Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
File:                     g1KnNOghRPMixQtyik92WjPXIlY.mft (raw, json)
Hash identifier:          A6rVTLgUL9aPKhiflO8PyAahTMLvmu+OK4gC7/0alwg=
Subject key identifier:   9C:47:9E:26:BE:4C:42:6A:7A:CD:A7:EC:87:30:2E:02:F3:42:02:4F
Authority key identifier: 83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56
Certificate issuer:       /CN=A917357E/serialNumber=8352A734E82144F322C50B728A4F765A33D72256
Certificate serial:       02F9
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
Manifest number:          07D0
Signing time:             Fri 12 Jun 2026 23:44:34 +0000
Manifest this update:     Fri 12 Jun 2026 23:44:33 +0000
Manifest next update:     Fri 19 Jun 2026 23:44:33 +0000
Files and hashes:         1: g1KnNOghRPMixQtyik92WjPXIlY.crl (hash: AUxJmVzkz3xjthN5gPasgC4TzvlQohEqIghODMNrjf8=)
                          2: D89FDE783D9611F1B175AB4BC4833773.roa (hash: 4wi07dE2kolx7jvAdeVv4QEH8aWYT0OYBjVpj0ack7Y=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl
                          rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 23:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 761 (0x2f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917357E, serialNumber=8352A734E82144F322C50B728A4F765A33D72256
        Validity
            Not Before: Jun 12 23:44:33 2026 GMT
            Not After : Jun 19 23:44:33 2026 GMT
        Subject: CN=6a2c99e1-b18e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:ae:f2:d7:3a:68:17:ea:3d:46:68:57:a1:91:
                    6d:fb:e9:06:51:50:52:ef:b1:fe:e0:29:1a:df:5d:
                    af:3e:c8:e6:ed:d6:ad:1b:bb:c6:9f:60:c7:e8:b2:
                    77:8d:02:9a:c2:f5:41:03:41:6e:34:0f:4f:93:9c:
                    dd:54:db:54:ab:dd:1b:85:96:cd:c0:01:b9:56:d7:
                    c3:57:17:31:cf:8f:1f:6f:8a:85:dd:2f:f7:b9:00:
                    28:07:08:e9:35:58:72:c0:ba:f4:72:e3:6b:72:26:
                    84:51:6b:19:0c:b7:2f:cd:83:24:23:50:eb:78:ae:
                    8b:8e:70:43:af:4c:34:58:e0:d6:3e:85:32:6c:52:
                    8e:29:fc:cd:d4:ad:a4:36:15:07:3b:f0:ab:91:66:
                    7f:e8:a1:8d:03:e2:56:f5:4e:78:6d:27:77:a4:71:
                    21:fb:a3:0f:8a:26:1d:e9:32:3c:5c:d7:27:d2:f9:
                    62:ab:23:2d:85:4e:a8:38:ad:e9:59:a0:43:3a:ae:
                    0a:2f:83:3d:4c:6b:84:11:5f:a4:2e:e6:82:8c:3d:
                    8f:68:94:76:da:31:bd:c9:21:33:61:1b:02:36:1c:
                    66:e4:61:b8:d4:b9:94:42:b1:62:11:c9:5a:36:fe:
                    54:e6:41:bd:da:56:36:4f:e5:89:b6:30:57:76:d6:
                    66:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:47:9E:26:BE:4C:42:6A:7A:CD:A7:EC:87:30:2E:02:F3:42:02:4F
            X509v3 Authority Key Identifier:
                keyid:83:52:A7:34:E8:21:44:F3:22:C5:0B:72:8A:4F:76:5A:33:D7:22:56

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/g1KnNOghRPMixQtyik92WjPXIlY.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917357E/602D76D85D7311ECA3248853C4F9AE02/g1KnNOghRPMixQtyik92WjPXIlY.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         c1:24:19:95:9d:d0:cb:f5:f8:35:09:9d:50:e0:d3:4b:ef:4e:
         72:3b:a4:54:ff:ea:07:8d:06:8a:67:a2:69:c8:97:bc:bc:2f:
         fa:b3:cc:83:ab:e4:cd:76:53:4e:26:4c:d3:14:cc:63:4e:fa:
         ab:c5:08:3f:3e:cd:df:12:77:a2:53:cc:c2:d7:d7:28:3e:5b:
         ed:6b:41:42:69:09:ac:f4:25:6b:f2:7d:5b:2c:e9:d6:ec:96:
         c3:6c:fa:fa:d7:b2:12:b0:34:50:a7:09:50:bc:4f:cb:7b:23:
         68:b7:42:11:70:6f:3d:d1:9d:25:13:ec:03:ae:10:93:d0:14:
         f4:89:3a:99:3c:ae:b8:8e:27:e6:24:c9:e7:f4:fa:3a:08:4a:
         bc:b8:20:45:29:45:d8:10:16:01:d5:e6:94:26:47:1f:44:49:
         d8:e0:07:2f:ec:28:78:95:a1:34:94:1e:e1:74:68:74:d9:e2:
         7c:4d:80:c7:b0:43:89:dc:e4:73:79:a9:9e:0d:6b:1d:37:ea:
         f2:78:ab:df:82:46:88:ff:34:c8:1c:d1:9c:7a:b7:83:c4:94:
         1d:f9:92:ef:3e:1e:5c:59:d7:6a:2b:18:94:fe:ed:53:06:cb:
         75:e1:53:fd:de:f2:6d:d7:63:57:77:41:7c:45:e3:26:8f:1d:
         28:4a:5a:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:35:59 2026 by rpki-client