Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
File:                     X60bOb5FVSYiBtGfWmabx7afcsg.mft (raw, json)
Hash identifier:          HvdVrzHSLtEeLh7QNLkYmu1GFm4Lu6F8jyHna13wxvo=
Subject key identifier:   A2:2E:C5:59:94:6D:1F:00:EA:6E:71:36:D4:66:7B:E4:3E:9F:59:AD
Authority key identifier: 5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8
Certificate issuer:       /CN=A9173CE6/serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
Certificate serial:       073D
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
Manifest number:          0737
Signing time:             Fri 12 Jun 2026 21:49:57 +0000
Manifest this update:     Fri 12 Jun 2026 21:49:56 +0000
Manifest next update:     Fri 19 Jun 2026 21:49:56 +0000
Files and hashes:         1: X60bOb5FVSYiBtGfWmabx7afcsg.crl (hash: 8MlbOsJyewPyTuJCAx/zX8Ag/fVl9zmTkgXaQOeKbbs=)
                          2: C4245600E55A11ED98D38780C4F9AE02.roa (hash: aSLv1C+EyXbwK3DnNjnFTX370d6LHK+MnR49e8euTIM=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl
                          rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 21:49:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1853 (0x73d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9173CE6, serialNumber=5FAD1B39BE4555262206D19F5A669BC7B69F72C8
        Validity
            Not Before: Jun 12 21:49:56 2026 GMT
            Not After : Jun 19 21:49:56 2026 GMT
        Subject: CN=6a2c7f04-9955
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:e4:33:7c:4e:d1:f1:85:c4:c1:b8:66:86:56:
                    ed:6a:87:ce:4d:3b:49:53:b2:00:61:c0:72:ae:7f:
                    f8:a3:6b:1a:ef:b8:08:d2:4c:4e:69:22:26:ca:bc:
                    92:ed:7f:c2:64:e0:14:e2:11:fa:04:e8:9e:74:70:
                    62:1a:0f:1b:b8:2f:48:ea:fa:f6:0a:68:4e:f0:68:
                    35:f7:1c:47:14:20:57:67:35:be:3a:0b:c3:d7:9e:
                    8d:7e:d4:bd:b4:4f:36:02:aa:25:bd:28:50:81:63:
                    03:71:62:c8:6f:db:dc:17:5f:2d:ec:cd:74:77:a7:
                    b8:63:5e:20:4c:19:cd:7a:c5:26:75:a5:c3:c1:73:
                    27:e4:6f:14:1e:d7:59:3b:f4:fa:6d:c7:98:5c:9c:
                    3c:14:9f:ee:6b:25:0a:91:79:4b:19:c5:03:a8:c9:
                    b0:50:e3:1b:c6:4e:e2:bb:20:5d:e1:4f:8f:e8:31:
                    17:a3:be:e2:43:6f:64:73:c9:de:44:dc:3f:6f:8b:
                    fa:8d:51:96:e4:c4:28:1c:d4:d9:32:42:38:9f:66:
                    8e:0a:4a:32:32:79:8d:7f:00:9c:19:5f:2e:9c:ca:
                    18:8a:50:85:66:51:dd:2b:92:4c:01:f7:fa:2d:ec:
                    8b:44:f6:3a:a0:07:97:a1:07:9a:e8:f4:93:49:e8:
                    e5:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:2E:C5:59:94:6D:1F:00:EA:6E:71:36:D4:66:7B:E4:3E:9F:59:AD
            X509v3 Authority Key Identifier:
                keyid:5F:AD:1B:39:BE:45:55:26:22:06:D1:9F:5A:66:9B:C7:B6:9F:72:C8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/X60bOb5FVSYiBtGfWmabx7afcsg.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9173CE6/03A017847BD011EB85A66980C4F9AE02/X60bOb5FVSYiBtGfWmabx7afcsg.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         9d:72:24:eb:39:e0:be:80:de:41:76:af:dc:23:d1:44:d9:29:
         db:bc:99:f7:f3:d8:6d:84:bd:62:55:d4:f7:b4:0d:6f:22:99:
         a9:37:54:66:37:42:66:bb:6c:9f:d5:3f:00:fb:66:ec:4c:66:
         98:d0:6f:8a:78:44:f0:36:56:1c:42:e4:24:6d:18:15:f8:7e:
         5f:ed:18:27:24:1e:ae:e2:e7:c3:aa:dd:7d:4c:5d:78:74:32:
         7f:69:f5:1a:c4:3d:8d:dd:64:cd:8d:0b:12:14:63:a7:1d:e7:
         a5:60:e2:e8:79:94:42:44:48:27:9d:1e:9f:e3:cb:34:7b:aa:
         ca:09:36:4a:d3:72:ad:7c:bb:f8:6d:41:e7:99:62:c0:5d:cf:
         e5:98:12:68:e0:c7:c4:5e:ba:e7:1b:60:c6:85:b9:19:b5:cc:
         37:ec:a4:f5:50:d2:b7:c5:e6:ac:b0:6e:ab:b2:86:cf:f5:da:
         95:3b:9f:13:24:b0:17:09:d5:41:d0:17:2f:5f:55:91:c8:19:
         7c:ae:56:5e:83:9c:5b:29:f0:14:d7:87:87:16:26:1d:31:df:
         d4:e8:bc:4b:65:34:17:2f:bd:c4:69:d8:b9:45:53:cd:2b:13:
         04:8a:af:c2:29:68:dd:3f:e4:44:d4:2a:4a:64:66:d2:6d:17:
         5b:74:97:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 16:36:00 2026 by rpki-client