Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
File:                     ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft (raw, json)
Hash identifier:          /rlGxQK1iTuOr0NFXvjR/ZuOxGfmKABSPNf55n5rPuk=
Subject key identifier:   56:C5:48:CD:95:FA:1E:F5:76:5A:82:BF:9C:92:D6:1E:95:8F:3E:6F
Authority key identifier: 72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26
Certificate issuer:       /CN=A9161477/serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
Certificate serial:       F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
Manifest number:          F5
Signing time:             Sat 13 Jun 2026 06:24:35 +0000
Manifest this update:     Sat 13 Jun 2026 06:24:35 +0000
Manifest next update:     Sat 20 Jun 2026 06:24:35 +0000
Files and hashes:         1: ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl (hash: RP7kDyFGxk/YD/DsrvZFLXYV4UReAAS8V+e++mQE/FA=)
                          2: CAB73E3AF3FC11EF83B4DD30C4F9AE02.roa (hash: LdoES6KZxqxOMlXy5GpD4F8aTeCZCb2DpDN7emPVRUM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl
                          rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 06:24:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 249 (0xf9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161477, serialNumber=7241E8F038B9F252FB61CA41B6A4FC167B775526
        Validity
            Not Before: Jun 13 06:24:35 2026 GMT
            Not After : Jun 20 06:24:35 2026 GMT
        Subject: CN=6a2cf7a3-e9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a6:bb:9b:5d:55:54:be:9e:81:f5:d8:a8:69:
                    97:b3:2a:87:5b:c8:54:a3:c5:ed:2e:9f:8e:9e:c6:
                    68:81:59:12:8c:e7:b7:65:ab:e7:d0:ad:6f:a0:40:
                    f7:d0:31:42:9d:fc:82:7e:43:b3:7f:b3:dc:ef:12:
                    d8:16:45:52:93:97:fb:7d:91:c4:56:6d:ee:7a:d4:
                    a4:6f:9f:1e:cc:93:bb:4e:92:9c:cc:c1:dd:cd:b5:
                    21:5a:98:e4:bf:fb:38:38:c6:28:eb:13:62:70:48:
                    6d:b3:d4:9b:0f:64:67:16:b4:0d:17:41:8b:27:92:
                    22:22:d0:10:84:2d:9f:c3:d0:dd:1d:8e:eb:8a:75:
                    be:83:20:5e:a7:05:0e:b9:93:33:23:b2:d9:78:86:
                    c7:63:c0:f8:2d:55:cc:76:7e:b1:ac:c2:74:27:22:
                    98:d9:a4:42:19:19:68:da:63:5a:ad:bb:72:c0:91:
                    04:d7:2d:16:2e:51:08:22:67:39:7a:59:58:78:42:
                    a0:87:65:7e:ec:56:48:f4:4b:fd:0e:d1:bf:eb:c7:
                    f7:e8:fc:33:2c:90:be:99:3c:d4:ee:1d:25:e3:f9:
                    dd:a5:78:10:a6:6c:c2:e2:64:e2:19:8c:d8:4b:65:
                    ed:c0:cf:69:c6:23:60:3e:44:17:78:9a:64:35:ce:
                    de:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:C5:48:CD:95:FA:1E:F5:76:5A:82:BF:9C:92:D6:1E:95:8F:3E:6F
            X509v3 Authority Key Identifier:
                keyid:72:41:E8:F0:38:B9:F2:52:FB:61:CA:41:B6:A4:FC:16:7B:77:55:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ckHo8Di58lL7YcpBtqT8Fnt3VSY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161477/6B7035F8F3FC11EF99D53730C4F9AE02/ckHo8Di58lL7YcpBtqT8Fnt3VSY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         77:b5:12:f9:42:1c:a1:a9:68:a9:28:1c:97:0a:3e:04:ba:75:
         f5:f4:80:38:00:11:d6:51:e2:93:9c:ce:37:f4:74:1f:6b:a9:
         9e:53:69:df:22:d6:01:e0:39:12:5e:05:f8:fd:fd:c0:03:b2:
         88:18:00:75:44:04:c6:45:2a:2d:64:23:fb:d7:86:3c:ae:04:
         fb:b1:fa:e4:f3:50:8f:f3:3e:f1:9d:41:93:f1:52:7e:ce:7a:
         a0:d0:bf:ee:85:9a:23:b2:25:61:11:81:39:10:85:e9:67:04:
         0c:40:c2:6b:1c:37:bc:c8:c5:5d:24:7d:38:2e:6e:13:8a:7c:
         87:ba:d2:87:78:49:ce:f2:41:a1:3b:8a:3b:92:2c:9c:66:d5:
         7c:f0:12:8f:7c:94:3d:43:43:3c:27:35:0a:7d:3f:75:3a:24:
         8f:88:82:41:54:97:4c:f9:50:e7:1a:e5:23:86:7f:e0:a7:64:
         f0:5d:31:ce:fd:3f:a5:98:83:f1:0a:1e:0d:5d:5e:60:96:23:
         ae:9c:07:ec:25:1e:6f:e0:2d:8d:b6:66:f7:34:d0:76:67:89:
         86:fc:5e:5b:a0:11:39:1c:70:4e:e4:32:fd:87:bf:22:65:3c:
         1b:0d:41:4c:f1:4f:d1:2e:34:1e:5c:5c:6e:8c:9a:2b:38:62:
         3b:e9:91:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:36:20 2026 by rpki-client