Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
File:                     1dDY4fA9UQCIn0GApl9VCg1YC4U.mft (raw, json)
Hash identifier:          gWqzKVB7GSNzAnxFNnKTZO9ZmlTvqlRGB1AbcH9Yb9Q=
Subject key identifier:   3D:A7:C3:59:D4:BD:6A:70:13:F6:5C:23:1D:19:8A:2D:CA:2C:BE:A3
Authority key identifier: D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85
Certificate issuer:       /CN=A91647ED/serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
Certificate serial:       76
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
Manifest number:          6F
Signing time:             Sat 13 Jun 2026 08:02:41 +0000
Manifest this update:     Sat 13 Jun 2026 08:02:40 +0000
Manifest next update:     Sat 20 Jun 2026 08:02:40 +0000
Files and hashes:         1: 1dDY4fA9UQCIn0GApl9VCg1YC4U.crl (hash: O3+9XE46qQkMzGmHrL3C8eH/dBT+A+qGlxtQWRhABZ0=)
                          2: 2B7DA728397E11F19603F3529B833773.roa (hash: 6jcLP2Ff5kNHQzJq73ID1QGceVd0PGeFk+UxM9roUcg=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl
                          rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:02:39 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91647ED, serialNumber=D5D0D8E1F03D5100889F4180A65F550A0D580B85
        Validity
            Not Before: Jun 13 08:02:40 2026 GMT
            Not After : Jun 20 08:02:40 2026 GMT
        Subject: CN=6a2d0ea0-32d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:04:db:d9:ab:bd:0b:38:f7:11:c7:f9:74:26:
                    4e:a6:ca:fa:d0:f0:59:0c:3c:73:a9:4e:a5:b7:9c:
                    5e:a4:18:69:82:9f:f8:57:7a:ed:a3:b1:2c:d1:72:
                    40:23:d8:7d:c8:e4:fb:52:7b:b3:e1:e2:ea:75:b6:
                    22:d4:e0:b3:d9:95:77:63:07:30:fe:dd:7a:ca:11:
                    55:03:4e:7d:85:1f:df:52:d5:f8:5a:66:03:1b:89:
                    d4:01:5c:fb:17:be:89:be:f1:73:2e:ba:84:07:d8:
                    7b:b0:72:45:47:ee:7d:c1:02:5a:b6:10:b2:db:5c:
                    21:e9:7b:14:50:3e:d0:f7:d5:37:35:e1:29:10:dd:
                    e9:44:ef:a8:31:42:9b:2b:d8:e2:4c:37:ff:bc:01:
                    99:61:9a:c7:c9:a2:6e:0e:68:67:28:a2:23:21:b2:
                    59:1c:7d:00:75:16:83:ad:3e:0b:0d:e3:5b:82:be:
                    e5:7d:c1:a7:08:dd:69:5a:c4:0d:a9:6d:09:a9:71:
                    bf:cf:c2:37:37:57:a3:29:51:20:7c:5c:aa:fd:91:
                    5b:5f:20:b5:0e:53:a0:d7:d8:22:7d:58:fe:f2:3c:
                    2f:d9:35:f6:ec:c9:23:c1:2c:3a:4d:80:db:54:b9:
                    61:67:6e:a0:1f:54:19:a3:6d:ae:58:a8:9c:9d:10:
                    2b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A7:C3:59:D4:BD:6A:70:13:F6:5C:23:1D:19:8A:2D:CA:2C:BE:A3
            X509v3 Authority Key Identifier:
                keyid:D5:D0:D8:E1:F0:3D:51:00:88:9F:41:80:A6:5F:55:0A:0D:58:0B:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/1dDY4fA9UQCIn0GApl9VCg1YC4U.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91647ED/C9C62DA4CB8011F0A68E541CC4F9AE02/1dDY4fA9UQCIn0GApl9VCg1YC4U.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         82:23:e1:07:01:c0:71:c4:04:84:17:90:f8:b7:4e:c7:e5:e2:
         0c:87:a3:bc:69:df:75:6d:16:b8:d8:d5:28:1e:0c:a7:b1:78:
         b0:c2:05:6f:3d:04:e4:9d:ea:9d:d3:c6:a1:88:23:e8:e7:80:
         94:45:05:9f:de:29:31:13:34:f8:a2:f6:8b:15:2c:3a:62:ac:
         bd:3b:26:2a:53:b2:0d:4d:53:8f:dd:a5:1f:2b:7a:01:ed:5c:
         3e:1c:ee:2d:d5:03:db:5b:c0:5a:8e:6e:49:1d:9d:6a:cd:5c:
         0f:2c:5d:bf:d1:f1:e2:bd:28:2d:d0:c6:e0:a7:a0:6d:e9:dd:
         b7:04:e5:a3:6a:f5:dd:47:76:68:87:d8:51:03:a7:bd:f8:a6:
         12:0a:bf:67:90:df:04:0b:b4:75:5f:c0:e2:5a:cf:ef:e6:88:
         da:e5:d5:8a:f8:6b:00:a6:4e:b5:4a:db:d8:16:b1:58:c2:6b:
         26:42:f1:a4:6c:45:a3:6f:8e:98:b6:7e:f2:09:58:bf:c4:5d:
         6d:05:da:46:3c:35:00:99:dc:c4:e6:90:a5:aa:90:e6:0a:dc:
         5f:d3:10:f1:a8:43:09:14:20:bb:ee:22:c6:ef:9f:59:4a:2f:
         68:60:55:2f:52:64:c8:7d:1d:4e:cd:ce:e4:a4:86:99:27:4f:
         72:d2:6e:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:47:30 2026 by rpki-client