE=)
                          3: 7B2FAA3C209711F196D22F2D3A3D8C67.roa (hash: 46jInQJtabZ7v+bShiZhomvrokC8+lMJ4HP9JqEdr94=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl
                          rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:24:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 257 (0x101)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91565C6, serialNumber=CD535C7EB31A40A3FDB8AC4D5D577AF9D6C58848
        Validity
            Not Before: Jun 13 06:24:55 2026 GMT
            Not After : Jun 20 06:24:55 2026 GMT
        Subject: CN=6a2cf7b8-404d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:49:c2:06:d3:7d:25:d1:2e:09:19:a0:5f:da:
                    f1:7d:39:ec:c1:8f:fb:76:26:6d:98:42:82:f3:49:
                    1f:0c:ae:00:bb:5a:4f:20:c5:10:31:28:c0:4e:71:
                    cb:8d:e7:ae:4a:f5:01:6d:4f:54:fc:3e:0e:f7:2d:
                    c2:f3:01:42:5b:ef:77:e0:62:6d:fd:be:22:8d:f9:
                    85:d1:6e:e2:0b:33:55:e0:1d:e8:f4:b9:29:38:f7:
                    46:15:27:bb:24:e8:83:24:ee:74:2c:58:20:e0:48:
                    35:dd:91:f1:fb:0a:de:62:87:a8:2b:6a:10:2a:ef:
                    74:f9:1a:ff:5a:ba:1f:2b:31:80:68:24:e5:a8:69:
                    5b:f1:8b:f4:1a:71:da:02:dd:22:5f:da:89:b0:cb:
                    e1:fb:c1:1c:52:01:8e:ae:ff:26:a0:ab:4d:ae:8c:
                    23:b7:07:f2:95:fd:fa:ee:9f:14:15:ef:6f:e9:ee:
                    15:2c:fb:e2:f9:97:8b:f8:71:be:6e:0e:27:af:27:
                    59:33:3c:1b:85:6e:a4:03:c6:94:ad:87:e2:5d:bb:
                    62:ca:91:ea:26:51:9d:77:18:df:6e:21:8b:90:bf:
                    f8:de:aa:47:1f:ab:f4:02:e7:84:13:52:46:29:bf:
                    c0:d8:48:db:d2:20:1e:e9:f1:ad:aa:5d:da:72:3c:
                    61:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:AD:77:1C:8B:B8:0D:D9:88:2E:5D:12:80:8B:4D:A0:72:17:F5:C3
            X509v3 Authority Key Identifier:
                keyid:CD:53:5C:7E:B3:1A:40:A3:FD:B8:AC:4D:5D:57:7A:F9:D6:C5:88:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/zVNcfrMaQKP9uKxNXVd6-dbFiEg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91565C6/D265B0C6F41F11EF81708868C4F9AE02/zVNcfrMaQKP9uKxNXVd6-dbFiEg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         89:15:87:5a:2a:22:a8:ec:ec:52:19:34:9a:d3:31:88:a0:23:
         d4:ab:9e:c3:bb:fb:07:db:3d:eb:05:ad:2a:ab:4a:12:2c:cf:
         dc:53:74:c6:1f:6f:7a:78:4e:f8:6d:a1:85:22:e9:5d:a8:3f:
         4c:78:de:ed:10:fa:84:20:2a:31:58:46:e1:7b:c0:e4:c3:d5:
         00:b4:be:b7:73:d7:7f:c3:b0:ce:d9:dc:2f:69:96:a7:ba:9e:
         5b:7f:41:31:d1:ee:ac:f1:d9:89:87:7d:bd:fa:cc:a2:1f:c8:
         54:20:0a:e8:49:88:5e:69:3d:f8:47:69:63:07:80:e3:c5:f5:
         37:60:4d:75:08:c9:2a:51:6d:1e:01:ef:27:6b:ab:bd:d3:50:
         ec:65:f8:f6:6e:30:55:2c:f2:8f:ba:08:9a:62:a3:3d:3e:ac:
         eb:e0:d1:62:00:7c:4c:4f:0f:7f:68:86:9e:7b:45:29:11:d4:
         e2:e7:7b:c0:6d:1b:d3:b0:a5:fe:4f:e0:54:04:22:d0:00:8c:
         90:88:e9:13:21:06:fa:ee:0e:7f:15:b5:8e:76:a4:f2:a3:ff:
         4f:f3:cc:3c:fa:de:2b:cb:7c:29:eb:00:ed:66:72:95:69:b7:
         9a:5a:80:99:8b:3d:ee:05:91:c6:35:65:a3:02:5d:ef:ef:fe:
         aa:53:de:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:48:20 2026 by rpki-client