Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
File:                     Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft (raw, json)
Hash identifier:          xkFEx4QOkSj61rAi7B1U/e/PVXX0bqdVkybA/C7eG/A=
Subject key identifier:   0C:85:20:60:67:68:37:96:8D:85:FB:90:DB:A4:FC:1F:A9:46:3E:2F
Authority key identifier: 0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14
Certificate issuer:       /CN=A91637FD/serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
Certificate serial:       012C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
Manifest number:          0128
Signing time:             Sat 13 Jun 2026 05:37:40 +0000
Manifest this update:     Sat 13 Jun 2026 05:37:39 +0000
Manifest next update:     Sat 20 Jun 2026 05:37:39 +0000
Files and hashes:         1: Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl (hash: 647qx3ybyF60VQRq7H2PMwsBGxvp85Ret2KqLvC/XxI=)
                          2: D1E78BC0A15D11EFBAE3332CC4F9AE02.roa (hash: hdQpo+xnXuDoOPe/5r+BnsM8aeG+LI4VCVPfcf0L3eI=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl
                          rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 05:37:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 300 (0x12c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91637FD, serialNumber=0ACE6F6AA6A3FAE27A085C7A127F9BC994245214
        Validity
            Not Before: Jun 13 05:37:39 2026 GMT
            Not After : Jun 20 05:37:39 2026 GMT
        Subject: CN=6a2ceca4-83d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:ff:51:70:3e:fc:4f:02:db:b6:7b:90:33:c9:
                    3c:65:9f:32:14:c9:f3:22:d1:9a:ae:56:5e:0d:b9:
                    51:bb:c0:a4:98:7f:31:66:d9:6f:e2:c5:44:46:42:
                    80:22:62:3d:90:65:23:e8:83:51:3e:30:cf:16:ec:
                    34:11:6f:1a:b7:97:db:e8:62:d0:11:e0:c6:08:2e:
                    2b:a6:2b:77:de:c4:23:9d:91:72:58:cb:de:97:5f:
                    17:ae:36:34:f7:ce:a4:c1:bf:ed:98:89:63:f4:e8:
                    6f:51:78:01:0d:78:d2:4a:32:ff:17:02:3b:29:a5:
                    e7:a1:f5:57:4b:89:c3:ac:ce:e3:e0:71:84:b1:f8:
                    f4:32:b2:eb:1c:d8:fd:65:74:a7:a8:d5:60:b2:33:
                    d4:0e:55:ab:14:2a:ea:b8:5e:86:3c:f5:2a:2f:43:
                    5f:67:07:74:e7:8d:74:f5:db:bc:bb:6a:3a:d1:3f:
                    0d:65:6a:89:a9:60:f9:2e:6f:d1:95:51:0b:53:65:
                    cd:40:43:2b:82:53:59:a6:1c:95:d6:27:fc:2e:10:
                    69:f8:c7:4b:78:ce:05:27:58:2b:72:ae:2a:47:a0:
                    11:82:72:d2:6a:9a:d7:bb:45:1c:c6:ae:63:93:6b:
                    b1:9d:cf:4c:1c:c9:73:41:cc:27:75:08:ef:02:a0:
                    e9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:85:20:60:67:68:37:96:8D:85:FB:90:DB:A4:FC:1F:A9:46:3E:2F
            X509v3 Authority Key Identifier:
                keyid:0A:CE:6F:6A:A6:A3:FA:E2:7A:08:5C:7A:12:7F:9B:C9:94:24:52:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91637FD/E245B5B2A15A11EFA1EC2B5FC4F9AE02/Cs5vaqaj-uJ6CFx6En-byZQkUhQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         15:c3:1f:7e:3d:cd:dc:18:45:88:37:34:e6:51:5a:52:42:29:
         65:6f:38:3c:84:3b:da:f5:49:ec:11:69:60:84:35:7c:e2:ab:
         c7:bf:0f:d2:70:b2:9c:6a:a9:6e:a0:a4:5d:d0:32:9e:ac:42:
         da:8b:bb:c3:10:e9:5f:9f:da:a3:7a:0d:54:27:ca:ce:66:b0:
         b1:2b:b1:4e:03:8f:ee:82:70:15:cc:8c:b2:80:b2:63:a0:59:
         d8:d1:68:78:ff:cb:98:55:09:dc:7f:de:5f:81:c3:f8:22:6f:
         a1:0a:fd:64:7f:ac:1d:48:c2:08:6e:91:0d:e1:40:e7:aa:6b:
         fc:be:70:91:97:53:02:cb:21:65:6e:b8:2e:b4:bd:29:97:a1:
         92:c4:df:ab:80:43:1e:79:fb:a8:0e:77:e9:a2:be:26:f0:45:
         5f:89:dc:6b:7e:94:74:49:63:33:12:08:e7:ea:26:30:e2:8f:
         e2:24:d2:17:fd:6a:f2:03:34:52:04:08:a2:60:19:8c:fa:0d:
         4c:cb:46:da:18:70:5a:85:ef:9a:20:48:30:b0:8b:40:a2:04:
         1f:ca:33:f9:bd:4f:fe:d0:7f:ab:eb:6a:72:85:01:c9:af:46:
         b0:f6:f7:7f:a2:cf:7a:3a:e0:8f:1c:ff:d5:af:a2:89:47:d3:
         3f:23:1a:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:36:48 2026 by rpki-client