Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
File:                     gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft (raw, json)
Hash identifier:          d3lkQgX6lKwCbOWzdwdkecj0lJAtJzORIUY5+kaTnI8=
Subject key identifier:   18:9E:FF:D0:71:AA:9A:A4:E7:DE:B7:ED:87:A0:52:10:83:D4:C4:86
Authority key identifier: 80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB
Certificate issuer:       /CN=A917B4BF/serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
Certificate serial:       051A
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
Manifest number:          04C3
Signing time:             Sat 13 Jun 2026 00:01:30 +0000
Manifest this update:     Sat 13 Jun 2026 00:01:29 +0000
Manifest next update:     Sat 20 Jun 2026 00:01:29 +0000
Files and hashes:         1: gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl (hash: W8jlL8rozwAARLqJEQWETRr59pcmL9kGe7sG3mXUaRs=)
                          2: 8F9CB4448F3511ECB2182782C4F9AE02.roa (hash: PEgw27of0MFqunEKz93iWKmEM4bPPmkxIAHYsCgJElI=)
                          3: F5B3F2F02FE111F183FB5F929E833773.roa (hash: adpxHreCn3jxtJ88fU3gS6rSVCPiga5e2uj5/vlUSuY=)
                          4: A5D75708E07111ED9601E941C4F9AE02.roa (hash: g0/tJc0JW/CRmQeJicEs0HkSx3ITHzBqjIOAcBLM6FE=)
                          5: 609BCC763D9311EE9B7BB945C4F9AE02.roa (hash: Z/QK88M5uL5DdEz3ATOtjxO2eM1sapV5OhRj3AH8iQw=)
                          6: 64782D1E607E11ED9CD7EF0FC4F9AE02.roa (hash: eYPDqk6CiCVss4EkZuowgeG638Civi0MVQZq29pSYbk=)
                          7: B5BFAB442FE111F19DB441919E833773.roa (hash: P12NrwuEVi8wdx/kCABaTswenwo867fCicXtnmsvepc=)
                          8: 44B11A52CAEE11ECBC0B2B7EC4F9AE02.roa (hash: 1ib5ZHiX2c+Ay9rYC1Z/Jru6mlw71yvanvthh2v+7bo=)
                          9: F255CD0A5EC411ED810B8584C4F9AE02.roa (hash: IFm6rzchuTr/Ghy/abEkmajej4rQuJFBH9uiFcUCM2Q=)
                          10: 6873616CCAE811ECBB89015FC4F9AE02.roa (hash: naDu5Ja+nUZ+iaPxJzaO5xNctRuZdG06y3HniPa528I=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl
                          rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 00:01:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1306 (0x51a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B4BF, serialNumber=8035090A057327E1200593C20C88C519A45C9ECB
        Validity
            Not Before: Jun 13 00:01:29 2026 GMT
            Not After : Jun 20 00:01:29 2026 GMT
        Subject: CN=6a2c9dd9-3dfa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ad:63:e8:6c:00:eb:b5:4c:10:23:dc:c6:10:
                    98:2b:aa:ec:ca:d9:de:47:8e:45:16:5f:dc:e8:67:
                    37:f9:3b:f5:84:15:14:97:35:70:92:56:8e:27:07:
                    c7:61:25:fe:82:3a:2c:0c:05:e1:ca:68:15:95:fa:
                    3c:ae:ae:5a:0a:6a:c4:67:69:31:e0:20:d1:c9:41:
                    a4:f1:ba:ce:fe:6f:e2:d1:a0:fc:30:a8:5c:01:1f:
                    49:3b:8c:e2:32:9d:e7:66:a9:78:0e:37:11:99:c9:
                    7a:06:0f:3d:7f:e9:d0:ef:6d:75:d7:88:72:2a:0c:
                    38:2d:d0:43:ce:59:c4:fe:07:5f:9a:18:98:42:80:
                    36:e7:2f:cc:4f:f5:2a:82:ba:48:19:90:09:a3:d4:
                    c9:8b:bb:9f:32:34:53:f1:9c:04:ed:a6:e2:84:95:
                    78:82:60:58:b3:58:39:e0:c0:69:32:e8:22:7e:e6:
                    8c:79:84:e9:6a:7c:b8:b9:b9:16:5a:b8:de:8d:d3:
                    43:02:f1:c9:76:ac:6a:8c:5d:43:56:7d:24:6b:26:
                    cb:cc:4a:06:92:d0:00:28:f8:d6:3b:b0:87:b2:d2:
                    2a:ff:20:94:da:12:34:e0:62:8c:0e:6f:34:4f:48:
                    9f:7b:5a:af:e9:cb:f6:fa:37:52:fd:04:f2:11:ee:
                    be:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:9E:FF:D0:71:AA:9A:A4:E7:DE:B7:ED:87:A0:52:10:83:D4:C4:86
            X509v3 Authority Key Identifier:
                keyid:80:35:09:0A:05:73:27:E1:20:05:93:C2:0C:88:C5:19:A4:5C:9E:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/gDUJCgVzJ-EgBZPCDIjFGaRcnss.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B4BF/B8CC693C855C11EC8E3CBB51C4F9AE02/gDUJCgVzJ-EgBZPCDIjFGaRcnss.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         42:0c:a6:0c:0b:b6:f1:30:bc:f4:ea:11:98:14:26:12:a9:b2:
         f3:35:cf:0d:71:40:46:07:d1:33:e6:27:12:2a:c8:1b:15:cd:
         b0:11:4a:ce:ec:f3:79:17:f0:98:e0:aa:21:55:5b:bb:d9:e8:
         e8:c0:96:b8:e9:92:ea:5a:1f:fd:ea:fd:af:f0:35:ba:53:78:
         6f:04:43:6f:70:1d:63:bd:22:dc:16:6c:9f:ee:b2:71:7d:da:
         02:c8:94:82:78:74:72:22:fb:a3:9e:82:8e:c3:0d:ec:23:7a:
         15:50:67:4c:e1:63:da:f8:25:8b:79:3d:6a:dd:32:37:79:5f:
         37:6d:80:ea:81:67:b0:17:c3:7f:3f:cc:f6:6e:d3:3c:ae:eb:
         d4:bb:bf:7f:74:cf:aa:b8:c7:da:7a:0f:87:f5:0c:e4:24:5d:
         ce:2f:ab:d4:66:c0:0e:8e:0b:19:7f:4c:30:18:5b:87:5a:76:
         72:1f:f1:bd:a4:cc:9c:8c:71:0a:1f:99:01:34:ed:90:62:c7:
         a4:26:d0:32:6e:20:83:75:89:7c:d1:3a:03:bd:8d:50:74:bb:
         7a:cd:65:44:43:09:5f:ec:c4:6e:bf:65:35:c8:60:53:16:65:
         8e:aa:ae:d8:a6:e0:ae:5f:20:1d:bd:f3:5a:4d:3e:c4:eb:7e:
         4a:02:c9:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:02:45 2026 by rpki-client