Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
File:                     AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft (raw, json)
Hash identifier:          p/PLZSRRGXAjxRYXRiwgClxrINE1Tvm7OzncC8BeHeo=
Subject key identifier:   11:07:8E:E8:52:B5:89:9A:C1:9D:B5:F5:67:BC:CC:25:C2:AA:47:98
Authority key identifier: 01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E
Certificate issuer:       /CN=A917AB5E/serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
Certificate serial:       354C
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
Manifest number:          354C
Signing time:             Fri 12 Jun 2026 15:09:30 +0000
Manifest this update:     Fri 12 Jun 2026 15:09:29 +0000
Manifest next update:     Fri 19 Jun 2026 15:09:29 +0000
Files and hashes:         1: AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl (hash: cpop6aZtfVr9OAoMAo7l1q4BoYBUP/wbvIYx7/2MpVA=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl
                          rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:09:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13644 (0x354c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917AB5E, serialNumber=011D61B233ADF30CD247562124BB718BC63AD64E
        Validity
            Not Before: Jun 12 15:09:29 2026 GMT
            Not After : Jun 19 15:09:29 2026 GMT
        Subject: CN=6a2c2129-f15d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:3d:47:64:b1:a1:c1:ac:3f:f6:06:38:3b:67:
                    42:90:f6:7a:53:c6:6d:f0:02:d8:3e:dd:21:75:71:
                    0e:f8:6c:8c:a6:71:f4:6e:19:6e:31:eb:9d:b2:2e:
                    aa:eb:1d:db:20:8e:01:bb:06:00:50:57:68:e8:af:
                    69:54:cb:33:33:e3:f0:86:b2:23:c0:a2:a5:4c:49:
                    77:7f:30:34:31:40:e1:8c:94:23:a6:10:87:b9:54:
                    57:6b:84:58:7b:26:82:04:8a:a1:f8:59:aa:56:9c:
                    ed:e6:79:1d:b8:8a:12:ea:51:8f:ed:56:22:31:ba:
                    ab:c7:e2:61:48:78:85:8f:e8:11:fc:ab:5d:73:9b:
                    36:8e:2b:95:3a:69:11:ca:c4:59:f4:fd:9f:5d:c7:
                    15:b6:2e:9a:b0:49:19:87:0b:ac:98:2c:ba:ac:a2:
                    48:39:97:8e:4b:04:07:7d:6d:ec:b6:f8:c0:df:f1:
                    03:e2:15:c5:80:20:64:2c:51:ee:39:92:ea:08:5b:
                    d4:3e:32:9f:6b:03:02:d8:39:c1:7b:e3:f4:db:e5:
                    41:3c:d3:f1:ee:44:75:60:93:70:0e:f8:63:81:c7:
                    3e:de:6f:cb:13:87:7f:2b:15:c7:c4:bd:30:27:5d:
                    03:a9:c2:7e:fc:c5:52:1d:62:8e:0d:c7:77:62:82:
                    33:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:07:8E:E8:52:B5:89:9A:C1:9D:B5:F5:67:BC:CC:25:C2:AA:47:98
            X509v3 Authority Key Identifier:
                keyid:01:1D:61:B2:33:AD:F3:0C:D2:47:56:21:24:BB:71:8B:C6:3A:D6:4E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917AB5E/F565ADD21DA511E283D3EF9C08B02CD2/AR1hsjOt8wzSR1YhJLtxi8Y61k4.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         ad:16:52:58:69:7f:bc:a1:59:56:f8:df:98:9c:21:b6:6c:ca:
         b1:ff:3c:df:5e:a7:0d:73:ae:8b:10:34:c2:40:0d:ee:cb:5d:
         84:13:61:1e:3d:1f:5a:fa:a4:fd:4e:66:ea:c9:18:8a:ce:63:
         05:50:52:da:2c:2b:5a:8b:40:dc:b0:56:8c:80:30:ab:33:68:
         11:fb:ca:9c:52:43:d8:7c:a6:a3:e4:bb:dc:52:94:08:a5:33:
         d5:74:b4:72:6b:7e:b7:fb:97:bd:60:16:ee:a3:55:34:79:2a:
         85:28:b6:bf:ec:86:5b:a5:96:da:b1:f2:e9:2d:70:91:f9:9d:
         dc:f0:0d:a1:6e:ea:58:c8:4e:51:a0:ac:d6:f8:5a:c8:51:ca:
         d3:b4:21:29:51:59:91:76:70:7e:a7:6b:77:7e:c1:c9:62:ec:
         32:97:90:de:ef:e5:5f:79:cf:a3:04:7c:6b:9e:22:c0:ee:02:
         75:64:5c:38:a5:6f:05:5a:25:22:f6:6e:a5:18:d9:1b:b6:a8:
         07:79:f8:dd:a1:06:c3:75:c1:79:1a:0b:87:8a:9d:56:7c:3f:
         b0:ad:42:65:77:f9:d8:b2:6e:58:f6:2d:cb:48:6b:7e:30:ba:
         ee:46:84:ad:6c:bf:a1:05:9b:f3:6f:4d:e8:d9:16:22:51:82:
         58:79:36:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 07:25:41 2026 by rpki-client