Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
File:                     83g6eIBQ7px-F4lbU93tZGqSTEA.mft (raw, json)
Hash identifier:          5aYYUxL4sZfHkF8X5/Lg8I9HjGyIMOK3JGJNtp08kqk=
Subject key identifier:   1C:DA:10:E3:E4:27:FD:F7:F2:B3:A5:17:B4:BF:E1:38:6A:C0:C6:E1
Authority key identifier: F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40
Certificate issuer:       /CN=A9158019/serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
Certificate serial:       31
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
Manifest number:          30
Signing time:             Sat 13 Jun 2026 08:44:55 +0000
Manifest this update:     Sat 13 Jun 2026 08:44:55 +0000
Manifest next update:     Sat 20 Jun 2026 08:44:55 +0000
Files and hashes:         1: 83g6eIBQ7px-F4lbU93tZGqSTEA.crl (hash: 1hcUPibFFaOFcHEJ+5zoibFLaoGMIVp5i/N8J0dtf9E=)
                          2: 100C3F1E212211F18A5869CB2A3D8C67.roa (hash: IMdiCehXyYtBy9e96FQHmcfQXtXWDXRFaUL7xCwpfWk=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl
                          rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:44:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9158019, serialNumber=F3783A788050EE9C7E17895B53DDED646A924C40
        Validity
            Not Before: Jun 13 08:44:55 2026 GMT
            Not After : Jun 20 08:44:55 2026 GMT
        Subject: CN=6a2d1887-ff1d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ba:3e:7e:a7:77:d9:04:35:f6:58:f8:bf:50:
                    96:2d:77:54:26:6a:74:40:df:bc:8d:6a:79:3f:ba:
                    2c:5c:3c:51:d9:9a:15:d2:f9:6d:7b:9c:76:3b:20:
                    ea:db:30:6a:e7:a9:33:07:6d:ff:f1:81:d5:80:ad:
                    80:8a:06:c4:0a:98:85:d3:36:f8:ed:63:e3:8a:11:
                    a3:85:e4:5a:67:05:9e:f3:30:54:5e:a4:88:35:42:
                    1a:bb:b5:83:b1:7f:a4:58:6e:f8:61:61:66:d1:da:
                    4a:93:06:56:58:b8:3c:22:54:89:7f:84:3f:eb:3c:
                    b5:a0:fe:cd:12:38:fd:87:c6:01:9d:e0:50:b2:04:
                    e3:41:6b:8b:a3:e8:b0:44:59:3b:93:24:fc:4c:d0:
                    3d:44:4f:89:54:45:9e:2f:94:38:3c:7c:7c:06:6e:
                    4a:9c:46:27:a5:3b:63:73:87:ab:2d:dc:72:4e:09:
                    5f:a1:70:3b:ce:e9:b6:44:72:c2:1a:f4:69:0f:aa:
                    6f:7c:e8:63:f4:aa:e6:87:6a:30:4d:ff:de:33:2f:
                    04:99:4a:c9:5c:eb:f2:b7:ca:8e:95:c2:a5:f0:c5:
                    3d:61:ab:00:52:f9:14:23:17:ce:1d:b5:6c:a1:6f:
                    26:2a:b3:1f:35:27:b4:2d:71:1e:f1:3a:30:e9:3b:
                    db:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DA:10:E3:E4:27:FD:F7:F2:B3:A5:17:B4:BF:E1:38:6A:C0:C6:E1
            X509v3 Authority Key Identifier:
                keyid:F3:78:3A:78:80:50:EE:9C:7E:17:89:5B:53:DD:ED:64:6A:92:4C:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/83g6eIBQ7px-F4lbU93tZGqSTEA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9158019/0856AF4C211411F1A859068B253D8C67/83g6eIBQ7px-F4lbU93tZGqSTEA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         7c:f6:69:f6:c2:4f:fa:4f:d0:f9:75:6f:8e:72:f6:d4:81:6b:
         e3:d4:d0:e7:2d:c4:78:40:02:35:39:fa:d7:b5:6b:e5:4b:17:
         58:90:10:90:f5:ea:3d:55:3f:8f:7e:4e:f4:b8:6d:bd:9d:d0:
         81:cd:87:8e:2f:5c:1a:c3:31:b4:55:0a:87:d1:40:ca:55:0b:
         23:62:bb:db:aa:5a:3f:aa:6e:1f:4b:ad:60:91:9f:15:07:e2:
         c4:90:32:01:e2:21:a1:f8:bb:ce:95:9a:61:c4:3a:70:76:03:
         de:ce:27:71:c7:59:92:c4:77:7d:40:36:26:e3:d5:9f:bb:25:
         c1:d9:4c:53:dd:74:b1:3f:38:19:e8:4e:85:59:19:4b:87:f1:
         e9:80:57:66:25:0c:46:60:83:6f:64:d9:0a:d2:d6:3a:4e:a1:
         82:ed:b4:70:19:6f:02:44:29:d7:df:1b:77:94:1d:41:de:87:
         a0:53:57:b7:dc:9e:37:15:e4:93:4c:4e:88:59:29:a2:a5:fc:
         bb:02:bf:8d:0f:d3:29:d5:61:81:c4:62:98:3e:b2:77:27:21:
         35:33:83:a4:d6:26:dd:eb:0c:a7:c4:75:d7:b7:c6:4f:ae:25:
         11:b7:28:d4:5f:13:38:64:e0:b0:f8:9d:75:1a:cb:b5:02:81:
         69:1c:84:e8
-----BEGIN CERTIFICATE-----
MIIFTjCCBDagAwIBAgIBMTANBgkqhkiG9w0BAQsFADBGMREwDwYDVQQDEwhBOTE1
ODAxOTExMC8GA1UEBRMoRjM3ODNBNzg4MDUwRUU5QzdFMTc4OTVCNTNEREVENjQ2
QTkyNEM0MDAeFw0yNjA2MTMwODQ0NTVaFw0yNjA2MjAwODQ0NTVaMBgxFjAUBgNV
BAMTDTZhMmQxODg3LWZmMWQwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIB
AQCMuj5+p3fZBDX2WPi/UJYtd1QmanRA37yNank/uixcPFHZmhXS+W17nHY7IOrb
MGrnqTMHbf/xgdWArYCKBsQKmIXTNvjtY+OKEaOF5FpnBZ7zMFRepIg1Qhq7tYOx
f6RYbvhhYWbR2kqTBlZYuDwiVIl/hD/rPLWg/s0SOP2HxgGd4FCyBONBa4uj6LBE
WTuTJPxM0D1ET4lURZ4vlDg8fHwGbkqcRielO2Nzh6st3HJOCV+hcDvO6bZEcsIa
9GkPqm986GP0quaHajBN/94zLwSZSslc6/K3yo6VwqXwxT1hqwBS+RQjF84dtWyh
byYqsx81J7QtcR7xOjDpO9v5AgMBAAGjggJzMIICbzAdBgNVHQ4EFgQUHNoQ4+Qn
/ffys6UXtL/hOGrAxuEwHwYDVR0jBBgwFoAU83g6eIBQ7px+F4lbU93tZGqSTEAw
DgYDVR0PAQH/BAQDAgeAMIGDBgNVHR8EfDB6MHigdqB0hnJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4MDE5LzA4NTZBRjRDMjEx
NDExRjFBODU5MDY4QjI1M0Q4QzY3LzgzZzZlSUJRN3B4LUY0bGJVOTN0WkdxU1RF
QS5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jwa2ku
YXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdDNzJG
RDFGRjIvODNnNmVJQlE3cHgtRjRsYlU5M3RaR3FTVEVBLmNlcjBKBgNVHSABAf8E
QDA+MDwGCCsGAQUFBw4CMDAwLgYIKwYBBQUHAgEWImh0dHBzOi8vd3d3LmFwbmlj
Lm5ldC9SUEtJL0NQUy5wZGYwgZAGCCsGAQUFBwELBIGDMIGAMH4GCCsGAQUFBzAL
hnJyc3luYzovL3Jwa2kuYXBuaWMubmV0L21lbWJlcl9yZXBvc2l0b3J5L0E5MTU4
MDE5LzA4NTZBRjRDMjExNDExRjFBODU5MDY4QjI1M0Q4QzY3LzgzZzZlSUJRN3B4
LUY0bGJVOTN0WkdxU1RFQS5tZnQwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADAhBggr
BgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEBCwUAA4IB
AQB89mn2wk/6T9D5dW+OcvbUgWvj1NDnLcR4QAI1OfrXtWvlSxdYkBCQ9eo9VT+P
fk70uG29ndCBzYeOL1wawzG0VQqH0UDKVQsjYrvbqlo/qm4fS61gkZ8VB+LEkDIB
4iGh+LvOlZphxDpwdgPezidxx1mSxHd9QDYm49WfuyXB2UxT3XSxPzgZ6E6FWRlL
h/HpgFdmJQxGYINvZNkK0tY6TqGC7bRwGW8CRCnX3xt3lB1B3oegU1e33J43FeST
TE6IWSmipfy7Ar+ND9Mp1WGBxGKYPrJ3JyE1M4Ok1ibd6wynxHXXt8ZPriURtyjU
XxM4ZOCw+J11Gsu1AoFpHITo
-----END CERTIFICATE-----
Generated at Sun Jun 14 06:21:55 2026 by rpki-client