Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
File:                     DEft4wSONabm6MsM5E_IQ3Jx6z0.mft (raw, json)
Hash identifier:          P3MatgBCe/N3/cwi83YuCa9Vrm8MRGOpZ9p1WLLJf9w=
Subject key identifier:   B7:69:D4:E1:9E:F0:2E:F4:A3:48:30:69:A1:4A:88:4A:CB:1B:12:58
Authority key identifier: 0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D
Certificate issuer:       /CN=A917B51E/serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
Certificate serial:       0863
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
Manifest number:          0854
Signing time:             Fri 12 Jun 2026 20:57:12 +0000
Manifest this update:     Fri 12 Jun 2026 20:57:11 +0000
Manifest next update:     Fri 19 Jun 2026 20:57:11 +0000
Files and hashes:         1: DEft4wSONabm6MsM5E_IQ3Jx6z0.crl (hash: ElxYTweL2gOM85YcSYP5supNERIyQIsrEU74IA9nuC8=)
                          2: 14A07D30471311F19B113D2AB6833773.roa (hash: fUh2AiarNXoPoSVmypkRGnI1/s42TFsqo07HLDcGx28=)
                          3: EFA17F260FEA11EB8FA8CB2AC4F9AE02.roa (hash: cS9P0z7dDiA5PKWA9E8ZS1PiuXhbrp90oxZjGnxOroU=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl
                          rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 20:57:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2147 (0x863)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917B51E, serialNumber=0C47EDE3048E35A6E6E8CB0CE44FC8437271EB3D
        Validity
            Not Before: Jun 12 20:57:11 2026 GMT
            Not After : Jun 19 20:57:11 2026 GMT
        Subject: CN=6a2c72a8-bf14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:43:a5:d2:3b:15:42:42:37:90:b7:60:8e:e9:
                    00:0c:87:de:05:c5:f0:12:bd:a9:b2:87:95:2a:88:
                    98:15:0a:cd:92:cc:31:0c:43:77:81:f0:4c:5e:2c:
                    ee:b2:9d:c6:18:10:d1:6f:9b:2b:69:86:71:d8:3b:
                    41:86:ee:a7:40:fb:5a:37:3b:08:bb:20:0b:7f:c6:
                    15:8f:57:5f:29:81:d4:fa:5e:a9:c7:9c:68:c5:bd:
                    fa:bd:b6:ba:e8:94:24:0a:f7:cf:b4:d5:8b:d0:50:
                    2e:80:66:ed:15:d7:21:24:59:82:04:0f:4c:94:5d:
                    3c:db:2e:ed:b6:61:8b:0d:b3:69:cb:58:a0:62:d5:
                    7a:a0:d7:ce:0b:0d:82:b2:df:69:16:2c:06:89:83:
                    bc:76:90:91:a0:03:aa:6e:13:62:57:50:4a:87:db:
                    40:c6:4f:61:6e:8d:89:8b:c7:bc:5e:17:7a:2d:49:
                    51:96:bb:9d:51:6f:6a:6e:04:8b:12:fc:84:50:ed:
                    d6:b4:bc:7a:2a:77:24:94:c9:d7:58:09:80:7b:e3:
                    e3:f4:5e:2d:0f:16:b2:67:65:e4:80:db:6a:db:b1:
                    23:6b:8d:6a:fe:39:bd:7f:8d:6c:47:30:a1:1f:17:
                    1c:a8:76:9d:86:23:9c:7d:d1:19:16:7c:be:51:cb:
                    3b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:69:D4:E1:9E:F0:2E:F4:A3:48:30:69:A1:4A:88:4A:CB:1B:12:58
            X509v3 Authority Key Identifier:
                keyid:0C:47:ED:E3:04:8E:35:A6:E6:E8:CB:0C:E4:4F:C8:43:72:71:EB:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DEft4wSONabm6MsM5E_IQ3Jx6z0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917B51E/59CDD54A0FE911EB9F30C725C4F9AE02/DEft4wSONabm6MsM5E_IQ3Jx6z0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         1c:c3:f4:d2:74:08:4c:9e:9b:cd:d3:6e:26:c4:20:b3:38:dd:
         de:45:29:33:a2:1a:31:43:5b:65:60:aa:98:3d:43:30:0e:46:
         58:f4:63:69:8c:b8:30:89:0f:7c:7d:5e:ca:9f:b6:b0:ba:4e:
         0e:ad:fd:97:10:ab:c5:22:49:1d:a5:1e:11:40:78:31:4d:fa:
         cf:6c:40:6d:67:bc:8c:8e:34:ec:4c:36:1a:81:a9:ac:86:08:
         91:4f:4b:d0:c3:45:ae:97:74:da:f1:f3:71:41:8a:5e:ff:fb:
         bf:27:eb:12:c6:93:7d:35:4a:56:83:c6:0c:3a:11:02:b6:48:
         dc:47:d7:9c:9f:18:e1:1d:00:82:39:ae:e6:93:0e:ba:c8:b9:
         6d:ed:2d:68:73:32:a2:48:4b:07:d0:61:74:1a:c7:f3:b9:1e:
         14:74:76:f4:13:fc:14:31:dd:54:47:f1:7d:b4:7c:3d:ab:9b:
         24:ef:2c:ab:67:f1:67:ea:30:25:f1:08:2d:e3:3a:d3:2c:18:
         0a:a4:7f:54:c7:8e:28:2e:03:d2:a2:0a:e0:5d:62:92:19:a0:
         dc:38:29:b2:b1:f5:97:63:ef:2f:4d:97:26:f3:5e:8c:7d:ef:
         fd:9c:30:93:cf:03:d4:60:60:d7:2a:84:d2:4c:f6:6c:11:01:
         6a:62:21:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:51:22 2026 by rpki-client