Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
File:                     -tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft (raw, json)
Hash identifier:          2odTQJ3FIfbaonREfInvaST9zaTQKf9hmmjZMBHeqz0=
Subject key identifier:   FA:D3:67:00:C7:31:71:72:48:03:A7:33:F0:83:14:A2:E3:7B:ED:6D
Authority key identifier: FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9
Certificate issuer:       /CN=A915E061/serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
Certificate serial:       38
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
Manifest number:          37
Signing time:             Sat 13 Jun 2026 08:39:05 +0000
Manifest this update:     Sat 13 Jun 2026 08:39:05 +0000
Manifest next update:     Sat 20 Jun 2026 08:39:05 +0000
Files and hashes:         1: -tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl (hash: +gsPfgHLRXByscaBh5JaZrDcSwwYJuvAzbjQ0OulAo0=)
                          2: CE992CA0138D11F198EDAC703A3D8C67.roa (hash: hnj4b5BrR1oDY8K6unPrq2mmpWra5ZUyWl2C0okWTrc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl
                          rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 56 (0x38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A915E061, serialNumber=FAD4299CB205AA3DDDC490A86025BA5C6C1EE0E9
        Validity
            Not Before: Jun 13 08:39:05 2026 GMT
            Not After : Jun 20 08:39:05 2026 GMT
        Subject: CN=6a2d1729-f4de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:80:44:07:ae:04:7f:93:7b:df:4d:d8:8f:77:
                    6a:95:76:75:62:2d:96:2c:8b:1a:07:8f:e2:09:e5:
                    80:2c:48:2d:82:79:62:7f:9c:74:b2:6e:13:0f:58:
                    be:13:50:20:07:eb:7c:50:ed:e9:15:a8:ac:d7:0e:
                    d4:62:4c:fe:0a:e3:83:6f:aa:1e:88:d0:9a:ac:7a:
                    8f:37:3c:43:e5:26:1e:4c:3d:a6:43:ce:1a:55:ae:
                    13:be:54:bd:9d:b4:5b:87:b1:5d:58:33:c5:ec:0c:
                    fa:15:15:a4:fe:fb:1c:f5:64:2e:e8:d9:9d:10:3c:
                    b5:14:8c:55:a2:0a:0c:19:9d:be:34:70:c4:e3:20:
                    f0:31:e3:fe:36:9b:52:e7:b3:85:f7:74:0b:f9:2e:
                    8f:fc:8f:f4:81:19:60:af:25:60:bc:6a:02:c4:20:
                    e3:48:9a:64:ac:d2:09:cf:e3:ea:ac:16:22:36:f9:
                    d2:ba:ec:b1:98:9e:91:bd:a3:43:9e:ad:6e:23:ba:
                    4c:01:14:ed:61:cc:31:bb:9a:9d:70:49:4b:f9:74:
                    40:94:44:7e:cc:bb:af:64:04:d3:44:30:09:b5:b6:
                    1c:6e:e1:2a:fa:55:2f:7d:e6:89:71:62:6b:b8:78:
                    aa:cc:37:22:93:28:82:bb:a0:b4:17:85:c7:1b:6d:
                    93:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:D3:67:00:C7:31:71:72:48:03:A7:33:F0:83:14:A2:E3:7B:ED:6D
            X509v3 Authority Key Identifier:
                keyid:FA:D4:29:9C:B2:05:AA:3D:DD:C4:90:A8:60:25:BA:5C:6C:1E:E0:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915E061/934E5982138C11F1AA4176333A3D8C67/-tQpnLIFqj3dxJCoYCW6XGwe4Ok.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         93:99:f6:5f:e7:a5:45:f1:c4:2a:b3:a6:8c:e1:38:f3:9d:33:
         a0:31:b2:8a:a7:6c:0d:88:fa:ad:96:9b:54:1d:50:62:ee:d1:
         0d:3b:56:88:ab:50:a4:24:c7:f9:ad:e5:ae:b7:16:79:10:95:
         5d:1c:2e:2e:b2:df:56:b1:f7:b3:d9:18:c2:31:c3:ba:52:38:
         f2:3e:2a:33:5d:7f:d5:7e:e5:15:5f:8f:fa:c9:e1:42:c1:b6:
         53:f5:63:3e:6d:0d:86:6a:ea:45:b2:2c:4d:60:86:b1:7e:79:
         56:cb:1a:2a:b4:e5:be:12:47:4a:8e:64:a8:9e:2f:87:bd:a5:
         fd:08:c4:9c:2e:9f:98:25:f3:65:da:3b:9b:c0:73:15:87:b1:
         14:d2:d8:13:dc:2f:39:ea:c5:30:1e:53:ab:83:90:26:25:67:
         d2:f4:54:55:c5:80:69:94:6c:ec:02:a0:24:bd:59:a7:a5:31:
         67:b1:79:e7:5b:9d:09:23:53:2a:3e:54:30:b4:70:5a:b1:01:
         02:eb:5c:c8:bb:70:68:e6:91:cb:06:61:f5:18:0c:46:14:fb:
         b3:a9:8b:5d:27:11:b6:06:56:01:c2:8d:17:2f:38:bb:dd:2a:
         3b:77:92:7c:a3:e0:7b:80:ce:1d:c8:32:cf:f2:02:f7:05:8a:
         f0:c8:75:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 08:39:40 2026 by rpki-client