Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
File:                     Crfzan3eThH0sBWX3w3nopqAvEQ.mft (raw, json)
Hash identifier:          Oq9fnotqr1GQecGB5EoAYXnwaTcOqrAl6RBP6KT3I0k=
Subject key identifier:   61:06:E0:5F:68:E0:18:ED:74:12:89:2A:85:8E:A1:E0:AB:98:5F:25
Authority key identifier: 0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44
Certificate issuer:       /CN=A917F352/serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
Certificate serial:       01D4
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
Manifest number:          01CF
Signing time:             Sat 13 Jun 2026 03:40:54 +0000
Manifest this update:     Sat 13 Jun 2026 03:40:54 +0000
Manifest next update:     Sat 20 Jun 2026 03:40:54 +0000
Files and hashes:         1: Crfzan3eThH0sBWX3w3nopqAvEQ.crl (hash: 7++fCQGIIXGleUCR3XNCKLIbJvFMEc38udH2Z0XsgsE=)
                          2: 8FE6CF86A1FB11EE9773325BC4F9AE02.roa (hash: EKPU0/AVx4ogOD/y6RGHP5DA9TFTJpQujmauSCRh10c=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl
                          rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 20 Jun 2026 03:40:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 468 (0x1d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A917F352, serialNumber=0AB7F36A7DDE4E11F4B01597DF0DE7A29A80BC44
        Validity
            Not Before: Jun 13 03:40:54 2026 GMT
            Not After : Jun 20 03:40:54 2026 GMT
        Subject: CN=6a2cd146-759b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c7:80:75:7e:15:66:af:f6:89:9f:b2:92:b3:
                    ff:63:33:7e:01:bf:12:63:98:e1:4d:2d:83:e0:a9:
                    1f:b0:b2:4a:03:1a:96:77:26:3d:2f:28:7c:a6:e7:
                    58:23:49:80:c2:69:37:fc:10:d7:aa:62:71:2c:6b:
                    fb:ed:cc:69:4a:39:6d:a2:99:9b:77:10:bc:bb:a0:
                    b8:6d:80:e3:df:16:d4:51:4e:d8:7f:14:18:8d:5a:
                    4a:b9:17:c7:38:c3:5b:d9:88:d1:70:44:e3:fa:97:
                    d5:35:99:11:e7:fc:a0:70:28:01:f1:6a:41:3f:35:
                    43:cb:f2:3a:b8:28:74:95:4a:1f:23:49:83:54:f4:
                    5a:cb:b6:30:3f:79:81:86:aa:13:55:0e:8b:8f:00:
                    80:07:50:e6:91:94:e9:1c:c2:e1:f0:d6:36:45:76:
                    5b:5c:9b:a3:ba:83:e0:d8:a7:3c:c0:04:fe:a8:da:
                    6a:d3:6c:ad:19:02:1c:21:a1:f4:96:3f:38:31:3d:
                    32:40:7e:81:4c:19:5f:69:99:47:be:43:65:66:48:
                    23:f7:84:13:10:d5:10:22:27:7d:40:b9:d5:76:e9:
                    2c:fc:7a:eb:e3:6a:48:a5:fe:50:c3:a0:ab:9a:68:
                    c2:08:04:5a:89:6f:27:68:ae:7f:3b:df:b9:ea:0f:
                    65:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:06:E0:5F:68:E0:18:ED:74:12:89:2A:85:8E:A1:E0:AB:98:5F:25
            X509v3 Authority Key Identifier:
                keyid:0A:B7:F3:6A:7D:DE:4E:11:F4:B0:15:97:DF:0D:E7:A2:9A:80:BC:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/Crfzan3eThH0sBWX3w3nopqAvEQ.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A917F352/3D9D7F5EA1FB11EEA360925AC4F9AE02/Crfzan3eThH0sBWX3w3nopqAvEQ.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         6a:fc:cd:e8:0a:9c:10:83:b8:c0:43:2e:56:e0:2c:49:2f:f0:
         6c:81:3c:00:cf:79:d2:4d:3e:7b:3d:24:cf:79:1e:39:9e:94:
         c2:6a:93:bd:64:51:0c:8d:d2:d8:f7:71:c6:1c:c5:86:ae:e9:
         e9:97:34:c9:e9:e9:af:e4:75:30:70:d6:22:09:c7:14:75:47:
         dd:fc:af:db:35:f3:b5:75:36:29:c3:8e:f0:da:87:e9:ce:ab:
         42:f1:03:9c:f8:dd:9a:5c:ae:89:bc:ee:c4:e6:19:69:7b:03:
         08:31:43:3e:83:23:ee:dc:64:55:aa:b1:9b:8e:e9:0d:c8:36:
         79:7f:07:89:47:87:c5:f5:8e:cb:5e:8c:d7:e8:c6:de:a3:f9:
         12:41:cf:31:45:ab:11:c8:d7:f3:c6:26:3f:8f:c7:b0:cc:e9:
         9c:e9:57:3a:20:36:9c:85:2f:10:7b:d4:52:45:dc:d4:73:0b:
         e6:3f:ef:bb:3f:8f:e3:7a:15:e2:51:93:c5:71:28:ba:0b:17:
         7c:d5:ac:af:d5:bf:07:11:61:12:ea:97:05:c0:a8:63:29:5d:
         4d:14:de:d3:98:2a:cd:ae:0a:ab:93:4e:e0:23:1a:85:0b:34:
         08:a4:fb:51:22:ea:95:bd:97:71:bd:98:ac:b0:09:6a:38:ad:
         17:13:16:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 02:17:01 2026 by rpki-client