Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
File:                     aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft (raw, json)
Hash identifier:          ZEbX52bJQK9oQKA7zOEl93ta4ti9pavIFeJ54dKhID0=
Subject key identifier:   B0:DF:65:D5:40:22:E9:F4:DE:75:D9:79:D0:2D:D0:13:DB:B5:53:5F
Authority key identifier: 68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10
Certificate issuer:       /CN=A9174125/serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
Certificate serial:       156D
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
Manifest number:          156D
Signing time:             Fri 12 Jun 2026 16:44:16 +0000
Manifest this update:     Fri 12 Jun 2026 16:44:16 +0000
Manifest next update:     Fri 19 Jun 2026 16:44:16 +0000
Files and hashes:         1: aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl (hash: 1FiO5buiDNvUVIrccFu6UjrdEjmVSb+DN0z+wg25lqw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl
                          rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 16:44:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5485 (0x156d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9174125, serialNumber=68C61197EBA41A64D85F2559E1D40D6E75FCB710
        Validity
            Not Before: Jun 12 16:44:16 2026 GMT
            Not After : Jun 19 16:44:16 2026 GMT
        Subject: CN=6a2c3760-5cdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:66:a8:4d:63:ba:09:16:da:00:9b:a0:44:22:
                    85:d0:15:65:11:7b:f7:d6:a7:b3:a5:a4:0d:d8:38:
                    4d:e3:87:8b:ab:af:e0:c1:f8:5c:e7:b4:6c:b5:d7:
                    a8:bf:59:73:72:70:93:2e:59:b8:93:e3:af:e5:82:
                    fd:61:7f:2b:37:3f:24:28:2a:47:ab:99:44:b7:e7:
                    04:08:e4:11:7c:3c:4b:c5:1f:a5:fa:9c:38:7c:8e:
                    6a:3c:e2:e5:97:21:ce:ae:a0:71:89:bc:55:9b:da:
                    48:87:11:15:4f:53:16:51:83:f5:be:e8:70:70:74:
                    9b:41:f0:fb:84:5a:74:f4:ff:50:40:c4:56:07:af:
                    11:ca:81:48:df:7b:25:dc:1a:44:18:7f:fd:a6:32:
                    35:35:aa:53:3b:a6:11:02:3f:fd:09:7f:d5:03:ac:
                    c2:21:1b:d1:af:d8:57:0e:91:6d:be:6a:0e:48:dc:
                    6f:ed:2b:5b:2c:59:55:a9:1a:e5:6b:76:ed:59:77:
                    90:d4:26:a8:b2:35:ac:d2:fa:b6:f5:a4:0d:8f:a5:
                    9f:b6:1d:86:b6:52:6f:50:32:dc:df:44:3c:b8:a7:
                    82:6b:5a:7f:9f:75:12:9d:5b:b8:25:f7:05:38:fe:
                    87:5d:aa:66:c0:2d:36:7c:3d:92:38:27:60:d0:c6:
                    e0:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:DF:65:D5:40:22:E9:F4:DE:75:D9:79:D0:2D:D0:13:DB:B5:53:5F
            X509v3 Authority Key Identifier:
                keyid:68:C6:11:97:EB:A4:1A:64:D8:5F:25:59:E1:D4:0D:6E:75:FC:B7:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/aMYRl-ukGmTYXyVZ4dQNbnX8txA.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9174125/FAB6BE885D6011E8B349A80FC4F9AE02/aMYRl-ukGmTYXyVZ4dQNbnX8txA.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         74:08:e6:29:a9:d9:9e:63:b7:f3:de:6a:c1:0c:2c:68:c7:a7:
         5b:61:0a:03:fe:01:19:7e:39:ff:58:66:60:10:ba:22:5b:61:
         41:a5:68:48:94:61:a6:e0:7e:3a:df:15:9c:11:e4:f4:4b:2e:
         a1:45:1b:c0:54:9b:80:9c:26:1b:6a:de:b4:eb:ba:bc:e9:b0:
         ef:41:e8:8d:e7:97:99:8d:42:68:6a:a3:6a:31:20:6b:2a:03:
         04:e3:b8:56:7e:8b:a9:f5:51:75:38:c4:b5:46:68:43:51:b5:
         f9:da:4f:b1:ed:63:d0:86:4f:b3:a3:56:5a:ba:83:6c:4c:6d:
         17:47:e1:40:41:a5:87:e6:bf:1d:90:4d:45:e4:19:22:f7:d5:
         c9:d5:d2:5b:c9:c1:87:28:25:06:27:b4:a9:b2:9a:66:82:5c:
         9d:b4:41:41:50:eb:1f:fc:9a:12:2b:b2:2e:d3:3d:ae:e3:95:
         dd:aa:19:22:ac:6d:63:9e:07:40:94:d9:42:79:86:77:47:ad:
         30:dc:9b:a2:32:12:e7:ce:0e:85:ca:e9:8b:a4:d7:11:68:68:
         71:b3:92:76:5c:1a:51:44:28:43:fa:0f:b5:85:e8:51:9c:60:
         38:66:19:2a:02:22:07:f4:fa:d2:d0:7f:1f:2f:e9:0d:4c:04:
         a6:3b:31:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:12 2026 by rpki-client