Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
File:                     Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft (raw, json)
Hash identifier:          7JKqA5G2hm7y1rb5zX/j1rFrr3CC481+LSkn9I5bQyA=
Subject key identifier:   CC:56:2F:2B:0E:1F:F8:6E:22:9F:33:87:2E:64:C5:5F:57:39:CA:3D
Authority key identifier: 0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A
Certificate issuer:       /CN=A9173204/serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
Certificate serial:       29
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
Manifest number:          28
Signing time:             Sat 13 Jun 2026 08:51:13 +0000
Manifest this update:     Sat 13 Jun 2026 08:51:13 +0000
Manifest next update:     Sat 20 Jun 2026 08:51:13 +0000
Files and hashes:         1: Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl (hash: lA+8kmmDK+/17ocGVDDNG3DjhFM1aRhgtyELrvTqnjA=)
                          2: 4E3439122B4111F19D37C4AC90833773.roa (hash: QQvgNRDiPl6A65a2LWGiXcir6fcA9w1PwW/VYZpOkXQ=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl
                          rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 08:51:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173204, serialNumber=0ADDC504FB7430142BB6151472AD17FCF172315A
        Validity
            Not Before: Jun 13 08:51:13 2026 GMT
            Not After : Jun 20 08:51:13 2026 GMT
        Subject: CN=6a2d1a01-c92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:06:55:bd:9f:99:79:50:0d:5f:b8:2f:ee:cf:
                    01:d0:f3:7f:c7:63:77:1c:bd:29:a7:c6:f3:e4:00:
                    45:f0:34:92:82:5c:6a:e9:5b:15:96:9f:b6:97:e7:
                    39:51:3a:74:31:28:c4:0f:cd:90:56:98:37:7a:00:
                    7e:f3:c5:27:54:38:96:dc:d7:eb:36:8d:1a:5b:8a:
                    86:20:aa:c3:90:7e:37:81:a2:a1:6a:9a:54:09:89:
                    73:cb:49:9a:1f:dd:32:08:d9:49:70:41:a9:61:d8:
                    96:7f:b3:86:ff:19:cb:54:e3:e1:dd:6b:28:36:df:
                    49:67:fa:bc:45:c3:31:33:4f:8b:e3:80:0e:49:57:
                    68:c4:bd:30:40:04:cc:d3:f7:20:91:1e:69:44:57:
                    71:87:f9:96:6d:ab:6d:f6:d4:2d:50:51:9e:db:37:
                    46:50:33:02:36:6c:7b:3f:82:95:85:f1:50:19:52:
                    49:88:9c:03:b8:f6:7d:f5:d7:6a:82:7c:18:be:83:
                    f7:f3:0d:05:af:cd:dc:8e:7c:a2:ca:b0:f0:95:8d:
                    6c:f5:a0:b4:b9:c1:ff:33:9a:77:15:1a:e0:5e:2f:
                    d2:05:aa:6b:48:fc:5e:0a:4f:32:19:93:3a:c1:e4:
                    24:6f:f1:74:7f:70:ec:07:54:70:8c:b9:3f:05:f5:
                    a3:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:56:2F:2B:0E:1F:F8:6E:22:9F:33:87:2E:64:C5:5F:57:39:CA:3D
            X509v3 Authority Key Identifier:
                keyid:0A:DD:C5:04:FB:74:30:14:2B:B6:15:14:72:AD:17:FC:F1:72:31:5A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/Ct3FBPt0MBQrthUUcq0X_PFyMVo.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173204/C6EB65662B4011F1BAED9A6390833773/Ct3FBPt0MBQrthUUcq0X_PFyMVo.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         00:8f:d8:77:f4:17:28:2c:9b:1e:a6:8e:a8:b1:7d:30:0a:cb:
         9d:c8:39:58:28:0e:4b:30:d7:66:5f:32:31:14:ee:e8:c6:79:
         10:7f:90:b7:df:57:8f:7c:62:2d:b2:36:7e:09:a4:75:f7:b9:
         54:68:76:87:48:ac:fd:f3:92:a3:bd:42:05:e8:f1:fe:c4:ae:
         71:d1:b3:f9:87:c8:83:12:ad:fa:46:13:a3:67:c7:a7:1e:08:
         e4:34:b5:13:6a:35:f4:88:b4:7c:ac:9a:4d:35:ef:86:4e:c0:
         fe:07:59:c5:ce:8b:1b:4c:36:43:90:fd:d0:e1:fc:be:3b:ff:
         9a:e4:84:5d:62:c8:1b:9c:85:d9:1e:c6:c2:07:2a:21:d6:ab:
         0e:75:ed:fb:13:54:5a:31:81:96:f2:eb:67:3b:82:fb:5c:03:
         f4:49:86:42:ec:48:ce:88:b5:99:15:06:66:9a:b1:7d:9d:7e:
         9c:10:c1:c6:c2:9e:71:14:14:f6:48:20:48:a5:d8:1b:75:0a:
         21:bc:bf:98:15:65:5a:b2:c3:4b:14:3f:fa:a3:f9:44:8d:1f:
         78:9a:53:48:11:27:b2:df:37:6d:c4:32:f7:42:75:90:04:21:
         79:f8:e5:e4:2b:37:fb:4a:1c:5a:1a:66:d5:0c:b0:ba:43:c9:
         89:02:6b:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:23:08 2026 by rpki-client