Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
File:                     ThD-F0ftpqu7vywhMNtFVE5tMp8.mft (raw, json)
Hash identifier:          RCfKr0Og62viNmNAnNvfJwV1KLfEmmBeWLMUYJMHjPs=
Subject key identifier:   20:0D:AC:DD:85:A2:6F:D0:61:A7:64:2E:D3:4A:19:53:66:B3:28:46
Authority key identifier: 4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F
Certificate issuer:       /CN=A917D586/serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
Certificate serial:       2021
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
Manifest number:          1FF5
Signing time:             Fri 12 Jun 2026 15:56:56 +0000
Manifest this update:     Fri 12 Jun 2026 15:56:56 +0000
Manifest next update:     Fri 19 Jun 2026 15:56:56 +0000
Files and hashes:         1: ThD-F0ftpqu7vywhMNtFVE5tMp8.crl (hash: RdtsZ4vQYXgKrG9mS26B3WnupHZH+42YeFpOrso7laQ=)
                          2: 41733D483DAC11EE8D884D6AC4F9AE02.roa (hash: iYBhniNMDK4Ta8s80jc754k/NLgBpZwzYFFo6cTU2CI=)
                          3: BE82D1863DAC11EEB6C9226BC4F9AE02.roa (hash: 3FqVhcILKyx1ie/mCdr5JeGQHFvwQQEyZoxdiLnn9AY=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl
                          rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 19 Jun 2026 15:56:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8225 (0x2021)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917D586, serialNumber=4E10FE1747EDA6ABBBBF2C2130DB45544E6D329F
        Validity
            Not Before: Jun 12 15:56:56 2026 GMT
            Not After : Jun 19 15:56:56 2026 GMT
        Subject: CN=6a2c2c48-78d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:fe:4f:8c:32:f2:d5:3d:5c:9f:3a:38:fc:1f:
                    48:6c:8a:12:66:c7:69:12:b6:81:88:31:09:ca:ab:
                    2e:ae:44:9f:d3:d3:65:f3:ee:b5:b5:0a:22:d8:2f:
                    85:85:95:24:14:5f:81:95:f2:2c:64:51:d0:06:cb:
                    13:44:b3:b2:57:f8:45:67:5f:6e:2c:bf:6d:22:b1:
                    b6:31:d6:5b:3a:cf:f4:6f:e1:5e:e7:14:52:40:8a:
                    83:07:21:51:2a:2e:be:96:a9:18:aa:39:13:91:68:
                    38:2d:78:b8:2a:63:8f:74:f2:a0:8b:4d:08:5b:a0:
                    de:df:ec:d6:91:5a:b1:da:41:bc:c0:67:7d:e7:cb:
                    7e:c7:87:98:5d:cd:a1:58:5a:7c:21:64:d9:bf:df:
                    e1:6e:fb:89:86:3c:8b:b6:3c:9b:c9:7d:cc:19:80:
                    b6:50:93:85:e4:6a:53:fe:d2:aa:03:5b:4b:d6:f7:
                    5e:44:54:a3:60:c2:5e:b1:33:36:dc:44:c2:09:65:
                    88:ba:41:c2:56:18:ba:e3:0f:47:07:9b:d0:4b:cf:
                    f7:d1:24:08:d6:7a:7f:f2:ca:57:e4:0f:79:8a:cf:
                    9a:1f:34:b0:ef:18:c1:19:7d:2a:88:6a:fd:89:45:
                    50:52:84:b4:34:9b:48:97:64:02:34:69:0d:40:dd:
                    ca:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0D:AC:DD:85:A2:6F:D0:61:A7:64:2E:D3:4A:19:53:66:B3:28:46
            X509v3 Authority Key Identifier:
                keyid:4E:10:FE:17:47:ED:A6:AB:BB:BF:2C:21:30:DB:45:54:4E:6D:32:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ThD-F0ftpqu7vywhMNtFVE5tMp8.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917D586/8F00C6B6552E11E685042142C4F9AE02/ThD-F0ftpqu7vywhMNtFVE5tMp8.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         10:ad:58:d8:f4:63:38:8d:b6:a8:97:f4:d3:7d:7b:27:8b:13:
         c0:fa:7e:72:fc:0c:27:a0:a4:2f:8c:93:44:56:cf:cf:fe:3f:
         a3:c6:04:1a:06:4d:0a:1f:d3:d5:11:d7:5c:d0:4b:90:52:78:
         1e:12:59:dc:40:58:a9:54:6e:6c:18:ce:2b:db:2d:17:0a:a5:
         d5:71:59:cf:b8:9f:1c:17:e1:1e:92:0a:a3:1b:1b:c1:43:8c:
         28:79:08:08:40:5f:fd:f9:11:cb:99:81:01:4b:e2:a1:31:e2:
         5b:b5:ac:5e:74:15:a4:f7:40:a3:13:e9:03:2d:7b:88:a6:96:
         1f:b0:cb:6d:91:b8:95:45:2e:8b:62:ec:1a:ea:8a:06:ab:24:
         77:6a:58:8b:89:82:fe:67:8e:55:08:7c:71:5c:12:3e:c6:a0:
         d1:7b:b1:39:de:d0:1e:17:9b:51:7e:57:25:d5:24:4a:a0:1f:
         ee:9a:23:87:04:5d:ab:5a:a4:59:19:79:be:95:10:aa:64:90:
         74:86:ba:3b:54:de:44:5b:99:04:f3:4d:55:95:3a:99:91:a8:
         f2:7b:51:34:ce:87:43:2d:47:8a:12:61:df:75:7e:5f:fe:30:
         0f:12:c2:fb:c4:27:67:dd:3d:73:f2:f4:50:ce:5b:29:f9:ef:
         54:4a:05:fb
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgICICEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
N0Q1ODYxMTAvBgNVBAUTKDRFMTBGRTE3NDdFREE2QUJCQkJGMkMyMTMwREI0NTU0
NEU2RDMyOUYwHhcNMjYwNjEyMTU1NjU2WhcNMjYwNjE5MTU1NjU2WjAYMRYwFAYD
VQQDEw02YTJjMmM0OC03OGQ5MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEA4/5PjDLy1T1cnzo4/B9IbIoSZsdpEraBiDEJyqsurkSf09Nl8+61tQoi2C+F
hZUkFF+BlfIsZFHQBssTRLOyV/hFZ19uLL9tIrG2MdZbOs/0b+Fe5xRSQIqDByFR
Ki6+lqkYqjkTkWg4LXi4KmOPdPKgi00IW6De3+zWkVqx2kG8wGd958t+x4eYXc2h
WFp8IWTZv9/hbvuJhjyLtjybyX3MGYC2UJOF5GpT/tKqA1tL1vdeRFSjYMJesTM2
3ETCCWWIukHCVhi64w9HB5vQS8/30SQI1np/8spX5A95is+aHzSw7xjBGX0qiGr9
iUVQUoS0NJtIl2QCNGkNQN3KawIDAQABo4ICczCCAm8wHQYDVR0OBBYEFCANrN2F
om/QYadkLtNKGVNmsyhGMB8GA1UdIwQYMBaAFE4Q/hdH7aaru78sITDbRVRObTKf
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3RDU4Ni84RjAwQzZCNjU1
MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBxdTd2eXdoTU50RlZFNXRN
cDguY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy
RkQxRkYyL1RoRC1GMGZ0cHF1N3Z5d2hNTnRGVkU1dE1wOC5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGQBggrBgEFBQcBCwSBgzCBgDB+BggrBgEFBQcw
C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE3
RDU4Ni84RjAwQzZCNjU1MkUxMUU2ODUwNDIxNDJDNEY5QUUwMi9UaEQtRjBmdHBx
dTd2eXdoTU50RlZFNXRNcDgubWZ0MBUGCCsGAQUFBwEIAQH/BAYwBKACBQAwIQYI
KwYBBQUHAQcBAf8EEjAQMAYEAgABBQAwBgQCAAIFADANBgkqhkiG9w0BAQsFAAOC
AQEAEK1Y2PRjOI22qJf00317J4sTwPp+cvwMJ6CkL4yTRFbPz/4/o8YEGgZNCh/T
1RHXXNBLkFJ4HhJZ3EBYqVRubBjOK9stFwql1XFZz7ifHBfhHpIKoxsbwUOMKHkI
CEBf/fkRy5mBAUvioTHiW7WsXnQVpPdAoxPpAy17iKaWH7DLbZG4lUUui2LsGuqK
Bqskd2pYi4mC/meOVQh8cVwSPsag0XuxOd7QHhebUX5XJdUkSqAf7pojhwRdq1qk
WRl5vpUQqmSQdIa6O1TeRFuZBPNNVZU6mZGo8ntRNM6HQy1HihJh33V+X/4wDxLC
+8QnZ909c/L0UM5bKfnvVEoF+w==
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:27:20 2026 by rpki-client